Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
File: lrrMW97hlpQXoUa8RYZbRascN3c.mft (raw, json)
Hash identifier: 0E95gGHlHsqApgPlUneyA6pD3Mwb2NpsNZzZ99bdsM0=
Subject key identifier: C3:80:63:E1:D2:3D:07:0B:E3:8D:56:34:BD:14:96:C2:60:D9:52:41
Authority key identifier: 96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
Certificate issuer: /CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Certificate serial: 01A0EB1CBD3434FDE0BCEBAAD6EC30694514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
Manifest number: 91
Signing time: Tue 29 Sep 2026 03:02:04 +0000
Manifest this update: Tue 29 Sep 2026 03:02:04 +0000
Manifest next update: Wed 30 Sep 2026 03:02:04 +0000
Files and hashes: 1: Pgpyk-hrzki9Ic59DdPNuzjskEw.asa (hash: Fu0SEp/DMSPXcJMhtPEEsmMFFRDBhn8d7ifvtyYjfQA=)
2: lrrMW97hlpQXoUa8RYZbRascN3c.crl (hash: ysG9faqsCNWQ1SOJh4mTdRz8u7U/ZW1DS5U4NA6kFDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:bd:34:34:fd:e0:bc:eb:aa:d6:ec:30:69:45:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Validity
Not Before: Sep 29 03:02:04 2026 GMT
Not After : Sep 30 03:02:04 2026 GMT
Subject: CN=c38063e1d23d070be38d5634bd1496c260d95241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:20:60:83:e6:ce:d5:eb:0b:cf:3d:22:60:
5e:b9:6f:d1:4d:92:38:44:06:d9:78:56:60:e5:ef:
de:94:d9:a1:c0:d3:21:dd:ca:ae:21:08:ba:fb:d4:
99:5a:d2:67:7c:6a:14:50:d7:45:31:d5:b4:2d:56:
4a:74:a0:86:5f:e6:78:d5:d8:8d:6f:cd:f6:30:75:
6b:d4:09:9d:a8:f6:62:6e:da:38:b2:95:be:9b:b7:
01:02:2f:2b:1a:ed:c6:0d:f2:77:4a:80:43:d9:4c:
1d:ba:eb:52:43:8d:1a:1d:fb:d6:a6:1f:64:cf:9b:
c1:11:8d:0b:c1:95:ba:83:c5:3a:d0:c7:15:b8:9c:
22:19:84:31:1f:d3:59:b8:d8:58:77:95:e4:4e:ad:
3a:f7:11:a3:35:70:85:b4:1e:bf:b7:6b:eb:29:36:
33:ca:1a:b8:c1:90:62:95:23:72:e9:79:ab:d9:e6:
e5:a0:65:be:f9:b2:77:c7:5a:63:12:3b:00:16:d3:
a2:07:26:cc:41:aa:08:0f:f1:a2:91:8d:f0:3b:66:
18:0b:f1:88:08:8b:84:37:6c:68:f5:41:b8:eb:1c:
04:3c:a6:96:68:b7:72:46:ef:2f:7d:96:d0:0e:c2:
69:d2:82:a2:5c:c1:f1:34:ff:70:f6:42:63:0c:ba:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:63:E1:D2:3D:07:0B:E3:8D:56:34:BD:14:96:C2:60:D9:52:41
X509v3 Authority Key Identifier:
keyid:96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:f7:92:d2:d1:4d:1a:98:c0:f5:0f:00:2a:de:36:4d:b3:
2a:11:77:20:95:7d:fe:5f:6f:f9:32:3d:16:66:f2:b9:41:13:
20:5b:d6:8f:dd:ab:ba:78:94:6e:e3:85:db:2e:33:3c:cb:63:
25:6f:3e:f7:f1:f3:15:ca:62:96:9d:e4:de:08:6e:bd:a3:51:
47:f3:ce:d3:d1:70:d9:49:2b:2d:43:aa:47:09:20:f1:dd:71:
92:e9:bc:a7:bb:1d:72:fd:62:e8:b2:1f:41:b2:2e:95:59:f8:
3b:35:e4:43:31:b3:42:8a:d5:d3:ca:39:b4:d1:72:ff:e4:79:
ee:cc:3b:b5:85:b4:4e:6c:9b:17:95:bd:d1:46:21:5b:2e:b9:
cf:6f:0a:04:b4:67:86:d5:23:d9:18:8d:a2:a5:b6:ea:b6:76:
02:47:df:f5:5b:d3:94:df:a6:27:70:04:04:e9:2f:c9:84:13:
b3:27:d7:06:21:9a:b1:36:26:99:a6:60:ec:71:68:e4:43:1e:
f8:2b:2f:ae:3f:d8:5d:13:eb:20:87:aa:d9:23:15:d9:d5:d0:
04:13:ca:59:45:1e:6f:95:ea:d8:98:18:0f:61:ab:9d:e7:95:
e9:b7:61:19:1a:42:94:07:9d:de:d9:e7:2e:e2:57:44:40:fd:
e9:87:05:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:00:09 2026 by rpki-client