Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: efWSunj9PY/lyzM3YNviLg/TvYzpI7HDDIMD6M6lRDA=
Subject key identifier: 53:7E:BB:12:B4:E9:49:27:AF:E4:7C:4F:72:2E:C9:D2:D2:5D:0F:D5
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 01A17DAA3F79A40276CB2D7CA7A0AF1E6BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 1152
Signing time: Tue 27 Oct 2026 14:01:11 +0000
Manifest this update: Tue 27 Oct 2026 14:01:11 +0000
Manifest next update: Wed 28 Oct 2026 14:01:11 +0000
Files and hashes: 1: JyitJqFf_sQZcIwoUYj4wcE-Kng.roa (hash: yAWpwzimbdFio0eZOpdLMpc2d2s+H4IuE70MmKFwzP0=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: Zi81vns5EAyOOYeWIKqOSqrAgXrAjEDXhvcUETbVTfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:3f:79:a4:02:76:cb:2d:7c:a7:a0:af:1e:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Oct 27 14:01:11 2026 GMT
Not After : Oct 28 14:01:11 2026 GMT
Subject: CN=537ebb12b4e94927afe47c4f722ec9d2d25d0fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:1a:4f:36:bd:45:61:9a:56:23:35:ac:1d:
af:92:de:13:b6:f9:7b:e1:dd:ed:15:67:72:15:6e:
67:31:53:6e:ea:27:52:20:6f:eb:1a:44:ba:a8:c7:
93:4f:69:d2:7c:08:79:72:a4:12:a7:6a:a0:e7:84:
c8:f1:1d:89:4c:9b:d3:c3:b7:d7:37:67:e1:98:2a:
8d:98:f9:f3:4f:75:10:43:13:c6:cc:6b:48:34:73:
3d:d0:29:f5:e9:bb:56:32:c6:5f:e5:d6:86:2d:0e:
40:28:4a:ef:6a:59:c4:47:d9:de:81:41:e2:df:d9:
c2:2d:6b:f7:c3:26:5e:98:63:53:16:a8:cc:4a:1e:
e8:e0:bc:57:a5:93:76:75:86:c2:5f:b1:b7:4c:cf:
3a:04:65:fb:a2:3e:e4:71:04:9e:fe:93:d1:4d:1e:
a8:d7:25:2f:b8:de:36:4a:48:30:aa:56:7e:01:07:
20:89:40:84:3f:d2:1f:c0:27:98:0c:d0:f1:b5:49:
6f:43:1a:93:f8:a3:6f:f0:d2:2b:cd:46:33:25:3f:
82:03:10:de:a7:b3:18:61:4a:5e:a3:c9:27:61:20:
82:c3:07:cd:4a:52:85:c3:2f:37:4f:08:f7:b2:17:
ee:78:a3:d8:2b:05:a3:0e:b8:cb:05:5d:fd:22:00:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:BB:12:B4:E9:49:27:AF:E4:7C:4F:72:2E:C9:D2:D2:5D:0F:D5
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5e:46:dc:43:91:65:b6:20:69:5f:ea:65:b6:b6:f7:8f:33:
de:c4:23:78:85:c7:6c:69:62:ad:3b:06:a5:e7:76:67:8d:96:
78:71:75:43:a7:95:8f:3a:55:ab:19:ea:2b:4e:d6:b0:84:88:
3c:9d:7a:a5:a2:e5:27:bb:cb:88:35:d5:42:4a:f4:40:3a:d2:
25:86:75:6a:94:23:5d:57:67:eb:6c:54:5e:82:c8:d9:9a:61:
80:36:6c:dd:69:cf:f4:dd:4b:78:28:13:c2:29:67:44:88:bc:
7c:8f:db:63:0b:d8:cc:bd:25:da:56:61:24:a6:37:ed:c4:9b:
4c:56:3d:b6:20:c0:fd:ef:cb:76:f4:81:5d:bf:ff:b8:38:b0:
71:85:e4:eb:11:84:27:a3:51:8f:01:1a:4c:61:94:7b:ae:f5:
c3:e3:ad:d1:83:f1:89:9b:0b:e0:fc:a5:5c:58:6c:74:32:11:
d0:b4:74:0f:b3:88:a3:ea:02:1a:f7:ec:3a:1a:c3:53:bf:b9:
8a:09:ae:ed:ba:1c:1c:88:dc:6f:5b:93:1e:34:5d:7d:61:08:
62:e1:98:be:fd:74:17:8c:11:35:ab:09:8a:38:08:3a:75:0d:
9f:88:d1:68:79:a7:d0:4b:bb:4e:6f:2c:40:e7:05:d8:ec:9c:
e6:95:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:00:48 2026 by rpki-client