Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: RCt96R2CI1zeIRZMhyrpInfvrgm9BainqAloT5tRbNE=
Subject key identifier: DB:FE:63:48:54:68:22:E8:0C:ED:0A:02:EB:05:3F:65:AB:F5:B1:D6
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 01A184887E16F8FF1589595B88A1199D2D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1AD1
Signing time: Wed 28 Oct 2026 22:01:39 +0000
Manifest this update: Wed 28 Oct 2026 22:01:39 +0000
Manifest next update: Thu 29 Oct 2026 22:01:39 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: ZbZPkoEZwDHacGMhnEADMtFkeXgh/vE+YrMdvgkBkvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:7e:16:f8:ff:15:89:59:5b:88:a1:19:9d:2d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Oct 28 22:01:39 2026 GMT
Not After : Oct 29 22:01:39 2026 GMT
Subject: CN=dbfe6348546822e80ced0a02eb053f65abf5b1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:ad:6d:ff:79:af:77:14:57:ff:6c:70:3d:
90:dd:ea:ae:01:41:c9:a5:91:96:aa:39:76:79:d8:
e7:d3:6f:18:e5:09:a0:04:9b:f8:b5:92:4a:9c:39:
a4:a1:ac:5c:1b:48:1c:84:60:b4:c9:b2:7d:c5:51:
3a:c8:a6:93:96:56:98:c7:68:23:ea:eb:1f:d3:d3:
6e:91:29:7b:db:7e:d9:ec:18:59:7e:09:c5:c8:c0:
ab:ba:d2:a7:55:9c:eb:4e:e9:6d:37:4e:e5:40:52:
5f:a1:06:a4:bf:f7:93:a7:a5:17:4c:54:06:e4:4c:
ff:e9:18:3c:93:7d:ab:d4:88:a4:ea:07:f8:32:08:
b8:e7:3b:a9:90:a7:22:72:0a:ef:f8:bb:a6:9a:f2:
82:cb:a0:e9:91:0d:88:92:da:56:d6:91:e8:47:93:
bc:f0:ea:44:6d:6b:af:54:e8:33:37:90:92:75:d2:
64:b2:61:ca:09:9d:db:94:f7:13:d0:c8:b0:d4:39:
4b:2c:4c:8f:f1:54:26:44:39:4e:11:19:a9:af:45:
99:b8:60:32:61:b7:ee:1f:51:03:85:93:6f:68:ed:
95:65:e6:3d:6c:62:eb:8b:42:19:bd:a6:e2:3d:6d:
62:61:45:c9:a8:24:14:bd:de:6d:aa:19:59:81:40:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:63:48:54:68:22:E8:0C:ED:0A:02:EB:05:3F:65:AB:F5:B1:D6
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f4:44:dd:06:06:a5:5e:1f:7b:29:c0:07:be:d9:03:a4:b3:
a5:54:c9:15:cc:35:ef:34:8d:57:b5:df:97:1f:a5:7b:33:a5:
86:29:cf:bb:a4:62:dd:43:80:38:0c:fd:47:88:d9:d1:71:1b:
63:bb:5e:16:12:76:9c:d6:1a:21:ef:62:a7:aa:07:24:7f:f9:
fa:3b:b3:3f:6e:d7:10:c0:05:e5:52:9e:94:34:d1:34:dd:7b:
b5:bd:f9:fa:3c:5f:5e:f0:3e:f3:38:cd:ad:34:de:bd:5c:65:
b4:9d:b3:96:3b:86:75:7e:5d:a4:d2:98:97:36:79:48:dc:76:
16:53:df:9e:9d:aa:4c:a1:18:dd:18:c5:8d:7b:41:fb:0d:31:
1c:de:0d:66:5e:b8:2a:10:c4:b6:30:dc:49:55:0e:d1:82:86:
22:d9:9e:85:c5:ae:69:94:9f:3a:b0:08:80:56:d0:f7:ca:d3:
99:0e:66:56:7b:a1:c0:de:01:00:ca:d4:52:d6:d2:be:68:d5:
2e:21:49:04:83:22:72:93:2e:2e:89:a4:61:b0:ae:c8:60:a9:
70:3a:14:41:ed:e7:25:fb:24:50:2f:03:27:45:0e:83:6e:5a:
bf:5b:73:4c:25:27:eb:67:7a:0f:86:42:11:fa:5d:3a:93:3e:
3d:c6:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:45:15 2026 by rpki-client