Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
File: LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft (raw, json)
Hash identifier: I3qWVkOnKEjdHSeILkIgauY6gO4fOz6FpHkHMSQhIkc=
Subject key identifier: FB:0F:D0:B1:48:6A:26:2F:64:D1:99:9A:04:46:FA:6E:AB:DB:00:10
Authority key identifier: 2D:1E:C2:7D:DD:3E:05:D1:4D:F3:1F:9D:F7:85:CD:3F:87:1C:A1:7D
Certificate issuer: /CN=2d1ec27ddd3e05d14df31f9df785cd3f871ca17d
Certificate serial: 01A1231DA9F503F64C955078048EBA78FA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
Manifest number: 0110
Signing time: Sat 10 Oct 2026 00:01:48 +0000
Manifest this update: Sat 10 Oct 2026 00:01:48 +0000
Manifest next update: Sun 11 Oct 2026 00:01:48 +0000
Files and hashes: 1: AsAgHDGHPs_ZlrSxEpOeJcGc1l0.roa (hash: DWt+8Og+H/O75gxgwKwydNR/wXC9yr0q3HVKTxoYYIE=)
2: LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl (hash: z2sY2gsTUBhN8Hq0YU1nmU4mqC+7t85km3lgHDBS214=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:a9:f5:03:f6:4c:95:50:78:04:8e:ba:78:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1ec27ddd3e05d14df31f9df785cd3f871ca17d
Validity
Not Before: Oct 10 00:01:48 2026 GMT
Not After : Oct 11 00:01:48 2026 GMT
Subject: CN=fb0fd0b1486a262f64d1999a0446fa6eabdb0010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:4a:13:08:12:2a:f6:70:9c:20:36:41:21:
aa:4f:80:70:ab:a7:1c:5b:ff:d5:c0:1b:ef:ca:ae:
2e:9c:3d:5f:c6:10:0c:2b:05:78:cf:2a:58:60:4a:
3e:6f:ca:50:2d:30:da:74:28:0f:71:08:b5:6d:7c:
34:15:c2:b6:4c:b6:74:e1:72:63:eb:60:2c:a7:f4:
ad:64:8c:8a:23:39:b9:97:ef:48:82:3c:d5:a3:08:
dd:b1:33:19:c8:80:a1:5d:68:76:ad:d3:0a:b9:76:
16:f8:44:c1:16:a8:07:65:0c:f9:0d:50:e6:e7:1a:
66:06:bc:9a:09:8a:4c:cd:ce:01:d5:4e:e3:4a:9d:
9c:ff:09:81:36:a0:9c:4b:ce:7a:51:fa:b4:9b:66:
8d:ce:73:38:1e:eb:65:eb:13:88:5a:aa:d5:f8:55:
b9:a4:bb:da:82:75:2f:b4:cf:8a:d9:94:bf:42:f0:
9c:3e:a1:0d:69:39:ee:20:31:77:01:fd:90:e8:84:
ff:e8:ab:be:5b:fe:0c:04:cf:99:c8:6f:4a:79:04:
8b:b1:53:ce:35:f0:98:c0:03:7c:22:57:5f:af:c7:
9c:31:0c:4a:a0:1c:00:e2:38:96:cc:95:5a:7f:81:
e0:f5:9b:8c:44:46:4d:f2:47:5f:90:7e:3f:22:57:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:D0:B1:48:6A:26:2F:64:D1:99:9A:04:46:FA:6E:AB:DB:00:10
X509v3 Authority Key Identifier:
keyid:2D:1E:C2:7D:DD:3E:05:D1:4D:F3:1F:9D:F7:85:CD:3F:87:1C:A1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:09:4c:b6:9e:15:f6:5d:83:0c:7b:92:f4:bc:d1:b3:3c:
1b:b6:cb:4c:7d:9c:4c:ae:ae:7f:de:bb:89:98:19:5a:f8:69:
0f:d0:c7:ab:fe:6b:30:0e:69:1f:17:d5:c5:31:69:8a:1e:b8:
08:43:e5:26:78:ba:59:3f:57:f1:08:d2:5a:2c:e8:1b:88:38:
73:c3:1c:57:e2:d5:b5:78:0b:f9:c9:78:76:0f:e5:e4:65:e1:
6d:69:9e:4b:82:d1:a5:14:69:a6:23:72:1b:ab:d1:1d:74:98:
d1:d3:a8:b7:93:5e:04:01:5b:74:13:60:79:91:37:30:f3:14:
c1:c1:90:b8:3f:f5:54:df:7a:fe:06:c3:e5:af:dd:f4:9e:48:
2f:19:2e:c4:08:03:93:e7:37:b5:1c:1e:32:eb:21:9f:18:8e:
a9:d3:71:16:ed:5b:9e:8c:9a:17:60:02:f3:d4:70:14:53:23:
f0:58:2c:a3:39:ce:72:38:3b:8b:d7:cf:33:db:f3:ba:5c:85:
d7:ef:09:43:0c:5d:98:01:f7:c1:04:26:e5:c4:61:da:d9:cb:
c9:8c:4d:d2:7f:ff:b5:af:d9:13:6e:76:08:44:38:5f:7b:5c:
fa:60:ba:c1:20:0d:f0:57:78:6c:f5:c4:6e:fc:d5:e1:04:26:
c6:9e:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 09:41:15 2026 by rpki-client