Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: d/p4FYE67glnSCsl92/ootxrBl2ksvcEnUhRYgDBTgw=
Subject key identifier: 94:87:5D:0C:26:FF:47:97:85:F0:CC:E2:E8:9F:6E:72:83:D3:37:33
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 01A08DC43B6BAF7C74736D7DACC872A263DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 00:00:42 +0000
Manifest this update: Fri 11 Sep 2026 00:00:42 +0000
Manifest next update: Sat 12 Sep 2026 00:00:42 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: wvlrL7fiQYfN2/e8dQ0OiSsz3QlOxBJqS+p8+7loofM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:3b:6b:af:7c:74:73:6d:7d:ac:c8:72:a2:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Sep 11 00:00:42 2026 GMT
Not After : Sep 12 00:00:42 2026 GMT
Subject: CN=94875d0c26ff479785f0cce2e89f6e7283d33733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:80:66:f4:bf:d8:60:9c:44:19:17:58:a1:
1b:e1:e4:11:77:c1:3c:8b:a3:18:df:9f:18:de:92:
01:ea:b1:21:ca:c3:e1:59:d6:5e:48:05:46:7b:27:
db:32:37:52:7b:67:f5:ba:bc:49:7d:92:71:f9:a2:
c4:5a:64:1f:f7:ad:d6:22:4e:4c:70:cc:87:a9:58:
ef:9f:2c:b9:b6:34:ee:29:90:52:1f:7f:db:44:f5:
dd:19:55:5a:01:12:ad:52:9f:60:01:e1:3a:8f:46:
fb:e7:6d:80:d5:02:d7:af:0f:7e:57:1b:a3:3c:5e:
a4:6a:d4:a1:0a:65:b2:7e:85:8f:19:78:c6:72:aa:
cc:f8:12:46:0d:57:5d:9b:17:79:66:b3:cf:d0:a4:
73:89:ea:89:b9:52:99:fb:52:6d:4c:06:00:5f:fd:
eb:05:11:b0:c1:b1:a6:bb:50:69:9e:9c:cd:76:66:
fc:65:61:d5:6a:d0:0a:64:cd:ad:53:e9:58:c6:b9:
db:60:80:4f:37:a8:b5:20:a5:5d:fa:dc:6d:14:8c:
a6:06:15:f2:c8:cb:f8:88:64:a7:fb:dd:57:16:e4:
43:84:eb:b5:bd:e4:51:5c:b3:17:45:c7:0a:f1:5f:
12:69:b3:a8:14:08:a6:87:c0:5b:c8:43:19:45:0e:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:5D:0C:26:FF:47:97:85:F0:CC:E2:E8:9F:6E:72:83:D3:37:33
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:7f:8b:2b:ae:13:94:56:13:18:a2:6a:2a:64:ba:db:86:
d2:9e:5d:5c:b7:31:bb:21:61:4e:83:5e:ef:58:b9:97:57:24:
a8:47:60:22:14:d4:bc:8c:69:be:af:d9:6d:a2:b2:24:b0:c7:
5e:60:2e:81:cd:3b:5a:d7:c9:3c:78:11:88:d8:a3:69:f8:75:
e7:3b:8d:2c:81:c2:4a:81:38:9a:59:07:d9:29:c9:6d:00:48:
1b:16:97:d0:d1:23:29:87:00:7b:4b:eb:0b:f2:3f:f2:9d:c9:
7a:d6:7a:34:45:c0:44:38:a8:9d:71:ef:9d:8a:91:21:11:04:
80:ec:c7:d1:ee:88:d6:68:8d:18:5a:f2:e5:1f:6d:4f:ba:71:
53:b8:9b:20:d0:6a:4d:aa:5f:ca:d6:c4:f7:09:59:2a:6e:92:
20:bd:e6:e7:36:b6:69:5d:48:20:32:9b:00:47:d6:82:ed:cd:
7f:87:1f:1c:f2:02:72:fc:e1:65:2c:ae:94:4a:39:cb:d2:64:
77:45:93:19:37:de:49:d5:7b:40:ba:9c:27:49:66:a4:05:86:
3c:e1:f8:6f:30:cb:c8:95:99:79:16:6e:66:7f:15:7b:ab:ad:
0a:6f:b8:72:5e:dc:2b:d0:53:1f:54:79:49:6a:42:90:a5:b5:
d7:5e:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:25 2026 by rpki-client