Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: l6L9YO2RSBhYuMLMvjp2vroyMKU4QDsp/+tik0X6Qsg=
Subject key identifier: 89:F2:A7:FB:91:72:EE:B4:45:F0:87:1F:CD:57:6D:EC:99:F4:3C:F1
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019F0EF717CAE4E665C8F8E5094F943DA513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 10C8
Signing time: Sun 28 Jun 2026 16:01:42 +0000
Manifest this update: Sun 28 Jun 2026 16:01:42 +0000
Manifest next update: Mon 29 Jun 2026 16:01:42 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: 6GbNq7PZGRqCpHXUva07w9d49loXzewVUQRI9WazLkw=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 16:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:f7:17:ca:e4:e6:65:c8:f8:e5:09:4f:94:3d:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jun 28 16:01:42 2026 GMT
Not After : Jun 29 16:01:42 2026 GMT
Subject: CN=89f2a7fb9172eeb445f0871fcd576dec99f43cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:68:48:3c:ef:33:cd:d0:8a:51:d7:1b:a3:
2a:32:72:68:2c:70:3e:4c:0f:65:ba:c2:a1:a2:cd:
3b:b9:cd:7e:6f:2a:7d:ca:f8:ef:03:41:1f:44:0e:
97:c6:c3:20:f5:db:bf:9c:77:4a:c9:78:68:fe:b2:
a2:44:b7:1d:ec:28:26:0b:72:47:1d:c6:79:b2:3a:
46:d2:75:2c:ab:fc:e7:35:5d:f1:e3:95:2b:90:bb:
2c:8f:11:a4:9c:87:d7:44:f0:9a:a7:f1:b4:c2:8d:
17:79:6b:f0:5e:69:b9:2f:7f:ae:a6:35:cd:08:85:
41:35:d7:fd:3e:d7:4e:22:de:9d:c5:94:49:67:a7:
94:58:51:2e:6f:fb:0f:e9:52:0a:e3:86:47:dc:08:
a9:2b:1d:ac:62:83:7b:3d:b3:a2:47:fe:cc:99:8c:
8c:d7:15:e8:63:f4:da:85:73:e0:12:78:22:bc:85:
5b:f1:54:e2:96:19:04:0e:ee:a8:98:ca:ed:29:c4:
5a:d8:87:df:3b:3c:bd:e2:7d:15:1c:86:80:89:06:
f8:69:a0:9a:35:ba:f4:0f:b0:06:a1:42:31:8c:35:
8c:00:a8:ae:46:75:c7:0c:32:62:8d:18:44:78:30:
b7:c2:0d:19:63:01:d0:4f:c2:f3:44:67:d7:b4:64:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:A7:FB:91:72:EE:B4:45:F0:87:1F:CD:57:6D:EC:99:F4:3C:F1
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1e:ba:22:06:54:22:3e:a6:2d:01:a3:2a:48:8a:1e:99:63:
8b:9f:6f:3b:18:f8:45:18:5e:14:85:f4:9d:36:54:76:13:f2:
c3:09:04:29:02:55:b2:4c:47:1f:f3:b9:50:43:18:ea:84:18:
4f:ab:b7:03:cb:18:f0:7a:37:a9:d2:ba:05:c7:35:21:7a:bb:
3c:66:bd:d3:e8:c0:a0:47:09:09:c8:05:d9:b7:bb:29:ed:46:
12:8a:7d:d8:10:a6:b9:50:5b:72:79:0f:65:e9:fe:97:d7:36:
eb:f9:a7:25:42:32:b8:dd:c3:cf:dc:d8:a3:23:c6:c3:a0:9f:
3a:e2:b0:a3:82:e0:28:90:18:cd:1e:24:5f:87:26:c3:31:ea:
d2:14:24:4c:9b:5d:26:94:97:eb:c6:40:f4:ce:c3:37:23:7b:
47:b7:b2:c1:69:83:f6:fc:04:5a:37:68:83:37:5f:df:b1:9c:
ef:1c:b7:d2:10:e9:e4:9a:77:64:4b:4e:57:e0:eb:96:df:23:
ac:2a:79:41:02:79:25:96:0e:f2:d4:ab:eb:09:dc:ad:52:6e:
00:ec:21:30:73:f8:c0:ec:35:bd:62:5a:ff:18:41:e5:32:19:
59:a5:d2:ce:58:e9:76:ea:07:f2:af:29:64:5c:b3:1b:06:23:
6e:e9:ca:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:50:13 2026 by rpki-client