Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: 76P+GIKyOEljpIpXXcTF28lK2W7gmvRa5+0Ns5YbnKc=
Subject key identifier: B0:B4:7D:28:46:1E:0C:BA:46:EB:45:33:77:24:08:8D:75:A1:6C:35
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 01A002F00EB45CC34D16D4910EE0DC013D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 01:01:21 +0000
Manifest this update: Sat 15 Aug 2026 01:01:21 +0000
Manifest next update: Sun 16 Aug 2026 01:01:21 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: 0GaFhOd/KjEjXXrSUS8/+ndVJ0lWR2Sixmd0+CcQfa0=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:0e:b4:5c:c3:4d:16:d4:91:0e:e0:dc:01:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Aug 15 01:01:21 2026 GMT
Not After : Aug 16 01:01:21 2026 GMT
Subject: CN=b0b47d28461e0cba46eb45337724088d75a16c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:97:b2:bf:55:25:94:23:6d:b8:ce:d5:8a:
af:82:5f:c3:86:56:a2:fd:a8:83:13:79:cd:5c:c3:
6f:af:6f:46:e1:7e:50:d2:2e:70:54:ac:32:be:9c:
4d:b4:32:7f:b4:3a:56:c1:ae:51:83:0f:03:1f:26:
92:f0:12:5b:76:12:e0:af:65:7e:9d:da:53:7a:48:
94:05:3d:2a:98:a3:16:d8:dd:0f:39:ae:84:24:ac:
a1:7c:3a:32:cd:45:87:c6:b8:e3:ff:7a:8f:6b:82:
d0:27:95:de:87:c3:24:35:52:00:fc:5e:c4:7b:59:
1b:42:24:00:24:74:65:6e:77:4c:9a:c3:ad:30:fb:
bd:1e:74:05:9b:d1:54:d9:d5:6b:85:f9:80:00:bc:
38:31:3d:d3:e4:4c:5c:7a:45:15:39:ad:c3:4e:91:
cf:99:21:a4:8b:4f:9b:58:0a:29:a3:1b:aa:dc:18:
b2:01:ff:11:22:df:d0:e3:99:52:07:7b:12:25:56:
8b:f5:0d:41:dc:3a:28:a3:ab:26:97:e9:4b:89:e6:
34:e4:eb:14:dc:e3:c4:aa:c2:9b:34:25:32:74:19:
f0:ee:f7:19:52:f7:cb:7a:53:63:d6:00:95:09:be:
b2:e2:8b:68:c3:f5:c2:ca:9f:cb:70:01:ce:66:14:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:7D:28:46:1E:0C:BA:46:EB:45:33:77:24:08:8D:75:A1:6C:35
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fe:80:56:25:89:85:58:94:60:df:7d:a6:19:e9:4a:9c:68:
56:79:5c:0c:fd:32:3b:03:c3:14:fe:37:ca:35:82:a4:70:75:
1d:09:b1:e0:e9:88:51:29:65:09:3b:d3:93:63:11:f4:ab:30:
de:b7:ee:62:06:6e:1d:16:ec:ec:70:34:e2:ea:2e:b0:b3:1e:
56:93:88:fb:54:1e:fb:82:e1:ce:40:9c:b1:df:09:f7:55:74:
d1:3d:5b:9b:01:0e:c4:d2:7b:9d:48:26:55:8d:6e:c8:5e:b4:
21:5d:83:81:45:08:ca:58:24:8e:8a:91:9c:ae:b3:17:8e:c2:
38:2f:9b:9a:da:41:ee:5a:06:21:4d:22:d1:bb:60:e9:dc:f6:
64:a3:f0:13:1b:64:e0:e2:6b:5c:4d:af:c7:78:bd:b9:34:ce:
4b:5a:b8:7b:9a:16:ad:06:c0:e7:0f:97:a8:42:57:4e:44:0a:
01:67:3f:9b:da:ef:76:a5:a6:54:80:bc:bf:b9:ab:17:7d:d3:
03:65:80:1c:a7:50:ca:91:0b:97:0d:91:b7:6a:04:19:be:57:
66:62:62:dd:0e:77:bc:69:39:2a:4f:ef:7b:36:af:39:9c:e8:
ca:60:02:ac:50:d6:0a:b6:40:8a:95:56:45:4f:89:cb:75:25:
d9:ad:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:33:08 2026 by rpki-client