Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: RPkRApJQ5DQo/iz+hieZYuMJ5qPFSsL5KpEsvlT4AVE=
Subject key identifier: 0F:8B:2A:C0:86:8F:CE:53:35:AA:4E:05:46:73:96:3E:73:87:8F:A7
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 01A1107268B4EE9709E718ECD28BDA7B4C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1A0E
Signing time: Tue 06 Oct 2026 09:01:35 +0000
Manifest this update: Tue 06 Oct 2026 09:01:35 +0000
Manifest next update: Wed 07 Oct 2026 09:01:35 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: O6Qtnca266bLT6rGFt0ozuAIbUX9d2dmArr22qnynb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:72:68:b4:ee:97:09:e7:18:ec:d2:8b:da:7b:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Oct 6 09:01:35 2026 GMT
Not After : Oct 7 09:01:35 2026 GMT
Subject: CN=0f8b2ac0868fce5335aa4e054673963e73878fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:22:0e:e4:ae:8e:13:6f:ad:20:1a:9c:6f:
6a:5e:52:0b:94:75:17:f2:94:8f:bd:67:de:5e:92:
81:62:41:46:13:98:0f:21:89:12:ea:bb:0b:f6:d9:
42:77:67:46:9a:d9:b4:ec:40:97:6f:eb:a1:81:1d:
aa:35:1f:0e:d5:f9:9d:c2:80:3f:43:4e:06:d3:1a:
92:95:0e:87:e9:8c:b0:ce:d2:5d:3b:2b:2e:39:02:
9f:27:46:a8:0c:64:38:64:a7:1f:23:2c:5a:3e:28:
1d:d5:01:08:ff:9b:1a:b6:c4:7c:89:e9:87:2a:2f:
b1:c1:41:4a:fe:c9:37:7f:d5:ca:e1:75:aa:96:b6:
96:b7:f7:a9:da:33:69:14:3c:d4:c2:79:98:9e:8b:
18:1b:ca:19:87:d6:61:ec:f9:60:15:05:de:57:a2:
3e:09:ce:81:fd:c1:60:02:82:f0:c5:52:b8:8a:ab:
48:bc:dd:d3:1a:5b:bf:72:7b:aa:0f:b1:be:e2:48:
41:c0:b1:3e:8f:34:62:34:97:ab:3b:f8:06:3a:31:
f7:d2:a5:a1:e9:58:9a:13:34:48:ce:10:58:cd:b8:
56:37:05:d4:fc:45:49:e0:43:ac:d1:26:69:a1:b7:
ac:dd:13:d1:21:1f:fc:fc:5c:f7:14:e1:ab:32:ab:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:2A:C0:86:8F:CE:53:35:AA:4E:05:46:73:96:3E:73:87:8F:A7
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:3a:4a:8f:7e:bc:9b:67:dd:1f:e3:24:33:21:03:e0:ce:
b2:08:f9:a9:64:29:7d:28:4f:18:6c:d3:b5:62:a0:39:8e:39:
ac:89:22:4b:c4:cf:dd:45:e1:54:36:b8:10:ea:22:75:6a:8a:
e0:29:f3:03:ac:c9:47:80:9e:6c:fb:73:bf:6e:a7:a6:71:8e:
b5:ab:e1:b9:a7:08:46:58:ea:ea:24:13:f3:a5:6b:54:c6:98:
21:06:4b:99:c6:b3:ad:5f:8e:13:b8:e5:0a:8b:49:0f:52:51:
14:67:46:88:32:30:cf:a5:51:03:ff:96:a5:93:3a:a7:5a:f8:
d4:c5:17:b3:55:0b:15:59:38:17:be:55:00:f4:33:9f:fa:23:
f3:4b:e8:04:26:a0:90:53:e0:e3:e9:80:63:9b:10:0b:ee:1a:
48:36:c0:4d:92:a3:d1:72:ad:95:5b:ee:18:ef:da:d5:f4:b2:
8b:a8:09:e4:9c:bb:14:cb:8f:e9:09:2e:02:d5:1d:0e:d2:b0:
1e:44:2e:eb:91:25:c1:38:5d:ed:54:cd:bc:81:2e:3b:e8:3b:
e2:b8:ae:34:61:63:f6:a1:99:2b:a6:37:26:0a:3c:b7:aa:74:
5c:5c:55:13:87:88:d9:62:7d:2e:d6:33:43:04:d6:30:5b:c6:
11:e5:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:56:34 2026 by rpki-client