Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: rWW+cbGZfncgjsYTbQvUUy3gn43eZa/TB9mt+UsWMn0=
Subject key identifier: F0:9C:F8:49:23:BF:3F:12:55:4B:10:87:CC:A4:32:E8:4C:A1:89:89
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 01A1404C186A897B2A36EDCD85AB7C7A9B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 1A37
Signing time: Thu 15 Oct 2026 16:01:31 +0000
Manifest this update: Thu 15 Oct 2026 16:01:31 +0000
Manifest next update: Fri 16 Oct 2026 16:01:31 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: 9p8TxavxdtNBXpPswUg4JUzySOirM1F4Tx1r5Tv5wOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:18:6a:89:7b:2a:36:ed:cd:85:ab:7c:7a:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Oct 15 16:01:31 2026 GMT
Not After : Oct 16 16:01:31 2026 GMT
Subject: CN=f09cf84923bf3f12554b1087cca432e84ca18989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:0e:df:b8:7a:f4:61:f7:c7:7a:38:29:0f:
85:52:09:f3:76:e9:f6:1e:35:88:42:2e:5d:c6:41:
71:1f:14:e0:60:a6:a0:62:98:ba:14:0e:90:45:f7:
52:65:08:82:0d:df:b4:ce:5a:5a:17:a8:3f:04:a3:
22:de:ec:20:e2:d3:4b:b4:75:40:a2:4d:31:25:ad:
08:87:e7:70:c0:ae:ed:98:c5:01:d7:06:ca:e4:07:
b5:fb:fd:d2:53:90:2a:1b:33:b7:14:bd:1d:2b:61:
eb:95:5d:73:a1:6b:c0:c2:b5:ab:8c:ce:6c:76:83:
41:0c:dd:27:7d:93:21:15:12:d0:d5:77:05:1a:86:
86:87:26:a5:a1:13:4d:5c:c5:b7:00:69:c2:77:b4:
96:69:5c:91:ee:b1:85:c4:2c:10:4b:c2:d1:22:33:
5d:ee:82:83:89:4b:b0:93:8f:7c:bd:4b:fd:8a:5b:
b5:2f:c4:fd:83:75:8b:0a:c5:d3:73:58:a6:2e:de:
99:8e:fd:fd:c1:5e:38:f8:dd:db:5a:92:78:80:ce:
68:2f:5f:76:79:03:fb:e1:30:24:4a:e4:75:87:ef:
5d:57:04:29:b7:6d:99:58:49:33:0a:9a:75:29:6a:
69:44:b6:b3:c7:c5:b8:8d:f3:bd:9a:31:c4:b7:2a:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:F8:49:23:BF:3F:12:55:4B:10:87:CC:A4:32:E8:4C:A1:89:89
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:44:3c:d0:21:e6:13:95:36:35:d0:24:5b:50:f3:ef:5c:4b:
b5:e2:8e:32:a2:8a:b4:b4:2b:d6:47:6f:fa:20:01:96:fa:3a:
e5:75:3d:5f:96:6c:ea:2e:a4:cb:e3:e2:4e:99:46:35:38:f7:
72:3a:ba:76:57:81:69:25:80:b0:af:68:69:58:76:73:8b:e2:
88:7a:38:bb:d5:ec:d1:b0:c5:44:84:0e:0a:ef:e9:01:4c:1a:
8c:7a:54:41:ac:bf:71:9e:7e:27:11:52:a3:9c:f7:d3:39:6c:
39:39:57:b8:b1:bf:68:78:4e:6e:a9:c8:8f:6b:8c:10:a1:e0:
f6:1f:18:a1:3d:61:bd:1a:36:76:4f:f2:4e:3b:43:d4:4a:63:
ca:c5:a7:5b:bf:09:e4:39:d5:71:5d:e9:10:bc:b1:a7:d7:ff:
2a:2e:86:d6:bd:34:61:9b:5f:89:54:b8:82:10:6b:17:85:33:
e1:f1:4f:eb:be:e0:29:b9:9b:bd:e8:e1:06:9c:78:54:7a:f6:
75:e5:60:8f:b4:e5:20:91:10:30:02:44:0d:3d:24:55:63:a6:
64:26:1d:8d:78:27:38:a0:5f:c0:09:3f:6f:e4:41:1f:fd:ff:
ec:bd:30:e7:be:8c:62:bb:fc:f3:88:04:11:1a:e8:f0:18:99:
bc:67:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:01 2026 by rpki-client