Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: 8+SYH+ZcDjXCMvOaMcr4Q1DCQhorkiRxNfU+ZQaTUoI=
Subject key identifier: 06:9C:BE:59:D6:C9:64:E9:8D:BE:77:62:5D:9E:6A:16:06:BD:C4:50
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 01A1878821BE93FA35FF21E179A3C857D378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 1ACB
Signing time: Thu 29 Oct 2026 12:00:07 +0000
Manifest this update: Thu 29 Oct 2026 12:00:07 +0000
Manifest next update: Fri 30 Oct 2026 12:00:07 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: HVO6hEbwlRXNS0EM+RsMDoYGjU5cX1JCmpEgafd2cEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:21:be:93:fa:35:ff:21:e1:79:a3:c8:57:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Oct 29 12:00:07 2026 GMT
Not After : Oct 30 12:00:07 2026 GMT
Subject: CN=069cbe59d6c964e98dbe77625d9e6a1606bdc450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:86:fe:91:83:ef:96:bc:6a:d2:b4:ff:1a:
6c:e7:e7:bf:49:50:d9:35:f3:cf:3d:af:ab:ed:ee:
0e:0c:dd:6e:4c:ef:b9:9b:14:23:f3:ac:65:a7:c4:
15:35:f1:e3:cc:37:e1:d2:fc:1a:d5:d9:73:0b:3e:
a0:5a:56:b2:f5:74:2c:58:a2:c5:4e:bf:49:66:fc:
58:9b:c6:39:d9:17:f8:ae:94:07:80:bf:9d:d3:57:
71:77:c6:48:c9:e1:e4:0c:14:fd:08:64:45:db:6e:
59:38:6d:95:d1:f9:9a:c7:e4:af:fd:03:b7:43:38:
52:77:af:1e:1b:0b:d2:a2:3f:4e:56:06:a7:b1:d6:
6c:33:96:54:89:3f:f4:4f:f8:61:4f:38:0e:e6:86:
de:02:f9:27:2e:73:63:b7:c4:81:d0:02:fb:68:62:
c5:2a:52:a8:dc:08:9d:a2:d6:f7:cb:fa:bf:99:06:
18:3f:77:5c:3c:50:b0:71:7b:03:70:c2:d8:bd:ca:
b1:df:20:01:82:2d:20:96:f5:9e:e4:1b:7e:c2:d5:
e8:66:c9:ef:54:c1:e5:0e:3e:91:c7:3e:8e:64:9f:
d5:6a:a3:d4:b8:74:39:79:95:94:dc:ca:4c:5a:48:
64:e3:85:da:be:7e:86:23:9d:b4:b6:76:5f:b8:d5:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:BE:59:D6:C9:64:E9:8D:BE:77:62:5D:9E:6A:16:06:BD:C4:50
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a3:38:17:f2:9f:02:43:70:cb:dc:ec:8c:15:a7:8f:f6:2e:
dd:d1:8a:42:97:c9:73:ba:17:52:29:c0:f9:ed:6a:7c:a0:f7:
f7:fb:0e:ef:a9:b9:2f:76:4e:b1:61:42:13:4d:7f:80:ad:18:
ff:f1:cb:ef:5e:e2:c1:9f:6d:02:69:1a:7a:d0:9f:be:c8:04:
1e:29:4a:98:4f:e1:44:46:29:32:9e:78:d3:e0:25:77:2c:a5:
96:48:2d:62:8a:6c:c5:20:2b:23:72:f3:79:7a:59:4b:87:5d:
62:1c:ad:49:a1:b5:cb:52:83:fd:e3:c1:18:9c:aa:83:0a:f6:
db:bb:0c:c1:6a:2a:f9:e0:ad:16:5f:f9:b3:e9:65:c5:34:6f:
57:6b:4e:4c:0d:f5:eb:53:22:5d:38:67:73:74:f1:24:97:aa:
bb:f4:37:12:78:2b:21:0c:71:33:a3:5f:e8:6c:8a:4c:61:f6:
94:70:33:00:3b:f9:a8:84:03:3e:ef:da:98:64:7d:a1:12:b4:
8f:6d:b6:af:f1:bc:79:37:58:7f:6f:2a:49:18:fb:4b:df:23:
5b:ff:2b:3e:3c:70:9e:51:37:95:a2:ab:25:7a:6e:86:10:71:
58:71:76:7d:67:23:e3:5b:b1:d4:9a:ca:ea:66:e6:92:a6:da:
c5:a6:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:32:33 2026 by rpki-client