Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: ZAH4oUEo3T2Ru77PbGSDsXqpl3WNBeP8y11qyf1EkL0=
Subject key identifier: 02:90:0C:4C:5E:90:A3:43:61:83:AD:F3:C3:75:47:42:07:3C:25:AE
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 01A08AF9ECE3AB16F6BEEBEDDB08B7768CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 11:00:29 +0000
Manifest this update: Thu 10 Sep 2026 11:00:29 +0000
Manifest next update: Fri 11 Sep 2026 11:00:29 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: hmmD2dUvU6bT6IrvxDRMvEofLG9/i/DAdQb2aOq2JxE=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:ec:e3:ab:16:f6:be:eb:ed:db:08:b7:76:8c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Sep 10 11:00:29 2026 GMT
Not After : Sep 11 11:00:29 2026 GMT
Subject: CN=02900c4c5e90a3436183adf3c3754742073c25ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:07:8a:b7:72:f1:e7:82:9c:09:3a:6a:39:
0a:57:0f:25:1e:5a:c2:13:21:4c:70:c6:05:1b:9e:
67:37:e1:a8:db:24:d9:73:56:b6:bf:50:e5:2b:bb:
95:db:35:d2:1e:9f:8e:91:de:01:fa:df:90:65:06:
b2:0f:17:d1:f6:84:3e:cf:1f:a3:c1:7d:58:5e:9a:
26:8e:84:e1:53:75:d1:59:33:c2:12:36:53:41:8a:
7f:70:e8:9d:0a:59:3d:01:c3:a6:80:22:eb:39:6c:
b1:f7:fc:eb:ab:52:41:ec:08:ae:fd:28:e2:bf:8b:
75:8b:51:7a:f8:71:81:c2:b2:18:df:8a:fb:a2:16:
e7:2d:8f:24:81:9d:f1:64:06:fd:d3:ea:dc:e5:78:
f1:3b:cc:7d:81:3d:fa:5c:38:c3:30:78:f1:87:7a:
cc:f9:f3:89:cd:5a:25:7a:ab:a7:f2:88:e4:14:4a:
ad:30:68:4c:b9:44:f0:c2:c5:29:aa:04:78:f2:a6:
34:77:7b:80:c1:c6:40:f7:5f:2f:31:93:73:0a:5c:
34:04:ee:60:ac:21:a2:6f:47:19:75:68:c5:ec:0c:
71:88:00:c8:44:d8:6a:fa:47:c0:bc:16:ce:7f:e5:
bb:29:6a:08:0f:b9:50:3b:57:21:0d:5b:d7:ce:ef:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:0C:4C:5E:90:A3:43:61:83:AD:F3:C3:75:47:42:07:3C:25:AE
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8c:15:0b:48:be:12:b2:fc:cc:55:4e:e2:9a:9a:c4:9b:d5:
13:c2:bf:87:f1:83:14:d8:a3:53:c1:18:ca:79:42:5c:99:7a:
e6:48:e7:09:99:39:4f:99:65:b1:03:3c:eb:f4:70:f9:53:c3:
d4:4f:be:be:6c:ef:21:d9:48:9b:c9:33:27:29:3b:da:44:77:
4d:0a:44:94:95:41:53:4c:e6:fb:09:1b:a2:6e:ca:49:a6:ad:
26:48:97:67:3c:e6:be:26:cb:90:51:cc:d2:b8:4a:12:c0:aa:
2a:3c:8a:65:44:d3:f4:30:11:39:0b:e4:40:0e:9e:fe:38:fa:
d7:a9:0d:a2:df:77:7e:a6:c6:51:ba:1c:ba:2e:78:a2:0d:e1:
b5:b0:9d:e0:86:74:0e:2c:d4:23:23:d5:87:8c:7a:5b:b6:fa:
94:6d:13:81:e5:d4:b6:94:62:ac:9c:f9:ef:0d:83:21:1d:dd:
ec:7d:7e:48:65:40:39:55:1e:15:ad:58:ee:f4:a5:61:b5:4e:
f7:b1:aa:4f:a7:ad:5f:e5:b2:fb:3e:c0:c5:d4:5f:ca:ec:67:
95:23:ee:29:8d:0c:88:24:50:79:b5:a0:43:c9:0e:d5:b8:71:
0e:c5:3a:45:fe:69:93:0f:42:01:8b:a7:c9:77:66:28:a0:b1:
e2:94:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:52 2026 by rpki-client