Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: CU9UPXnch+2NlVX3UBkkXxp8QEUBnHRfIew81diOCIc=
Subject key identifier: EE:05:58:72:3C:25:D4:CB:4C:65:9D:50:FF:A3:7F:41:FC:B8:31:27
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 01A17BBB330951F580955571B9B0BFB58FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 1151
Signing time: Tue 27 Oct 2026 05:00:28 +0000
Manifest this update: Tue 27 Oct 2026 05:00:28 +0000
Manifest next update: Wed 28 Oct 2026 05:00:28 +0000
Files and hashes: 1: JyitJqFf_sQZcIwoUYj4wcE-Kng.roa (hash: yAWpwzimbdFio0eZOpdLMpc2d2s+H4IuE70MmKFwzP0=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: 5O0qjHOg93BP7Cty4u0sRSOawLjuI0lKtfmV8I4toKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:33:09:51:f5:80:95:55:71:b9:b0:bf:b5:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Oct 27 05:00:28 2026 GMT
Not After : Oct 28 05:00:28 2026 GMT
Subject: CN=ee0558723c25d4cb4c659d50ffa37f41fcb83127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:a5:07:f0:ef:29:6b:f9:4a:6d:19:db:0f:
9d:e0:8c:52:11:7c:a3:b9:34:7b:bb:d6:64:e6:b1:
83:cb:20:1b:39:b2:59:50:ec:9d:00:01:ad:22:89:
82:8b:32:bf:42:4e:9a:be:84:17:9a:9d:80:c1:42:
eb:a3:93:6d:cc:9e:45:d6:90:b0:28:06:cf:34:36:
1f:35:21:00:c7:e2:42:33:d9:5a:4f:65:6f:66:be:
b5:f0:ad:69:c1:80:88:80:c5:57:ad:b4:37:7c:72:
89:6a:99:2b:fd:d7:d9:95:73:e7:8d:a7:ab:1c:5d:
16:ea:26:d8:6d:58:1e:ba:06:f9:0f:9d:03:cb:76:
d7:94:2a:78:34:d5:e1:cf:ab:1b:48:02:0a:79:aa:
f9:ed:ee:a0:ab:f1:22:d4:bb:55:91:40:a8:e6:b7:
58:42:64:40:a0:4e:11:76:81:f3:63:f2:fe:79:4d:
dd:8d:8a:69:0b:1a:5f:70:82:fb:43:0c:12:ab:3c:
47:4b:41:02:ce:41:be:60:2a:72:fd:bc:e5:60:81:
5e:d3:69:10:b0:45:18:cc:de:2e:b6:df:74:94:af:
b0:35:a0:a7:1f:26:08:d7:b1:89:17:da:84:99:65:
54:9d:4d:49:df:cf:29:2a:22:61:84:86:b4:a3:4e:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:05:58:72:3C:25:D4:CB:4C:65:9D:50:FF:A3:7F:41:FC:B8:31:27
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:77:38:a1:17:ca:b7:0a:f5:c2:0b:56:de:9e:74:5e:36:42:
b3:a5:db:2f:61:0d:c7:61:a8:cb:39:eb:0c:a4:cb:47:cc:e5:
fc:3e:5a:4c:71:d5:fc:2b:c9:69:0d:99:2c:51:ad:52:df:28:
31:83:87:60:ce:d7:7c:91:64:77:00:64:e3:f1:aa:7e:d3:3a:
26:05:96:71:19:04:bd:aa:cb:ea:2e:37:a9:f3:3c:8e:27:41:
a6:b6:96:31:39:d6:7f:84:53:5a:41:6f:a4:81:3d:55:18:5f:
e6:ec:d6:2e:2b:f1:16:96:b9:0a:76:43:69:9d:b8:6e:58:4f:
b3:c6:1b:05:3a:99:7c:31:84:9a:5b:e3:46:67:85:ae:4c:9e:
a5:9a:9a:fa:49:5a:a1:bc:90:0a:1f:e0:3b:d1:28:39:0e:94:
64:61:54:34:5d:e7:49:09:85:2e:65:bf:e4:b6:0b:9f:d9:b4:
b5:41:be:58:10:1d:fc:c4:a4:89:37:8f:be:9a:66:c4:9c:07:
13:9d:6a:36:14:68:ba:44:41:df:f4:03:0c:ea:eb:c3:ca:78:
a8:a1:35:43:5c:6d:6c:67:cf:19:df:44:b9:30:d6:be:7c:9f:
29:4f:43:d3:64:7f:11:53:9f:1a:0e:67:49:9b:0c:21:e8:22:
81:cf:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:40 2026 by rpki-client