Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: +Q1TH43XieMi3T8mLiyXGz1QvOQRLZQrDQaANio2pjU=
Subject key identifier: 4B:5D:8E:37:BC:1B:53:E4:0A:94:4F:57:9D:21:D9:F6:AF:C7:80:C8
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01A17D0556AE9F4096621ED8C3710503F9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 186A
Signing time: Tue 27 Oct 2026 11:01:04 +0000
Manifest this update: Tue 27 Oct 2026 11:01:04 +0000
Manifest next update: Wed 28 Oct 2026 11:01:04 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: Jcb82fFsIn31h2wQK2CYzL/MrkWLTClv9yxCVs+Wqko=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:56:ae:9f:40:96:62:1e:d8:c3:71:05:03:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Oct 27 11:01:04 2026 GMT
Not After : Oct 28 11:01:04 2026 GMT
Subject: CN=4b5d8e37bc1b53e40a944f579d21d9f6afc780c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:9e:25:07:c3:17:93:f3:68:2f:13:19:73:
f6:02:40:28:c4:ce:2c:b2:60:7b:e1:59:9c:02:81:
97:54:e2:a8:f9:79:18:79:70:68:2c:7c:ec:c7:0c:
84:51:3e:d5:81:34:01:92:0a:2d:54:e0:8b:16:42:
63:ed:ab:ae:55:22:ea:82:25:64:8d:0b:01:98:79:
ad:76:ca:d5:96:45:23:fa:b7:77:0f:90:22:52:b3:
7f:ce:a4:bb:b3:95:a5:96:91:55:e8:9f:f7:0f:c4:
08:86:c5:2b:83:fe:ce:04:a8:bc:39:df:60:6f:b9:
50:b2:de:86:00:40:07:57:9b:61:e2:ef:15:58:0b:
42:20:54:cc:22:4a:93:e8:19:25:7b:e4:83:d6:51:
5c:29:da:6e:73:69:43:d5:32:69:0c:8e:3b:22:d4:
c7:62:5f:b0:9d:60:5b:1b:47:d9:b0:e5:30:8a:2c:
9b:d3:5e:53:f8:ee:e8:54:7a:9f:ca:17:56:68:ca:
4e:7f:45:1b:cb:7a:76:0e:82:1b:d6:d2:48:5c:e3:
6d:bf:e4:65:f5:64:50:85:3f:61:6a:92:13:9c:f9:
1d:76:0a:44:8b:e1:29:8f:9f:c9:9f:fa:45:7e:1c:
99:17:8f:4b:15:b7:59:ee:33:07:a2:d9:0f:12:95:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:8E:37:BC:1B:53:E4:0A:94:4F:57:9D:21:D9:F6:AF:C7:80:C8
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cf:71:63:70:04:7b:d0:93:10:f7:af:dd:f7:2f:1d:f2:a5:
a5:ad:4d:20:90:b3:13:a1:80:e9:07:8b:5b:cb:29:46:c8:7c:
d9:35:a4:77:8f:b1:27:8d:00:d6:d9:d2:73:d9:47:c9:8e:ce:
93:2b:84:8e:ab:29:7b:a8:e1:92:ce:2a:d8:19:cf:a3:f4:a0:
f1:6a:81:86:87:eb:03:f4:2c:ed:02:d7:50:16:3a:0c:0e:20:
5c:20:b3:3d:ed:f0:33:d1:0f:7b:5d:19:aa:82:7c:11:66:5a:
44:1b:47:d5:a9:ad:46:39:a5:c2:fb:16:bf:c5:eb:cb:46:cd:
ee:6e:0a:c3:d9:7a:18:9d:f3:03:21:3f:9d:3c:1d:f0:d5:e0:
dc:25:d2:cd:24:08:86:64:c7:66:a0:0a:b8:cc:ab:77:3c:1b:
b6:dc:45:0c:ad:57:cf:ff:69:a1:d8:eb:df:1d:48:bd:f2:1e:
ed:ed:ad:e6:de:a7:13:af:30:d3:29:64:69:e7:c0:ea:02:97:
10:dc:f3:f8:c7:fd:96:a2:47:0f:ed:a3:09:11:bf:34:a5:cd:
77:fe:48:68:71:de:21:9e:49:b9:ad:65:1d:c6:0d:61:83:65:
d2:43:25:85:38:fb:ca:be:cf:e3:1f:1d:8e:04:90:9a:2b:ae:
0f:44:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:30 2026 by rpki-client