Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: WXWfozFVIrILSEN+/qCLoLZAmNaAj5TYnPcMh6o/AR0=
Subject key identifier: B3:A1:99:11:0B:87:A1:8D:43:84:AB:0E:D0:C4:BC:77:7D:D8:F6:BA
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 01A115CE5F2ACB8B640E96CFB3C71BD80AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1A98
Signing time: Wed 07 Oct 2026 10:00:08 +0000
Manifest this update: Wed 07 Oct 2026 10:00:08 +0000
Manifest next update: Thu 08 Oct 2026 10:00:08 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: woo6xNjyv/D87xS+fgeAIXWTQGs0YORPBRIulW5J1kE=)
2: OsbNeDemf33I6qy3k7S6aVsfSb4.roa (hash: buqoADQn3zwLUm6WlH1oPTj1EbKPGWnckzo2lLMt3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:ce:5f:2a:cb:8b:64:0e:96:cf:b3:c7:1b:d8:0a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Oct 7 10:00:08 2026 GMT
Not After : Oct 8 10:00:08 2026 GMT
Subject: CN=b3a199110b87a18d4384ab0ed0c4bc777dd8f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:f7:a1:cf:90:dd:f5:06:61:f7:90:26:b0:
fb:45:0b:24:a1:f8:9c:d1:1f:ba:54:29:c4:20:7b:
0a:21:a4:df:de:43:e5:41:e4:24:55:e2:4d:ae:64:
9e:03:18:46:f9:6f:51:66:53:a2:ba:60:2c:33:5e:
44:71:1a:72:8d:bd:4e:34:8e:2f:7a:14:3d:93:17:
f8:bb:b4:f9:7e:a8:ff:27:9d:47:8a:1b:4a:29:ad:
34:1c:a2:2c:d4:8c:65:6b:bd:b5:57:47:1a:d6:c3:
b2:a0:0b:ad:dd:97:cd:89:0e:1b:16:53:d4:5a:e5:
42:da:bd:80:23:ce:75:20:d5:90:9d:74:dc:b5:bc:
d3:53:df:44:e9:5a:aa:bb:b9:52:a1:73:18:f4:2a:
64:f4:ba:07:ea:55:dc:42:a7:d3:a4:ba:1a:0f:84:
ae:12:8d:ee:b1:4f:80:9f:64:4c:aa:a4:65:92:39:
a6:b8:35:65:1c:ee:cc:3b:66:97:3b:ae:42:7b:41:
f5:56:3d:3e:e7:6a:aa:d8:e0:ad:98:6c:88:84:a0:
0a:92:3f:1e:d2:db:38:2a:82:ad:44:2f:b8:df:c0:
f9:df:90:48:07:83:ee:08:d2:cf:e9:c7:e4:c6:93:
7a:29:cc:0a:d4:17:06:35:17:02:9c:83:34:a3:7f:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:99:11:0B:87:A1:8D:43:84:AB:0E:D0:C4:BC:77:7D:D8:F6:BA
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f8:95:42:7a:27:a8:5c:d3:24:98:91:60:66:51:00:ff:8b:
4c:1f:80:5e:42:09:70:23:cb:e3:65:d7:31:f8:56:ce:5f:d1:
fa:d2:95:b9:28:01:c4:68:0e:f3:95:b1:10:e9:86:e5:07:d4:
45:2d:df:0f:ba:b0:77:fa:71:c2:b5:ba:c9:cb:5a:61:b5:67:
8a:13:c3:a3:72:9d:49:23:94:06:86:87:48:6b:43:4a:ad:e3:
e4:d9:97:9c:ae:42:7f:78:80:5a:6f:a0:dd:00:4e:81:56:73:
30:ba:27:84:9d:8c:81:89:94:38:79:61:29:2b:49:c1:87:25:
f9:50:5b:d9:f2:5e:cc:39:5d:ce:d1:95:1d:f9:90:55:ba:56:
8b:01:e5:7f:42:50:37:32:13:3d:b5:f1:9c:a1:d0:ad:e0:22:
7c:fc:1d:e2:da:17:18:ed:05:94:dc:09:bf:45:5b:73:c5:18:
47:f4:29:ec:ab:52:47:ac:b3:82:c5:3b:b5:b6:7c:b9:62:3d:
3a:ca:c5:8c:92:08:29:04:47:04:de:e9:03:73:eb:b4:3e:33:
d7:21:16:bf:88:a7:82:3f:3f:77:a6:c0:15:e1:3c:56:66:c7:
9f:be:e2:fd:6b:64:d2:c8:4c:aa:e2:0d:01:f7:3b:ce:38:54:
88:d2:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:15:38 2026 by rpki-client