Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier: 2pfd9vuo8tSLAL8GDLInn9FB+nHX0G0Zx+BmjQjG7ZM=
Subject key identifier: 55:13:14:4D:7B:C6:6A:BD:4F:30:0A:48:AE:55:D3:D8:0E:C9:C3:32
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial: 01A03B27B72A3EA4576D023D6A37D43FC242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number: 0BC9
Signing time: Tue 25 Aug 2026 23:00:53 +0000
Manifest this update: Tue 25 Aug 2026 23:00:53 +0000
Manifest next update: Wed 26 Aug 2026 23:00:53 +0000
Files and hashes: 1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: X45U9gg+lgTfaFJfkcPessZEwmwMJdN2zNm6X3fgAHA=)
2: PSue4eiiw2nCVw1drjwPSALcgXg.roa (hash: 1oP3e5TROxxn5gXpmfRVqjhOwGv4slj/HbiqgPw4q/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:27:b7:2a:3e:a4:57:6d:02:3d:6a:37:d4:3f:c2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Validity
Not Before: Aug 25 23:00:53 2026 GMT
Not After : Aug 26 23:00:53 2026 GMT
Subject: CN=5513144d7bc66abd4f300a48ae55d3d80ec9c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:c0:14:ec:9e:e7:34:4a:a3:3c:7f:88:77:
7b:bc:59:4f:0b:2b:e8:50:2b:b2:67:ba:4f:bf:7d:
8a:41:fa:47:1e:a3:09:72:7c:4d:35:3b:b6:76:df:
01:44:be:14:f2:48:ae:05:26:60:cb:be:ef:2b:6d:
ed:30:bc:81:e0:a6:51:4e:12:07:c0:6c:66:9f:be:
ff:2e:18:28:b3:54:d4:b1:ea:c4:16:75:46:53:8f:
74:f1:2e:78:86:7b:18:01:c1:62:d4:7a:ca:b7:cc:
01:51:60:b8:a8:d3:40:ec:d7:b8:d2:ba:8f:77:6b:
91:d9:13:cc:c9:7c:12:ed:dc:f8:7e:64:a4:6f:62:
88:44:07:01:91:c4:59:9a:47:32:75:66:72:33:e2:
5f:89:38:5e:a4:41:b4:4f:4f:88:c8:e1:9e:1c:79:
f3:2d:6a:b3:e4:c6:bd:df:02:e6:fd:7b:a6:a7:85:
f3:5d:ee:e8:5b:f2:cb:b2:5b:03:96:6b:f4:5d:5a:
85:25:ca:48:c9:82:2a:42:b4:17:49:ae:f6:1d:36:
0d:69:99:e3:66:b4:4e:89:9b:65:5e:66:c2:a4:9a:
c3:46:a2:0f:20:5f:2f:8d:50:ef:4c:a4:89:cc:16:
c5:73:79:93:97:d4:39:91:b3:1f:a6:3a:f4:25:bd:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:14:4D:7B:C6:6A:BD:4F:30:0A:48:AE:55:D3:D8:0E:C9:C3:32
X509v3 Authority Key Identifier:
keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:35:80:65:82:1b:72:6a:3f:6d:8e:7b:2a:4c:d6:5f:78:
e1:4b:3a:62:ff:ce:76:f2:04:8a:3e:1b:29:04:66:c3:32:a4:
7b:56:0f:ac:82:29:7b:96:9c:a7:63:ea:24:48:b8:dd:94:1a:
01:ac:c2:47:44:95:9f:91:bd:2c:23:dc:a7:cc:6a:3c:86:7b:
d5:8f:2d:98:23:ac:1b:22:8b:99:ed:86:e1:17:ad:b9:1b:92:
30:e6:86:df:67:a8:c6:86:c7:58:20:23:f0:8d:d1:43:ca:39:
16:e1:bd:a7:e0:e8:22:16:b3:f7:5c:11:ac:c2:74:da:24:61:
6d:17:c8:30:02:ba:d1:05:68:fe:c5:8b:00:de:98:c8:fe:d4:
ed:fa:38:62:9b:e0:1b:3b:3c:0d:f2:05:44:47:da:54:63:8b:
26:3b:d6:84:74:0d:cc:1c:cd:6f:5a:00:3a:c3:74:86:01:8b:
a4:e6:80:5d:bb:b0:60:4f:13:13:7d:d0:ff:6d:75:d5:c7:f4:
f3:9f:c3:eb:ed:6d:37:d3:ec:a8:4c:ca:1f:0a:6b:d3:a7:24:
1e:a3:80:e2:ce:53:3a:4b:38:6b:08:5a:d7:d3:d2:fb:74:dc:
1f:8d:17:ec:13:aa:57:7d:5e:7c:f8:c7:89:77:4d:67:e4:6d:
6b:6a:c5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:25:22 2026 by rpki-client