Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: B1KZX4c98j2AdzFAIDmofm92+g8zYtaFJPTU89oaPFQ=
Subject key identifier: 51:F7:D7:56:11:E8:F3:B9:A7:7B:37:E2:35:0A:F3:4A:1F:38:D4:45
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01A17DAA1A95D029D7AC7B6C133F115E8C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 19A5
Signing time: Tue 27 Oct 2026 14:01:02 +0000
Manifest this update: Tue 27 Oct 2026 14:01:02 +0000
Manifest next update: Wed 28 Oct 2026 14:01:02 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: N6oFfGjFLMXNtMKBso9Q7Cd5VI7sk9x/5Pe28/SAub8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:1a:95:d0:29:d7:ac:7b:6c:13:3f:11:5e:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Oct 27 14:01:02 2026 GMT
Not After : Oct 28 14:01:02 2026 GMT
Subject: CN=51f7d75611e8f3b9a77b37e2350af34a1f38d445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:a6:04:f0:3e:da:a1:da:6f:f1:dc:1d:fa:
81:c0:9d:ae:24:f5:5e:e7:2a:d3:ca:64:2b:61:52:
c1:4f:65:3a:c9:2c:91:dc:5a:c2:69:ad:a7:c1:b4:
81:b0:0b:96:5e:3b:37:0a:59:a7:2b:e4:f7:e2:74:
d3:88:39:e3:79:6d:45:da:a3:64:eb:7a:47:56:42:
22:da:ec:ed:54:4c:04:85:e8:b7:da:33:a6:d4:09:
23:a5:f5:75:55:6b:d8:cc:84:c7:10:c2:b4:cf:e6:
fd:e4:e7:25:56:59:ec:e0:ad:81:44:61:d0:e2:19:
fb:ff:d1:ad:5a:4b:ec:e9:a3:4b:9e:4c:f4:93:a0:
85:b3:53:04:21:c6:e2:d4:cb:ab:5f:2a:12:d8:07:
36:67:a1:06:48:0f:a2:b2:bc:be:9d:fd:23:90:ed:
86:1f:4e:3c:8e:3b:7f:87:45:86:45:f2:6b:91:ce:
bf:18:f0:e2:62:76:1a:01:35:34:d2:2d:49:5a:8e:
92:0a:96:a8:9d:03:30:e9:6a:cc:02:85:52:29:cb:
88:2b:88:ec:b0:2b:dc:65:ca:44:2e:dc:65:30:39:
ce:95:3f:ba:de:2e:ea:12:e5:ed:89:d3:1d:91:f7:
d4:f6:b5:4b:5d:f8:83:08:4d:d6:b3:87:bc:75:bd:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:D7:56:11:E8:F3:B9:A7:7B:37:E2:35:0A:F3:4A:1F:38:D4:45
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:4b:9d:8b:c9:5a:6f:21:32:1d:19:56:7b:81:51:38:b7:
2f:62:14:f0:a6:2a:02:7d:dc:e4:d7:aa:6f:90:22:e1:5d:27:
44:bc:59:8f:d1:48:2b:4a:b0:ee:9f:3b:d4:ba:b3:05:d8:c5:
f4:59:45:f5:0a:55:7a:1b:d6:c8:0d:96:de:f8:c5:41:4d:50:
9f:0d:c4:d9:ea:11:3c:b5:e6:b2:db:a1:3d:95:74:dc:36:82:
e6:c8:7c:ad:23:97:29:c9:dd:d9:03:2a:01:07:a5:d2:be:02:
d6:16:0e:54:f1:fc:d9:b4:51:97:68:14:63:79:88:6d:d4:87:
c6:80:48:27:94:c3:5c:b5:c8:55:fd:1d:5e:70:dc:78:30:ae:
9c:10:f4:f7:26:4d:6e:3a:64:3b:1c:41:d2:28:8c:bf:3e:7f:
2d:35:d5:f1:fe:68:52:ca:45:87:e2:3b:f7:cc:ef:51:c5:8a:
cb:36:cf:52:bf:d1:10:16:15:af:75:e6:44:b0:85:19:78:03:
d5:ac:dc:d3:3d:4f:6a:27:ad:a7:41:4e:a1:60:e4:d5:47:a3:
12:de:a4:d3:b7:f3:ad:17:93:cc:e2:ca:1b:b5:c8:40:5e:4f:
b5:45:30:f3:60:5c:17:c8:7c:a4:d7:5b:22:b2:e2:70:f9:cd:
ad:2a:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:57 2026 by rpki-client