Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: dsN7OulMDJ/yaIKbMnMJPV3SkJE5p0wSDEcbxFN2L1A=
Subject key identifier: 98:EF:DF:F4:E7:90:E8:C5:CF:75:F2:DE:2F:6B:1D:D6:E0:FF:93:28
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 01A08A8D1DDA13CF9FA36D6B1C3AC5CE978A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 09:01:38 +0000
Manifest this update: Thu 10 Sep 2026 09:01:38 +0000
Manifest next update: Fri 11 Sep 2026 09:01:38 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: 4haflh/N8zUrIVQ2qQM/5a50kJ9FTAphHQmroRrEStc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:1d:da:13:cf:9f:a3:6d:6b:1c:3a:c5:ce:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Sep 10 09:01:38 2026 GMT
Not After : Sep 11 09:01:38 2026 GMT
Subject: CN=98efdff4e790e8c5cf75f2de2f6b1dd6e0ff9328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:8b:75:02:3c:00:e3:c3:0a:2c:e5:d2:e7:
22:ef:89:72:ab:ba:98:85:91:e6:ba:6d:1e:ea:17:
97:1c:23:0e:66:db:0a:61:ef:b9:69:ac:66:ea:6e:
0c:88:52:ee:c8:d4:66:04:4b:cc:c1:d9:c0:36:78:
5c:90:60:8c:a2:8b:36:a5:c2:fc:19:af:69:a1:21:
4c:7b:e0:77:27:a3:8d:78:79:76:02:4b:a6:dc:0a:
bc:31:e2:1e:e1:e8:95:51:d6:be:df:0c:60:7e:39:
5e:51:dd:ee:de:d8:86:59:b2:e3:e3:d2:01:7c:e5:
d3:b1:bd:31:6c:34:00:eb:6b:2a:c9:44:1a:4f:c2:
02:d2:b1:34:ed:31:ab:c3:41:5c:f5:33:21:b5:c5:
81:f6:d3:f8:33:7f:c1:15:b7:2c:d6:1f:17:3b:0f:
a1:a2:7e:96:fb:d9:f4:ea:89:20:57:3b:9d:27:8e:
95:ab:8e:f1:fb:59:82:28:38:5c:1d:2f:b1:01:62:
37:09:07:d5:9e:ea:db:c5:b0:f0:db:80:c9:16:e2:
5b:1c:03:3b:f4:b7:02:b8:e1:1c:be:b4:80:f2:73:
74:53:c0:7e:4d:50:1b:4b:26:f8:43:8f:d3:c9:dd:
b2:c3:02:b4:76:2d:da:bd:2a:5c:44:49:f4:c7:92:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:DF:F4:E7:90:E8:C5:CF:75:F2:DE:2F:6B:1D:D6:E0:FF:93:28
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:92:2e:46:b7:ab:08:cf:d0:b2:01:bf:1d:1d:d6:a5:3b:5d:
d3:a5:ca:1a:4c:cb:6a:2c:ca:48:00:08:f3:49:cc:7a:08:bd:
e6:c2:5b:36:98:26:e7:69:e2:6e:54:ed:da:ef:f1:9e:37:c9:
aa:4c:24:aa:e7:e7:da:ec:b5:b4:2d:6c:8f:48:63:6d:11:fd:
d6:1b:eb:6d:be:65:2f:bf:b9:cc:a1:af:a1:ed:fe:be:21:06:
7a:9b:1e:f2:7a:98:e1:26:6e:a7:a9:b0:ba:5c:53:81:c3:1a:
07:74:e1:d7:42:f9:d5:46:92:0e:6a:03:23:3e:87:4a:21:05:
49:5e:8f:b5:b4:5a:9f:62:8e:84:de:de:c4:21:40:e7:89:2a:
36:3e:66:45:47:81:09:68:74:a5:07:a1:c6:eb:ce:d4:ee:e3:
40:c7:94:86:dd:94:06:51:86:d2:65:eb:e6:c3:d9:0b:98:7e:
2d:31:e3:d9:c4:a7:f7:cf:7a:11:9a:97:0d:a9:a7:63:c3:21:
33:1f:67:6f:43:f9:50:e0:9d:13:2d:e5:12:97:31:06:6b:b2:
8a:94:44:d1:8b:d3:71:21:e2:d1:30:3e:5a:43:f0:d2:2f:c4:
98:f8:40:a7:12:65:5d:fc:47:c5:4d:67:d9:d5:7c:54:fb:f5:
8c:ca:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:37 2026 by rpki-client