Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: dPicLmps6P9hUanOmRPQZGksxlDSk7iZQvoskIKX9pU=
Subject key identifier: 91:F4:82:32:F5:9A:19:54:EF:B5:3B:A6:8D:DD:72:41:25:D7:80:80
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01A089B0B1950BCD413B40A9B7817CBDAECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 17EC
Signing time: Thu 10 Sep 2026 05:00:53 +0000
Manifest this update: Thu 10 Sep 2026 05:00:53 +0000
Manifest next update: Fri 11 Sep 2026 05:00:53 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: FWZPEwhwjB7Q/XXqONxzJN1Mm1/KIboMMiUkhfHuuGU=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:b1:95:0b:cd:41:3b:40:a9:b7:81:7c:bd:ae:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Sep 10 05:00:53 2026 GMT
Not After : Sep 11 05:00:53 2026 GMT
Subject: CN=91f48232f59a1954efb53ba68ddd724125d78080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:9a:1f:9b:2d:b6:d2:b9:f2:83:52:0f:0b:
c1:89:07:19:61:b2:82:e9:22:4b:9c:49:d7:c8:92:
4b:99:59:be:08:02:68:fe:c8:26:17:84:5b:1d:f3:
72:c7:16:17:53:6f:5f:92:fe:9f:04:a1:98:4d:d9:
65:1e:e6:30:a9:ed:a6:e9:33:51:77:39:bd:f0:f0:
f9:25:17:ea:54:15:ef:43:54:95:a1:2f:d1:1f:c2:
df:81:53:80:8d:91:29:b0:2d:de:0b:65:08:48:0e:
e7:3b:a1:ef:93:43:ff:b0:bc:62:20:cd:50:d9:5a:
a8:59:e0:85:d7:2b:76:b3:4c:96:08:53:16:e0:92:
9b:0f:c6:81:20:6e:ff:70:8e:2e:4f:47:61:a3:ee:
4b:89:9e:76:46:53:ac:d8:2c:e8:f9:df:b1:c7:06:
9e:59:ca:a4:e2:34:58:75:1a:f1:d1:6d:57:a0:1c:
32:ab:b7:c8:59:c4:7f:f0:ac:0b:5e:aa:48:91:fa:
ce:b3:19:35:de:53:2c:3f:28:98:58:37:85:a0:bc:
4c:93:f3:63:79:7f:71:2e:90:71:89:2a:c3:a6:c8:
7b:e9:23:40:e8:51:db:9a:ed:a7:e2:af:61:81:6a:
4b:9d:fc:20:1d:8e:ba:53:f7:41:ad:9c:dc:eb:58:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:82:32:F5:9A:19:54:EF:B5:3B:A6:8D:DD:72:41:25:D7:80:80
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:3e:dc:47:1d:10:3e:b3:5f:b8:57:4e:87:79:f9:80:55:
f9:d3:5f:7c:f1:b6:a2:2b:ec:aa:4d:32:89:d9:c6:8c:b3:c9:
cc:e3:8f:4a:60:e1:61:19:17:f7:18:5c:d7:10:a3:9d:95:67:
07:91:50:0a:8a:14:56:05:dd:44:2c:0d:61:9b:9b:3f:c6:43:
0b:46:58:b5:c8:43:17:cd:55:92:00:db:4a:48:f0:c0:7e:2f:
0a:5f:9d:68:b6:91:37:15:85:98:70:2b:44:56:64:0f:e5:e4:
be:9a:e7:da:6c:b2:95:46:d6:d7:bc:6f:6b:6e:76:54:a6:a7:
76:86:b9:b1:77:47:72:d9:b5:fb:6d:15:d3:5a:79:f2:88:3e:
42:9e:97:be:7d:8e:4e:fa:0a:78:f0:3d:51:95:0d:61:93:41:
e9:a8:48:45:b8:f9:f1:7f:fc:09:8d:a7:d9:fd:7a:ac:5d:1d:
2a:92:e5:b4:4c:f2:45:76:0e:9b:2b:40:c6:4f:24:14:eb:e7:
ca:75:bd:ec:7f:8d:3e:5f:65:e5:55:10:71:81:e0:d7:4c:27:
99:a6:7d:79:69:d1:a4:2b:19:39:b9:24:40:05:e6:04:a6:7a:
e7:97:c9:8a:f1:c4:52:c0:18:7c:23:63:10:10:0c:7b:5c:de:
de:e3:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:10 2026 by rpki-client