Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: E4BhBJWFEUBYzLGdwAx4gka9aE2RvMbm5EIfvwXxpC8=
Subject key identifier: 74:E1:FF:42:B6:13:FF:B0:B6:5A:6A:F3:11:E1:52:97:5E:DE:DE:6E
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 01A08D56A82C0C2ED4D34C543E175BE04DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 1470
Signing time: Thu 10 Sep 2026 22:01:01 +0000
Manifest this update: Thu 10 Sep 2026 22:01:01 +0000
Manifest next update: Fri 11 Sep 2026 22:01:01 +0000
Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: g19dx6V2SBHzU4rj9NmHHp/EDAl1fU1f+SOJr4A6hY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:a8:2c:0c:2e:d4:d3:4c:54:3e:17:5b:e0:4d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Sep 10 22:01:01 2026 GMT
Not After : Sep 11 22:01:01 2026 GMT
Subject: CN=74e1ff42b613ffb0b65a6af311e152975edede6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:11:4a:75:94:46:d8:e4:d5:49:1f:1f:c0:
47:f4:16:b5:12:e9:fd:a2:2c:37:11:e1:ae:6d:54:
66:a6:0d:90:dc:f7:fb:6f:f5:62:c1:05:6a:41:70:
64:fc:93:e4:61:51:7d:8a:52:c2:27:d3:9a:06:fa:
ca:ff:69:13:1f:74:36:98:61:13:de:a3:a9:e1:60:
f5:3f:32:90:6e:39:89:87:56:ea:01:42:c4:47:d0:
df:2c:83:4a:c5:69:98:1c:8e:15:ab:85:f0:76:22:
64:93:45:a4:c3:2a:18:2c:9d:cb:c2:2b:75:f8:4c:
90:e3:eb:e5:52:db:07:27:e6:db:06:92:ec:dd:31:
50:10:fe:58:a7:a4:0d:8d:b3:87:b1:57:ad:7a:41:
d0:09:b1:f8:c2:52:34:a6:1b:48:7c:fa:6e:b6:30:
83:a5:06:ba:d9:d7:75:fa:24:0f:ad:d1:d4:53:83:
99:64:c9:61:63:25:1d:12:3d:e2:19:41:75:f4:56:
cc:19:05:f8:09:c3:a7:50:ea:92:7e:5c:9c:e8:80:
34:a5:05:98:4b:40:bf:53:d1:ff:3f:2f:65:ee:89:
3b:67:60:25:51:90:65:29:e4:0a:08:20:17:43:f1:
42:d0:82:6a:e4:02:49:1b:1d:4c:32:b7:32:2c:98:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:FF:42:B6:13:FF:B0:B6:5A:6A:F3:11:E1:52:97:5E:DE:DE:6E
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0f:77:96:9c:f5:0f:09:7f:11:61:01:9f:fd:4d:3a:b7:2e:
6d:f9:05:0e:8e:61:8c:25:06:af:7e:27:db:a9:f9:ec:aa:75:
b2:46:c5:5b:7d:98:a5:2b:81:ba:fb:14:b9:18:50:0a:75:39:
69:f7:e9:05:5d:bf:cc:69:fb:c2:c5:61:4d:24:0b:b6:ef:b4:
02:52:98:74:03:ec:3e:18:b9:b6:a3:ec:29:39:35:20:22:06:
be:ca:65:f1:4e:cd:cb:42:ec:7d:94:4f:3e:34:ed:11:0b:7a:
43:92:a6:a9:c7:49:e7:94:56:d1:c0:03:3d:ed:21:8a:dd:0a:
ec:48:7b:54:33:e7:82:32:d3:8d:d8:53:2b:27:73:99:e8:44:
d8:58:61:43:e7:ea:7e:8e:88:89:b7:ee:85:d9:8e:2f:df:b6:
01:36:88:f5:8b:cc:5f:64:cf:b5:75:9b:d0:e1:bc:16:95:89:
bb:00:b4:03:2c:55:7c:f1:a6:4a:c0:b1:b3:96:a2:57:7c:e1:
f3:7d:24:2b:72:b3:9b:20:78:8b:3c:87:6c:92:60:36:25:e9:
15:79:5e:90:9e:3b:dc:ad:11:45:fa:0a:18:7c:d4:10:58:ad:
9e:ed:62:91:6c:50:a5:c3:5d:c2:a2:be:49:d9:3a:f4:31:73:
19:dc:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:10:39 2026 by rpki-client