Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
File: lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft (raw, json)
Hash identifier: BfCkWF8eAGoaKN3Q5DCyMDpw7Lg3SWneXy1RDX2FqEg=
Subject key identifier: 13:AC:49:DA:9A:BB:4B:65:57:FE:C0:FE:63:4A:F3:23:00:B9:1E:74
Authority key identifier: 94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
Certificate issuer: /CN=94bd5921933292a2f93e049f8b81fb7650301c67
Certificate serial: 01A15477FC95EE3D5983E5E91F7A4818F99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
Manifest number: 018A
Signing time: Mon 19 Oct 2026 14:01:51 +0000
Manifest this update: Mon 19 Oct 2026 14:01:51 +0000
Manifest next update: Tue 20 Oct 2026 14:01:51 +0000
Files and hashes: 1: lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl (hash: nL5RWhS6BHUO2nZLreEdCbYGBTNCtcX4LutNrPfnbbA=)
2: xITKiIhMJqr64QWowOp5Oos94Ts.roa (hash: 0jGjhsogZ02DOgH0lYdyo4DGk9IGywTmUiv2U/qvPr4=)
3: zzQCv-E1bq6Vad6HBjZl3qZJnBs.roa (hash: GpwoA2VX03zH2zUpZrOb1rRxnrDXnBgehj8lNRuizXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:fc:95:ee:3d:59:83:e5:e9:1f:7a:48:18:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bd5921933292a2f93e049f8b81fb7650301c67
Validity
Not Before: Oct 19 14:01:51 2026 GMT
Not After : Oct 20 14:01:51 2026 GMT
Subject: CN=13ac49da9abb4b6557fec0fe634af32300b91e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:97:61:dd:88:f2:90:28:d6:ed:d1:74:e6:
5e:ce:83:8e:ab:5f:98:5c:d6:7d:04:ec:e2:ea:81:
6c:6b:d5:3d:56:06:8e:34:39:00:52:9d:d7:13:e6:
6e:34:07:e1:7d:ce:7f:57:e3:60:28:41:ab:02:36:
96:5a:70:36:ef:9e:50:bc:ec:68:12:2c:87:e3:aa:
e6:12:b1:e3:03:68:a1:95:5f:ba:56:bc:40:79:09:
a0:26:fd:b5:64:0f:92:97:2f:a6:aa:ea:bc:55:6c:
83:77:74:3b:b6:81:de:41:cb:72:bc:ec:8d:65:04:
7b:e5:1f:d8:dd:28:29:b2:b8:08:e9:8a:df:b9:a9:
30:b3:cc:e9:ba:cc:fb:41:34:20:30:4a:50:46:aa:
70:61:11:50:22:79:c9:e7:a1:3d:1b:cc:58:8e:a7:
03:88:da:74:ba:25:4d:1c:93:48:a5:40:d3:f7:7a:
27:08:d7:e7:ac:49:d8:61:fd:c6:49:4a:83:87:f4:
7c:4f:63:93:11:9f:99:47:f6:1a:d2:ff:ff:bb:53:
3a:eb:15:e9:16:d4:62:b8:db:84:8c:0c:e3:7c:a4:
0c:47:72:9d:46:6b:81:20:be:cb:60:6c:9e:b7:cb:
d2:01:3b:7c:90:48:de:42:4a:a1:0a:80:a9:f0:42:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:49:DA:9A:BB:4B:65:57:FE:C0:FE:63:4A:F3:23:00:B9:1E:74
X509v3 Authority Key Identifier:
keyid:94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fb:5d:83:5a:16:2c:da:c9:79:73:44:03:f6:d7:f6:f3:c4:
b9:a6:6d:f0:aa:a2:89:94:73:a2:9d:17:00:30:f6:fe:c3:47:
95:2d:43:48:38:58:d1:8e:d9:33:de:4c:4a:4e:60:8b:e6:87:
46:fc:32:5a:29:90:8b:55:2d:00:7d:9b:eb:af:a2:26:b6:f2:
96:94:d8:cc:18:6f:58:9d:98:73:41:d6:cb:8c:6f:ee:2c:26:
b0:32:1f:90:6c:2e:87:f4:2b:ea:fd:9f:56:86:8f:13:36:9a:
33:5c:4c:d5:a6:f6:65:85:32:9b:f6:53:3e:63:41:7e:a7:c5:
67:1a:86:79:2a:a6:16:c9:a3:c3:87:31:64:b9:4e:f7:20:b7:
c3:cf:27:9f:20:2f:03:3a:87:09:38:93:bf:ac:5a:a7:89:7c:
86:ca:28:70:ab:f7:23:27:dc:5d:e2:1c:23:70:ae:e9:f7:3f:
c4:d4:8a:9c:7e:e6:f2:39:76:62:dd:d0:d6:83:88:31:ac:86:
d7:4f:ee:f5:95:0e:6c:65:44:cc:03:97:0d:88:9d:e9:83:8d:
5f:d1:79:ee:06:89:54:3f:a7:61:ee:8b:22:b5:66:47:d8:c5:
35:c8:61:d3:0e:a7:d6:a2:b2:9e:6b:24:82:f2:13:66:7e:aa:
bd:62:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:01:57 2026 by rpki-client