Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: bBi+2+PXJb1IBkcfp2MqHBd+9za9vdh6qKz4I+sEz00=
Subject key identifier: A2:86:05:61:08:7D:21:B3:67:CB:E3:C1:F5:70:8D:55:27:F4:20:3B
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 01A1224119AF23A2BE7806273DEB5C351011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1AA9
Signing time: Fri 09 Oct 2026 20:00:53 +0000
Manifest this update: Fri 09 Oct 2026 20:00:53 +0000
Manifest next update: Sat 10 Oct 2026 20:00:53 +0000
Files and hashes: 1: 9l4eTxQiJdfwsUpte57Ojwmqkt8.roa (hash: emeHHUrFvsDMnCrOVZjdq3feYW1b8D0yrHBj07czvhI=)
2: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: iGs5yiQFHJLl0gNBoUIM6B5vOLW2pTOQA3DcCmENlWk=)
3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:41:19:af:23:a2:be:78:06:27:3d:eb:5c:35:10:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Oct 9 20:00:53 2026 GMT
Not After : Oct 10 20:00:53 2026 GMT
Subject: CN=a2860561087d21b367cbe3c1f5708d5527f4203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:0d:08:50:f7:6b:c0:71:ce:24:49:32:90:
d7:d4:ac:01:08:30:f5:4c:25:11:99:0e:29:a7:ac:
f0:a9:aa:af:81:26:76:87:28:48:04:3c:47:09:64:
2b:1c:d8:bd:68:6a:2b:27:ea:11:1d:be:4b:ee:15:
4d:d4:68:10:36:57:0a:8f:2e:c1:5f:69:e8:14:68:
2e:b5:85:75:2c:24:2b:23:81:67:af:fe:71:4f:1c:
21:06:23:fc:8b:6d:4b:27:fa:4c:6c:64:45:86:05:
1c:68:92:cb:a4:f0:eb:57:54:50:38:05:ed:e2:4c:
a8:6f:d4:3e:49:31:02:08:dc:4a:23:f7:ff:36:90:
82:cb:a3:a7:b0:83:56:bf:1b:66:25:e7:58:8f:fa:
87:cb:db:37:90:7c:7f:34:52:8d:0c:7f:06:03:d8:
57:af:d5:6a:bb:77:38:3c:5a:0e:c8:d0:94:74:82:
ef:9c:1c:52:a7:68:e6:a4:1d:37:ee:e9:e6:62:2b:
37:5a:c3:8f:d3:41:28:40:26:1f:33:ce:2b:bb:26:
80:52:6f:d7:e7:b8:21:66:f9:9b:84:32:42:b3:56:
8b:3c:42:38:91:b6:8e:34:6f:3c:9b:d3:ad:8b:73:
d0:9e:d5:da:c1:5b:d7:07:90:a4:3b:9b:a5:85:c3:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:05:61:08:7D:21:B3:67:CB:E3:C1:F5:70:8D:55:27:F4:20:3B
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fa:b0:a5:b1:25:95:90:f3:db:f6:74:9d:dd:5f:24:03:58:
20:7e:84:fd:34:3d:cb:7f:46:d8:f2:8d:99:34:40:53:5b:db:
da:d7:db:60:03:63:4a:fe:5f:c0:8a:24:a3:c9:a4:ec:af:22:
0d:ab:7d:9d:78:b9:4f:d8:c5:44:f6:66:d4:43:e6:5c:d8:f0:
db:47:39:05:b9:2c:d0:b7:4a:39:53:ff:06:d0:0b:ed:ea:cc:
ab:6b:88:5c:c7:0d:3a:89:17:ec:c1:a5:e0:30:69:36:e0:ed:
43:58:ea:99:51:9d:15:61:0c:a0:d9:b6:49:1a:37:86:0b:9c:
1a:29:72:44:34:1f:e8:db:c1:42:2b:4a:06:17:42:03:73:ad:
ff:3e:73:7d:49:8c:81:16:dd:f3:ea:2a:ce:bd:c7:b1:07:66:
21:bd:f7:c0:63:a6:33:e1:36:02:35:6a:e4:57:da:cc:d6:ba:
d8:50:3a:d7:14:71:a0:d2:ee:97:ae:d1:26:fe:76:48:ac:78:
21:ef:d7:b1:98:3a:57:64:cb:48:1c:44:79:77:0a:80:df:cf:
70:97:b0:03:ef:28:0a:8d:3c:40:a7:d3:a9:42:10:f5:80:27:
50:7d:9c:cb:15:be:fa:06:aa:4d:7e:b3:1b:cd:72:a8:f2:29:
25:14:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:34:09 2026 by rpki-client