Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File: lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier: 9VPd2Oo+0oXhE4IFFFEysiuTrXccED20KdlYF/lPOpw=
Subject key identifier: 23:B8:D8:72:5D:2B:C8:D3:5B:A7:96:CF:5B:5A:84:DC:D3:D7:A2:A9
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer: /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial: 01A0EE1D71CCD8D82F1034EA387C9D74E0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number: 026D
Signing time: Tue 29 Sep 2026 17:01:42 +0000
Manifest this update: Tue 29 Sep 2026 17:01:42 +0000
Manifest next update: Wed 30 Sep 2026 17:01:42 +0000
Files and hashes: 1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: h+fg70IsbURzkUvvgOCeVoZuko8xHOLyCzF5TKDXWJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:71:cc:d8:d8:2f:10:34:ea:38:7c:9d:74:e0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Validity
Not Before: Sep 29 17:01:42 2026 GMT
Not After : Sep 30 17:01:42 2026 GMT
Subject: CN=23b8d8725d2bc8d35ba796cf5b5a84dcd3d7a2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:17:30:12:99:e2:7a:81:4e:e3:eb:01:3c:
f0:bf:6e:9d:8b:21:ae:9c:12:4b:12:b5:e7:d2:4f:
10:8d:82:e6:95:b2:84:7f:22:48:67:90:4c:fd:d4:
a9:ba:e4:9f:a3:3e:ec:28:67:dd:a7:e0:c8:a3:d4:
f7:68:6c:9a:58:b6:07:a4:6b:f4:ca:9f:94:9d:29:
21:1a:3a:e9:99:35:ef:4b:65:be:15:38:50:7f:a2:
02:bc:78:0c:0d:85:d6:9e:8b:cd:4d:f8:59:50:aa:
5c:2d:23:f3:10:36:46:14:f6:6d:bf:bc:5d:5e:19:
c8:c1:b5:b8:d0:92:4c:75:1e:ff:f6:65:de:0f:c3:
44:83:46:8e:6f:36:88:cd:9b:07:9d:78:29:20:ed:
aa:66:d4:20:b0:66:c9:46:ec:fa:ea:03:57:83:6e:
62:cf:f0:b5:74:2c:1c:8d:bc:a2:50:89:1b:45:9f:
1f:4c:74:9f:d1:cc:36:b8:c3:c1:62:e6:54:82:81:
25:d4:e0:92:ff:de:62:76:f0:8d:ff:e3:c6:25:e4:
86:66:fc:88:15:97:b2:8e:f5:5d:80:46:be:3e:84:
9b:31:62:21:76:42:d1:31:83:62:0b:b6:be:0a:b2:
75:0a:58:bf:7a:14:94:97:82:b8:60:b3:2f:9d:c7:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:D8:72:5D:2B:C8:D3:5B:A7:96:CF:5B:5A:84:DC:D3:D7:A2:A9
X509v3 Authority Key Identifier:
keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:28:be:e0:f5:49:b2:7d:e2:69:e5:3c:58:b1:93:6c:0b:
1f:d4:64:de:94:49:8a:03:29:96:e2:36:2e:0a:46:3b:9d:8f:
68:93:12:b8:09:8b:78:a4:af:c3:84:f5:33:61:f7:e3:50:8a:
41:01:99:ea:c0:b8:22:5a:12:66:fb:8f:9b:fe:04:01:69:75:
f8:d7:51:1e:bb:17:1f:9d:69:1e:08:51:1b:83:68:b2:8c:57:
10:19:0d:eb:3a:4b:63:dd:59:7a:33:8a:97:f2:a9:a6:f9:56:
1e:70:9f:09:e0:10:f8:ae:9d:2b:f0:5b:a2:25:8d:e5:8c:6b:
2b:17:5b:44:e7:e9:f4:70:85:47:fa:db:a1:d2:b5:c4:88:d7:
8a:62:4e:42:d8:7a:cd:67:56:6b:43:34:47:61:01:ef:0f:8a:
2d:07:76:8a:a2:76:24:c4:36:6c:35:e4:4b:dd:51:60:c4:8b:
f1:f9:f3:2f:8a:61:ec:e3:cf:2f:46:5d:43:1d:f2:35:dd:26:
42:d5:4a:03:0a:24:1d:1f:9c:97:ed:c5:48:7d:63:c5:d7:e0:
ab:cf:e7:db:45:b2:b1:b2:11:89:65:7f:65:0c:dd:94:ee:ae:
85:ec:94:c5:31:a4:e9:be:4c:b5:90:c0:6e:56:3d:96:31:95:
23:cd:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:01:15 2026 by rpki-client