Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: JddtaPMfYQ57neMMzYOAiQVptCBTqcc0/ok/aTW4PN4=
Subject key identifier: BC:5C:AA:9A:2D:B5:B2:4E:D8:F8:F6:EB:2E:84:AD:01:E0:2D:88:C0
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 01A03E28C9B575EADF01E8F3ECA4B13D7003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 0205
Signing time: Wed 26 Aug 2026 13:00:55 +0000
Manifest this update: Wed 26 Aug 2026 13:00:55 +0000
Manifest next update: Thu 27 Aug 2026 13:00:55 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: Y+xRJHMQsZeLHmHVyExjmr6bJwFH3WzvrfbSvIVZd4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:28:c9:b5:75:ea:df:01:e8:f3:ec:a4:b1:3d:70:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Aug 26 13:00:55 2026 GMT
Not After : Aug 27 13:00:55 2026 GMT
Subject: CN=bc5caa9a2db5b24ed8f8f6eb2e84ad01e02d88c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:4d:4a:f8:3e:e6:ec:86:28:ab:f2:7f:c9:
4c:b0:ed:2c:c3:78:91:cb:6a:1c:92:32:22:0d:43:
b0:36:ba:e6:5d:78:16:10:d5:05:dc:b9:e9:01:a1:
66:00:96:b0:b8:0d:9c:e7:fd:cf:53:4d:2a:44:f9:
2c:48:86:b8:e8:97:70:94:bb:5b:1a:34:59:a5:ae:
11:95:18:2f:52:fb:1b:85:e4:0e:c4:34:cb:97:08:
1d:2a:a4:82:10:ae:22:40:27:08:e6:0c:24:58:a4:
39:35:4a:ae:94:33:f4:23:ad:37:7f:48:06:7e:23:
04:d4:4a:2c:2f:73:72:c2:d0:5a:2e:bc:11:cd:61:
bc:2e:17:d3:ab:1b:38:13:49:d2:dd:f8:f9:0f:b0:
7e:91:b0:7f:92:e1:43:85:aa:62:19:f2:af:04:46:
99:d4:23:18:38:57:56:ce:25:c5:72:3e:af:fb:b8:
15:bb:4d:67:d8:66:22:8b:52:97:ac:05:06:ac:52:
8f:b3:8f:48:94:b7:bd:09:28:f7:62:14:5f:8f:ce:
7f:3d:9a:96:7d:72:c9:cf:6b:7d:63:8d:b4:a4:ba:
0a:cf:29:81:ac:ab:b3:27:6b:f4:16:78:63:4f:8a:
ab:77:c1:df:d2:a8:dc:4c:b5:d8:b7:e5:b9:02:f3:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:AA:9A:2D:B5:B2:4E:D8:F8:F6:EB:2E:84:AD:01:E0:2D:88:C0
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:18:39:38:89:e8:c3:b2:bc:60:9b:d2:c1:19:a6:bf:c7:
43:65:fe:73:d6:f0:26:d7:28:44:47:f3:07:16:e8:fa:d3:2b:
61:d0:85:f1:56:74:d6:7d:6f:ed:d9:72:ab:25:5e:5a:cd:90:
bf:13:dd:fe:d4:67:fb:21:95:6e:54:b9:e5:49:52:4c:2b:60:
30:17:2d:b4:b5:9b:cb:2d:4b:ce:c6:73:dd:6e:3a:67:32:d7:
a5:fd:53:9e:ad:b1:65:b3:39:ad:db:cb:b7:ca:8c:3d:44:f0:
16:2d:66:d8:18:96:c9:39:c5:f5:8e:97:b8:b2:ba:32:5e:7b:
e5:35:6b:4f:72:e4:80:f5:24:e8:9d:c2:e1:38:f4:79:6d:7f:
4e:3b:34:b7:26:a5:c4:b8:ba:38:5f:db:f1:7a:b2:bf:9a:a4:
20:18:c0:83:72:81:63:6d:08:84:8e:eb:68:5e:f0:46:bc:e3:
96:58:24:2d:76:57:44:49:bd:d1:74:4f:f4:c7:92:ea:9b:90:
69:e0:e1:69:6c:43:0b:c0:11:86:b9:03:02:0f:af:e9:7e:a5:
42:70:e4:f1:d8:f9:56:d2:e4:ab:df:bb:64:53:4d:bb:ce:4c:
86:7f:95:67:a2:21:07:9b:87:6a:90:96:7b:9d:d6:fb:6c:d6:
05:c4:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:24 2026 by rpki-client