Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: fQGJQMTPcLbLBgknVFbsVWm8+5lEywBdxNREJsrhVnY=
Subject key identifier: B2:FC:73:CD:32:EE:B2:18:E3:BF:CA:3A:1B:32:C3:05:3F:DD:46:A2
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01A08F7C271EF5B2C080897A62B9DD187AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 08:01:13 +0000
Manifest this update: Fri 11 Sep 2026 08:01:13 +0000
Manifest next update: Sat 12 Sep 2026 08:01:13 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: giIFVdbaQKRfnBLtDaDA1/jFy8FB7ipPm1G2+LZWR7M=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7c:27:1e:f5:b2:c0:80:89:7a:62:b9:dd:18:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Sep 11 08:01:13 2026 GMT
Not After : Sep 12 08:01:13 2026 GMT
Subject: CN=b2fc73cd32eeb218e3bfca3a1b32c3053fdd46a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:c0:d8:f6:2f:12:d6:70:b8:5d:04:81:c1:
31:05:a0:16:27:56:b7:b1:d2:0c:e8:09:f0:a3:b9:
fc:da:11:c2:d5:cf:b6:56:79:30:6f:1c:63:b0:4b:
5c:66:24:62:5d:fc:6f:e3:95:70:80:fc:0e:71:52:
51:f8:20:b4:3b:52:60:45:d1:b4:4f:39:14:28:b7:
62:83:06:5a:18:c9:72:9d:9f:84:c1:cf:2c:80:e5:
9b:b2:f0:cb:50:ac:c9:a0:5b:b6:d1:ac:26:d7:96:
7a:17:6a:af:24:7a:39:e2:18:20:be:ba:76:21:4d:
14:3a:17:83:64:24:ec:44:19:0f:47:74:97:77:41:
da:b4:09:24:e4:05:e1:93:c4:07:08:28:53:e5:9b:
98:59:14:5e:3a:c6:88:c2:a8:80:f2:14:63:0b:ac:
55:ac:9c:15:36:15:6f:13:b6:96:b6:c9:c9:d6:fe:
8f:ff:db:d0:21:91:25:23:8f:2a:f5:8b:5e:12:28:
e1:b6:5f:b0:78:ec:ae:5f:32:45:1c:34:ef:d2:9e:
a2:bc:51:e3:cb:7c:fe:4a:36:c8:4a:97:55:9b:58:
ce:04:6b:82:97:af:d1:af:5d:b2:72:c8:c1:99:65:
29:c7:7c:7d:e1:a7:81:21:0c:49:49:58:c6:09:a3:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FC:73:CD:32:EE:B2:18:E3:BF:CA:3A:1B:32:C3:05:3F:DD:46:A2
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a1:b7:fb:cc:f0:ea:e5:ed:60:ed:ba:7f:28:4e:1b:4e:86:
e7:46:61:93:77:fe:28:4a:8b:38:ca:99:0a:4c:20:5d:d3:73:
d3:73:ae:78:88:3e:3a:02:04:e6:bc:7f:8b:04:54:a8:f2:ef:
52:3f:62:1f:1f:64:1e:99:10:a9:c5:35:bb:07:81:a8:c2:cb:
75:ec:42:03:6d:81:58:2a:89:bb:ba:3a:09:07:2e:7f:5d:f7:
3c:54:f0:28:a9:2f:5b:0e:df:36:e4:12:da:8b:1d:ff:04:20:
4f:dd:f3:d7:cf:6e:73:42:75:bc:95:48:03:32:07:54:71:7e:
ae:25:37:0f:c1:5b:18:36:d9:b4:60:12:66:c1:b5:76:92:66:
4a:fa:43:92:f8:c1:4d:42:1d:b1:3e:52:a2:14:dd:87:b9:cd:
52:cb:7c:ea:6a:09:dc:48:ad:cf:e1:bf:f8:ea:4e:ed:ed:b8:
b6:1e:a0:8e:ec:67:37:f0:d1:1e:c6:5b:c3:e5:ab:81:b6:ea:
4a:92:3d:88:42:f8:a5:7a:bc:bf:88:95:ab:de:ce:4f:1b:f9:
fb:0d:2b:a9:c7:72:b8:4f:82:6a:a0:fc:2f:5b:45:33:3e:ff:
69:1d:86:ce:f8:b8:ca:bd:e5:da:52:6f:0b:f0:d3:fb:6e:13:
6f:2a:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:09:06 2026 by rpki-client