Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: W7tE4tW5y4zPH1wCpgnPwHcV8k1PkkVdViF0UUBRB5o=
Subject key identifier: DA:B8:65:FD:65:87:A7:65:EB:F3:41:61:D2:E9:1A:43:B4:C1:CE:61
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 01A134EC7E39AE037F78F78F5927184696D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 11:01:16 +0000
Manifest this update: Tue 13 Oct 2026 11:01:16 +0000
Manifest next update: Wed 14 Oct 2026 11:01:16 +0000
Files and hashes: 1: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 3owTP16vFnvF6RvocUI0n+8+GiPtwony3U2HAg+uHoY=)
2: fRifEZefvRsk6jclv7pVpILB6hQ.roa (hash: XNNUYM/7petSjasXKNt7qFQhJMSQer6H9QEr1epnmY8=)
3: yDFjBcpO_rK8R2DYPm8fJ39oFdA.roa (hash: B955P2LGm+p4uxnj3O6YVa6b5/IJbwPos+qiuEjVJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:7e:39:ae:03:7f:78:f7:8f:59:27:18:46:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Oct 13 11:01:16 2026 GMT
Not After : Oct 14 11:01:16 2026 GMT
Subject: CN=dab865fd6587a765ebf34161d2e91a43b4c1ce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:5f:e7:88:a6:07:c0:8d:47:9f:5f:2e:44:
ce:63:96:e1:b1:90:c5:a4:f1:a5:8e:75:f4:75:15:
07:99:1b:33:05:12:32:f6:70:89:d7:20:b8:f8:6d:
46:b4:36:e5:a7:85:90:03:64:4a:d9:41:49:fd:29:
46:a7:28:a6:c5:f4:6b:b5:25:dc:3a:8f:1b:df:8e:
74:b0:4b:32:89:a1:dc:2a:53:5d:9b:dc:3f:7b:63:
99:06:5f:98:ba:46:83:57:2d:aa:c6:e1:9c:0b:42:
a2:02:c3:66:c9:b5:78:fb:93:51:80:27:05:17:23:
87:c5:0a:24:2e:80:82:28:53:6f:9f:8e:5a:42:f1:
4f:a5:95:8d:37:3a:29:77:3e:67:54:ce:de:74:a8:
c8:98:2d:8d:48:2d:e0:2a:1c:78:88:98:54:d5:0f:
cb:8a:76:a0:e3:6a:85:5b:fe:ab:07:e6:4e:8c:50:
af:d5:a8:fc:59:a8:1a:ce:d1:5b:f7:bc:66:63:f6:
c9:41:f1:01:87:c3:be:fe:87:ce:c9:06:f2:f8:32:
2a:d8:3e:b6:55:fd:79:dd:fe:bb:bc:31:e2:a7:2c:
0f:e9:9e:2c:1f:75:77:6a:85:4f:ba:c0:81:94:7d:
43:39:b1:fc:9c:95:b7:67:1d:9e:d3:ec:80:7d:87:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B8:65:FD:65:87:A7:65:EB:F3:41:61:D2:E9:1A:43:B4:C1:CE:61
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:32:b6:69:58:30:24:50:83:73:7a:f1:34:91:fa:0c:e1:
b6:ff:f6:7c:d2:7a:9c:9d:65:9f:ad:d7:ea:85:b0:da:5f:0a:
cf:27:a5:75:02:c0:98:63:04:93:0f:89:3e:52:52:af:51:f3:
1b:56:c8:ac:7d:e5:19:c6:76:7d:7d:86:76:ea:6f:8b:e6:c9:
a7:b2:0f:8a:f8:ea:85:d7:b7:a2:54:06:30:47:af:37:6f:a6:
29:1e:f9:d0:ac:ac:d4:ec:ea:f9:3f:42:da:36:38:7d:04:d0:
6e:ba:d8:7b:a2:cd:b7:6a:bc:21:a5:25:f8:ef:19:14:06:1a:
bc:dd:f0:fb:ad:fc:09:55:86:9d:67:a0:d4:45:58:96:07:93:
c5:f3:6e:ae:0e:93:d1:85:9b:29:31:fe:f7:fa:f4:18:80:2c:
48:b3:de:3b:d0:d8:b6:07:b8:24:74:52:96:18:da:82:e8:30:
16:20:57:8c:31:f6:4b:f1:7c:df:a8:bb:b1:28:56:d3:51:b8:
bf:97:e4:64:9f:77:9f:24:d4:b7:fd:a9:3f:a3:d4:d6:e1:a0:
e1:2b:a2:f3:74:ba:6c:2b:8b:47:a6:97:2e:7b:c5:55:44:ea:
97:40:60:55:f3:24:8c:d7:f9:8f:dd:62:30:f1:0d:46:60:c8:
f2:d4:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:57 2026 by rpki-client