Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: a1ZZRYJW85enZrK7nvGRX6jWZUsxgD+kvKZocgw6OTg=
Subject key identifier: D8:E4:D8:F1:2D:AE:EF:7C:30:3F:2C:06:C3:EE:26:7B:AA:2E:81:FA
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 01A15A0C0124293A4C9E566423E472A5D86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 0298
Signing time: Tue 20 Oct 2026 16:01:38 +0000
Manifest this update: Tue 20 Oct 2026 16:01:38 +0000
Manifest next update: Wed 21 Oct 2026 16:01:38 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: 2JDGvLq8oHiw7UpNnlJ2/7tmNsu1NfnvranECevhsX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0c:01:24:29:3a:4c:9e:56:64:23:e4:72:a5:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Oct 20 16:01:38 2026 GMT
Not After : Oct 21 16:01:38 2026 GMT
Subject: CN=d8e4d8f12daeef7c303f2c06c3ee267baa2e81fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:ca:33:5a:b1:d9:60:c6:75:b3:74:f3:8f:
3b:98:3e:64:e3:f1:e0:9f:8a:34:af:ae:96:78:26:
d7:98:9c:7e:2c:3f:e2:fa:36:44:b9:c0:cd:74:a7:
37:1b:3c:fd:79:25:dd:f0:65:24:37:3b:b8:4f:32:
5b:ec:df:94:2b:71:40:f6:31:da:00:e5:df:14:d7:
19:d6:db:32:29:aa:b9:ca:7b:af:e8:8b:be:cf:4e:
5e:c4:74:9a:16:52:9a:ac:a5:96:f1:3c:f2:c7:b3:
ab:56:b6:f3:2c:db:2f:6c:e8:25:42:d6:44:40:ea:
c8:63:f8:f7:b0:f9:d4:66:63:e9:b1:12:44:5a:1c:
46:ad:1f:aa:43:6e:f5:f4:3d:82:db:99:ad:46:c9:
ba:7b:9b:51:be:f2:54:57:35:82:60:29:fe:46:c8:
60:bf:43:cd:5e:0a:d8:ff:79:95:cc:c1:70:6c:3a:
02:01:22:ab:32:fb:cc:22:48:d6:77:48:a5:42:dc:
4d:14:4a:2b:3a:b0:e6:74:4a:a6:78:ad:57:ef:7e:
a9:e5:b9:bb:d2:a8:bc:a7:11:a0:4e:86:f3:c2:29:
8e:05:c2:5b:17:af:7b:72:a4:3f:b1:d0:7f:c9:57:
d7:9f:23:66:30:60:23:18:3c:34:b6:4e:c6:33:77:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:D8:F1:2D:AE:EF:7C:30:3F:2C:06:C3:EE:26:7B:AA:2E:81:FA
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:97:cf:8f:ba:c8:9d:fa:45:b9:9a:92:2c:c0:75:d9:45:d2:
98:b3:17:1e:0c:d4:9b:70:6e:88:f8:f0:87:0f:e2:61:71:f8:
1d:e8:28:92:bd:8c:c8:ad:ad:8e:64:eb:55:35:43:82:14:0f:
d6:be:19:70:0e:88:f6:3c:1e:62:b2:cc:4f:62:8e:01:55:a3:
e3:f0:25:c1:80:af:98:9a:40:58:8f:28:a5:58:57:0a:0f:76:
fb:3f:62:e7:fd:55:17:8c:72:fa:31:f5:cb:ca:ae:ae:9a:83:
ab:5f:b0:a7:df:d7:f9:e8:e5:7f:ab:a5:a4:b2:8f:c5:47:a4:
e0:79:ec:35:d8:cf:41:5c:32:aa:9b:eb:ee:ed:dd:8b:80:04:
12:3f:df:2e:7c:a5:a5:50:27:5c:df:18:06:9e:43:18:20:9d:
f2:a6:b6:13:2f:94:bc:70:0f:c1:43:d3:25:ea:7c:30:ec:99:
e3:7f:52:ef:4a:c8:f7:af:49:98:65:2f:d5:81:8f:f2:e1:39:
da:59:d9:f2:09:4e:74:07:a5:7b:9a:67:03:ca:1c:a4:d0:04:
58:6e:8c:d0:93:61:9d:bd:f2:e8:6e:0e:11:6a:cd:a7:ce:56:
e3:86:8e:a6:a7:18:bf:d1:16:9d:5c:7a:4c:1c:de:31:d4:b2:
56:69:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:43:39 2026 by rpki-client