Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: plvvjOhAGzJKOFAhaIkr90n/vjha4yDepm+WzGnaF8I=
Subject key identifier: 7A:20:84:03:D0:F8:23:AF:CA:10:11:13:99:83:16:D3:A3:15:A7:9D
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01A17EF3DEAE0D0E04F5D1A67D4E0635CE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 20:01:13 +0000
Manifest this update: Tue 27 Oct 2026 20:01:13 +0000
Manifest next update: Wed 28 Oct 2026 20:01:13 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: ADaJzkZwxwxP/Hs5H6bVZxbQ28TwrGAnNHBWnrmt4N8=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:de:ae:0d:0e:04:f5:d1:a6:7d:4e:06:35:ce:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Oct 27 20:01:13 2026 GMT
Not After : Oct 28 20:01:13 2026 GMT
Subject: CN=7a208403d0f823afca101113998316d3a315a79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:66:9a:54:c9:a5:55:29:b8:23:bc:59:57:
20:4e:bd:20:8a:77:f5:cb:75:b3:7f:84:70:82:d5:
ec:ac:14:83:75:4d:82:dc:14:51:d3:03:cd:27:c6:
65:6e:29:e0:46:a4:63:52:85:5c:55:d3:2f:19:9e:
18:b9:3e:39:5f:a1:09:99:f8:dc:25:40:fb:ce:2f:
60:1f:a5:8f:0c:91:29:8b:32:e2:56:10:31:12:2b:
37:7c:07:3b:ab:83:76:40:c9:3c:40:9a:e3:59:76:
65:08:e9:fd:94:6b:c1:10:27:d3:89:84:58:e8:82:
1f:4f:2e:a1:6a:91:0d:d9:de:7b:50:fc:f9:78:47:
3b:76:fe:d8:58:71:7a:43:1a:9e:a2:cb:9f:c5:12:
6a:40:99:c0:5b:be:c2:51:62:50:5f:8d:7d:89:63:
3e:5e:ec:31:01:c0:17:51:a5:5b:2f:38:19:bd:9a:
42:af:d5:3e:b6:a2:8e:30:19:46:8e:b9:41:a6:04:
d5:51:9c:7c:91:21:5e:7d:50:5e:ed:59:21:c2:b1:
53:69:d5:15:0e:16:a7:f3:7f:e1:80:98:78:15:db:
00:0b:4a:a5:80:48:42:8e:a8:e8:0f:4b:9c:8e:08:
c3:4c:51:48:4d:7f:ce:db:7c:7c:c9:8d:e8:c9:26:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:84:03:D0:F8:23:AF:CA:10:11:13:99:83:16:D3:A3:15:A7:9D
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f4:9a:aa:b0:f8:9a:8c:60:8d:c3:2b:fe:38:5d:b5:5f:28:
a7:04:37:1d:ef:30:69:8f:d2:41:c6:61:15:08:59:84:5d:7a:
fa:07:ab:1d:ea:bf:a0:e2:4f:11:4d:43:e4:69:04:3b:20:9d:
08:80:7d:6f:92:a3:6d:f4:4b:70:91:77:d8:d8:49:b9:41:27:
db:88:60:a2:2b:f8:98:11:0b:9b:e5:04:37:f5:9b:0b:5d:11:
c3:91:75:a5:d0:e2:18:ea:a3:d1:3a:65:78:7a:cf:ae:f7:98:
a4:e2:13:36:98:47:5c:ea:09:71:91:4f:f1:5d:4a:a1:b9:95:
71:64:e4:ab:df:9f:3f:68:f8:a5:c0:5e:f4:08:cf:e7:4d:28:
47:73:7b:74:ae:91:2d:a7:60:2e:90:33:19:7f:8b:2f:1c:34:
ee:e2:a0:91:f2:61:24:4d:9a:6c:74:f3:9a:0f:c2:02:82:a9:
bd:9c:81:f4:25:db:76:39:65:95:fe:57:65:02:6b:57:1d:a3:
3d:1f:e7:aa:4b:8e:8f:12:cf:b4:dc:ac:b1:95:83:6f:dc:02:
4f:7c:ef:b2:e0:46:4e:3d:21:1c:35:ca:70:15:74:24:aa:31:
e1:fc:cd:f1:5c:be:d9:dc:5b:7b:eb:41:9a:c8:eb:24:38:fc:
c2:96:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:16 2026 by rpki-client