Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: KaxJoq0bWKzsx/aDZsqeTnOVgtOPScoEFKBE6uYjKGk=
Subject key identifier: 12:86:0C:4C:F3:38:A8:07:D7:52:8F:34:14:57:65:62:CF:89:A0:23
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 01A15C9F05C088B6425004064B786C020FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1AB6
Signing time: Wed 21 Oct 2026 04:01:27 +0000
Manifest this update: Wed 21 Oct 2026 04:01:27 +0000
Manifest next update: Thu 22 Oct 2026 04:01:27 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: wp9p9DxtdRBIEuAcDXPT/30jaVwLhZe2m7LrJfd6XTk=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:9f:05:c0:88:b6:42:50:04:06:4b:78:6c:02:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Oct 21 04:01:27 2026 GMT
Not After : Oct 22 04:01:27 2026 GMT
Subject: CN=12860c4cf338a807d7528f3414576562cf89a023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:7b:67:ea:2c:eb:60:a6:68:a7:92:f9:7d:
7c:bb:31:69:d9:44:3b:fe:d0:c5:c9:45:ba:32:32:
ba:48:e0:b0:b6:a8:8f:2a:c3:d1:46:27:dc:32:85:
07:78:05:e2:50:23:c4:ae:f4:42:b0:3e:ee:fd:7c:
e8:cc:1f:6f:77:7c:39:f9:fb:e3:ae:f5:1b:6f:21:
d0:26:70:5f:2d:f7:8c:67:8f:b0:1d:76:84:fe:db:
42:49:fd:77:cb:66:2c:a1:d4:ab:b9:2a:57:c0:3d:
e9:34:38:01:48:a0:06:61:69:c9:cf:41:61:9e:9c:
db:ce:0a:71:06:6e:63:1d:11:68:40:ff:30:44:5f:
f4:50:02:4b:f3:1d:c4:54:ca:76:82:67:00:4d:4f:
d5:21:fb:45:16:3d:df:1b:72:17:59:ff:47:fa:89:
92:fe:a4:c1:e6:ba:f6:14:70:f0:1f:34:d9:a7:ea:
1e:7f:ee:60:c4:97:e6:f9:fc:92:f9:e1:93:bd:e1:
60:c8:1c:0d:8b:63:52:8f:f8:62:7c:74:66:aa:b8:
6e:10:b4:d2:3f:ac:66:9e:91:51:ee:ff:80:72:77:
9a:2f:f4:c4:ab:3b:fb:f1:e6:5b:a7:8b:e4:98:e6:
d1:4a:8f:91:3e:45:78:0f:92:78:8a:3b:d6:f4:35:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:0C:4C:F3:38:A8:07:D7:52:8F:34:14:57:65:62:CF:89:A0:23
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:a9:61:82:29:c9:1e:93:9f:1c:41:2a:ce:0e:d0:91:a4:
cc:a0:38:ae:d9:37:e1:60:fd:ab:e9:c6:f6:a0:2d:17:15:ba:
01:9f:47:46:e2:cb:48:40:82:fc:c0:30:e0:49:21:77:02:ab:
f1:0d:b8:40:66:56:4c:07:89:5a:a2:86:cf:02:f3:6e:ff:0b:
6b:e4:79:2a:8a:8b:ed:32:57:de:c0:2c:76:59:03:d2:26:39:
7a:0f:b8:d7:0b:50:35:a4:12:a9:d5:c0:82:58:c4:fc:61:eb:
26:5f:c3:c3:80:3d:1a:be:16:bd:1a:d9:7c:4f:3c:88:35:17:
e6:84:1b:2c:9e:43:fc:5a:8f:8e:04:c6:5c:fb:34:27:53:8f:
3d:73:cc:27:82:b2:73:12:78:f5:89:45:e0:6a:76:cb:bc:49:
87:2c:6b:a0:c9:cd:64:2a:c4:94:d2:56:39:4d:0f:6e:b5:52:
b3:aa:87:59:f0:4d:91:c6:79:85:3b:c8:60:e7:e4:c3:08:3b:
dd:cb:b9:26:da:cd:47:a5:52:a4:cf:67:ab:64:7f:d1:12:1b:
d8:4d:ca:1a:41:f0:40:47:87:5f:14:8e:59:ac:c5:ce:8d:a4:
e4:c5:3d:12:1d:6f:a4:f1:c2:3e:c9:4a:ce:ce:e7:5d:2d:02:
e8:cf:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:17:55 2026 by rpki-client