Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: O4b6ZzFhkx/roI9z/Q0RNjzTqR4ApfkRoLwtBshNIl0=
Subject key identifier: 27:45:46:FB:14:4F:0E:9B:80:D1:38:6F:19:9A:51:E1:57:40:8C:D0
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 01A1807441114639CB2706A64F0424EE619C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 127F
Signing time: Wed 28 Oct 2026 03:01:04 +0000
Manifest this update: Wed 28 Oct 2026 03:01:04 +0000
Manifest next update: Thu 29 Oct 2026 03:01:04 +0000
Files and hashes: 1: drsnkuosbg6qvFQb_xFsNGudfnU.roa (hash: NBvp9SPTa0IGtzv6khJhiENmtNEIw9wGReWShX2mC+o=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: Zbj9qmnuHUL+Oa5sPG+vraJJAMKeOOE2MZMJzPmfyng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:41:11:46:39:cb:27:06:a6:4f:04:24:ee:61:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Oct 28 03:01:04 2026 GMT
Not After : Oct 29 03:01:04 2026 GMT
Subject: CN=274546fb144f0e9b80d1386f199a51e157408cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:b3:81:03:c7:41:f8:0e:91:43:1d:00:f0:
ce:a3:11:b1:be:e3:d9:76:0b:2c:68:53:dc:36:0b:
45:fc:6e:ae:e4:c8:e7:45:d8:af:6b:cd:09:17:29:
da:bf:4a:03:15:99:d8:de:2a:af:60:a4:6a:ab:67:
35:c7:01:b8:61:d0:94:5b:e0:9c:1e:52:d4:88:66:
20:95:20:73:e1:8b:53:69:de:5b:6c:70:0e:a4:89:
91:51:08:ef:f0:42:84:2c:c6:6e:0b:87:64:40:91:
4c:02:80:8f:dd:75:ab:77:07:c3:a3:03:54:57:df:
09:b5:ac:e3:16:f7:d5:87:09:6e:87:2f:4a:99:89:
03:71:fd:cb:0e:48:6f:1e:a3:0a:0c:de:71:98:d8:
c0:cf:b2:bf:ab:10:44:dc:f7:be:be:0c:c9:a5:85:
5f:f2:e3:1c:ca:b5:fa:04:31:20:48:55:eb:cb:3c:
15:c7:cd:e7:5d:97:ea:81:12:d5:b6:cf:d7:c2:d7:
5b:b1:af:32:d3:89:83:91:9d:35:7b:a6:ca:0a:20:
65:99:a5:9f:73:79:f1:75:5b:12:d1:9a:6d:27:2e:
08:97:84:a6:ec:b1:f1:af:97:ce:1f:7a:0a:8d:3e:
47:53:1d:f7:db:56:60:91:b5:a1:ff:8c:e5:77:3d:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:45:46:FB:14:4F:0E:9B:80:D1:38:6F:19:9A:51:E1:57:40:8C:D0
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:95:30:e9:29:5e:10:d3:4f:b1:ad:09:de:fd:99:48:2b:
32:83:d6:cb:bf:7e:36:29:c7:ce:3a:53:3f:68:a8:56:61:b5:
60:2f:79:2a:7e:a8:4f:5d:c9:65:20:e1:8d:0b:9a:0d:7a:77:
cd:86:f6:57:ca:48:3f:34:d4:c8:f5:53:b1:69:a4:12:91:a0:
5a:37:c2:5f:1f:14:64:f2:35:d3:c5:31:3e:08:58:d9:4c:3f:
c2:84:1a:73:e9:c7:15:01:16:7b:49:5d:1a:f4:ed:4e:20:a0:
3d:05:99:28:f5:bf:a7:f4:af:03:ee:d7:d7:22:e8:2a:71:1c:
a2:47:45:c7:b5:fa:cb:1c:51:03:42:c8:94:da:73:47:57:e7:
5e:50:a1:eb:d1:bf:f6:4c:96:d2:f4:56:d6:47:30:e6:5d:83:
cc:f0:64:e3:74:2b:af:48:f1:e4:05:08:14:5d:73:0d:b0:09:
80:87:e3:7c:12:2c:f7:76:d3:da:e9:cc:55:36:cb:1c:c6:17:
c8:db:fc:17:c7:39:51:c4:16:2d:9c:a4:f0:29:23:3d:3d:0a:
f0:fd:8f:f6:92:f9:3f:77:65:e1:1a:e9:1b:ab:0d:a2:e9:35:
36:e8:4b:38:f8:be:43:01:a8:10:f3:04:06:59:19:bb:f4:f1:
4e:87:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:19 2026 by rpki-client