Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: Y+wzr/GB9IDtm/YaIzS8//q/tcco5QNWY4v/nEiTzH0=
Subject key identifier: 41:C1:D3:A9:56:F3:0F:32:47:E2:29:A5:58:C7:EA:D6:34:30:08:93
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 01A0EF9DB5315B5BCB492FF15CA8046DBE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1A10
Signing time: Wed 30 Sep 2026 00:01:25 +0000
Manifest this update: Wed 30 Sep 2026 00:01:25 +0000
Manifest next update: Thu 01 Oct 2026 00:01:25 +0000
Files and hashes: 1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: YECvjrYD0wPI3HEqz+WVArQxeKRegQXErLjLy4cNhSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:b5:31:5b:5b:cb:49:2f:f1:5c:a8:04:6d:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Sep 30 00:01:25 2026 GMT
Not After : Oct 1 00:01:25 2026 GMT
Subject: CN=41c1d3a956f30f3247e229a558c7ead634300893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:31:a8:28:65:e6:3a:f6:a4:aa:d2:e7:08:
99:f8:51:6f:12:ab:1c:89:b2:32:eb:0b:ec:27:d3:
d2:1e:f5:72:ea:3f:34:da:28:86:15:12:b4:56:77:
23:fd:44:77:2f:2f:7a:1f:8a:66:60:ce:15:2a:70:
2c:c4:be:88:ed:bd:31:74:c0:bc:43:7c:61:f8:16:
26:50:aa:49:46:ac:fa:0c:df:7a:63:eb:6c:64:d8:
69:91:20:45:1d:fc:53:2a:5c:32:a1:b3:04:fe:eb:
98:e1:af:65:7f:a6:6f:88:7f:4b:ef:3c:66:4b:ff:
32:ea:39:5d:18:ff:1e:7d:39:22:26:14:67:be:25:
c0:08:00:c8:4d:03:06:13:6d:22:cc:dd:e8:78:52:
1e:d3:93:b6:5e:4a:2c:f9:71:13:68:ec:25:ec:40:
33:de:51:65:d3:ce:8d:cc:3b:3b:a1:0f:e3:62:96:
92:f6:85:c4:ed:6c:ea:e0:b9:30:55:31:94:cf:72:
b9:44:a6:3b:1f:65:ec:16:c6:29:69:87:ac:b0:eb:
a4:b8:2f:43:9d:08:ed:8b:11:07:2a:f8:47:4d:cb:
d0:a7:a2:86:48:e0:94:39:4d:a1:1f:8f:f8:c9:a6:
b9:26:00:3d:94:1c:37:14:e4:f8:af:81:60:12:9e:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:D3:A9:56:F3:0F:32:47:E2:29:A5:58:C7:EA:D6:34:30:08:93
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ad:b7:cc:b8:dc:d3:a8:4a:4b:82:a0:e4:e1:f9:3c:a1:d3:
20:65:99:95:6c:d0:bb:3f:b2:1c:7f:c2:3d:b3:2c:7d:15:6a:
37:02:84:33:ad:8b:f4:52:c7:26:18:44:b4:a3:35:7e:3c:cb:
de:82:11:47:ce:e7:17:4a:2c:d1:0c:76:29:74:78:04:88:92:
45:b8:db:ad:71:d8:f0:83:2a:17:91:f6:e1:ea:8e:fb:d3:dd:
6e:42:42:2e:15:51:d5:88:d8:c5:f3:c1:e1:b4:2b:16:0b:aa:
3e:84:2a:0e:cb:0c:9c:f1:80:6b:3a:82:7b:dd:84:54:3b:05:
c7:b8:14:bd:e6:cb:bd:bb:c7:c1:c0:12:51:8b:e3:fb:12:c5:
44:2b:c4:e6:d3:4e:80:5a:37:df:70:e3:ab:09:fe:83:ee:30:
bf:07:5b:f9:32:0e:b2:92:d1:f3:3b:8c:65:a2:cd:5b:8b:54:
e7:cf:36:76:72:cb:45:31:c8:99:4c:e8:0c:15:19:24:2c:4b:
80:9b:19:ab:1a:4f:93:a3:36:c7:16:af:23:2b:79:3d:3b:04:
1a:a5:1f:eb:62:89:f8:ae:9d:3f:fb:96:fb:1c:3f:5c:73:3e:
a6:8b:26:30:b9:92:2e:5b:38:67:35:e9:ff:b1:be:d8:6d:75:
06:64:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:33:46 2026 by rpki-client