Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: KhITzuJtgQq0dw5LwsmGg+fpr4gsTPg+qY5ywdGoUxM=
Subject key identifier: 4E:D3:6D:7D:6B:FD:88:06:C2:64:14:FF:89:CC:11:F0:6C:F7:16:8B
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01A17D053D466A06228D4EB7CC1813F5CB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 11:00:57 +0000
Manifest this update: Tue 27 Oct 2026 11:00:57 +0000
Manifest next update: Wed 28 Oct 2026 11:00:57 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: 0sHpQE/nwtz71ezLPgxKQynkHBVfzp24O8hm+koG1fQ=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:3d:46:6a:06:22:8d:4e:b7:cc:18:13:f5:cb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Oct 27 11:00:57 2026 GMT
Not After : Oct 28 11:00:57 2026 GMT
Subject: CN=4ed36d7d6bfd8806c26414ff89cc11f06cf7168b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:85:09:e8:7a:3a:16:2a:e7:f1:c1:cf:f5:
b8:f4:8d:55:8b:3d:73:31:7f:80:16:01:7a:c0:5f:
30:34:73:2a:e7:4b:2f:92:0e:eb:09:51:88:a6:7a:
7b:77:9a:e8:6d:07:04:53:8a:db:46:e7:21:d8:ec:
3b:af:95:22:9f:1e:67:2f:42:58:0b:1b:5e:29:9f:
bd:48:87:30:2a:9f:bb:ee:32:04:9b:7a:92:40:b0:
41:18:aa:65:f3:76:3c:b9:69:a0:53:a5:6c:71:e4:
00:90:c2:51:30:cd:19:8d:4a:19:46:e8:ad:d4:72:
1c:80:30:0b:70:67:6b:e9:66:54:dc:80:3f:5d:f0:
ca:7e:29:84:04:51:7e:85:3c:50:35:2c:19:b3:b3:
d1:7b:4b:52:f3:da:50:e3:c6:87:d3:af:31:07:9e:
07:17:65:f5:90:70:5c:8d:46:dd:9e:c0:72:31:63:
26:31:77:55:bc:d8:68:7d:b4:1a:dd:50:50:82:96:
b2:fc:4d:b4:d5:73:36:12:1b:22:c7:6a:97:1f:39:
74:a7:ee:24:37:59:dd:e8:e6:d8:6f:aa:de:e0:bc:
71:6e:92:88:97:c6:1b:cd:d9:34:2c:90:b5:00:c1:
ca:40:c1:25:93:8a:a1:2f:20:15:40:8c:62:71:1b:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:6D:7D:6B:FD:88:06:C2:64:14:FF:89:CC:11:F0:6C:F7:16:8B
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4e:e0:ab:32:2a:5d:d3:ae:e5:e8:9e:2c:fb:88:31:b8:52:
42:b0:2b:47:ec:26:3b:72:48:1a:aa:54:15:90:48:2e:62:5c:
32:54:cb:9b:e4:2b:8a:81:02:0a:4f:dc:6f:c0:9f:91:54:69:
19:a4:23:39:9a:b7:cb:3a:cb:9c:86:65:77:bd:41:2c:84:0d:
21:75:af:bd:28:88:70:cf:72:cb:fa:0b:09:95:34:38:2a:32:
64:b0:48:0d:3e:01:64:37:bc:ae:5f:be:1d:b1:1c:49:26:c5:
9d:72:2b:e9:aa:ac:66:72:67:3f:47:09:85:b7:86:c6:19:f9:
c2:f4:2e:ab:50:a7:9e:32:28:03:ad:04:60:f8:d5:1a:76:30:
bd:18:23:47:a9:46:66:a7:da:54:fc:3b:c7:e7:33:8d:07:cf:
b0:62:25:9e:f4:38:c3:b1:19:10:c4:f0:8d:4e:fb:fa:cb:54:
58:9b:97:6b:33:0c:89:3e:61:82:b9:48:83:c2:b9:f1:3a:e5:
0d:c0:de:33:af:7f:43:55:6a:25:9d:93:f2:c7:c3:0b:e6:8e:
75:b0:2f:54:fc:5e:73:c6:3a:7d:44:29:f0:f0:8a:7b:7b:b4:
e9:2e:1e:96:a0:73:d2:7f:b6:60:3d:e4:5d:7e:72:5c:7a:da:
72:22:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:43 2026 by rpki-client