Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: nQ1aAYANjOAn8627bZtu52elh9Hs+8UAFGEpwvQbCa0=
Subject key identifier: 98:FD:9D:00:FB:D2:B6:CC:42:3C:A7:AE:6F:EF:A7:59:75:FA:E6:E9
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01A1841A0BDACAA5E4A1C0B5797E5F0DC6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 20:01:01 +0000
Manifest this update: Wed 28 Oct 2026 20:01:01 +0000
Manifest next update: Thu 29 Oct 2026 20:01:01 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: Acd3SrBKpNvLPNP08GD/d6kq3rBqQRPjvHs53/VXCPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:0b:da:ca:a5:e4:a1:c0:b5:79:7e:5f:0d:c6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Oct 28 20:01:01 2026 GMT
Not After : Oct 29 20:01:01 2026 GMT
Subject: CN=98fd9d00fbd2b6cc423ca7ae6fefa75975fae6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:f1:9a:d2:02:75:9c:ae:b1:ba:be:3f:fc:
e3:f8:f5:ba:fb:98:2e:ea:fc:d3:97:79:f5:d3:c0:
83:00:87:14:f1:bb:8b:a3:5e:84:25:1b:79:d6:a0:
c4:7b:61:37:96:62:5a:ab:7a:dc:f9:e8:d1:0e:11:
41:ba:70:bb:bc:07:d0:b2:b3:af:3c:4d:76:c9:ee:
cb:a4:87:56:4e:a5:c7:7c:0c:c5:74:b9:2f:05:65:
11:78:5b:65:1e:29:8d:bb:6e:1a:30:e8:eb:4a:58:
9e:29:ce:6e:05:28:bf:8c:7e:de:b6:57:75:67:cc:
a2:52:ce:10:ce:83:27:7e:96:19:a3:50:84:63:a8:
91:85:5d:df:f8:b0:c6:52:af:b5:5c:57:13:bd:d2:
ea:a4:01:7b:5d:c2:3f:f5:50:4a:b8:c8:6e:38:0d:
cc:2c:f3:ec:b0:8d:47:72:2d:23:70:a4:ed:3c:e7:
5e:44:a6:e2:89:81:4b:cb:b3:ac:32:f7:88:22:b8:
5a:d6:60:31:2a:2c:72:ca:15:7a:42:c8:53:d4:69:
d6:8c:4a:c9:7d:46:30:e1:66:a4:53:81:19:e0:58:
b4:19:86:72:80:34:0a:8c:66:e6:5c:4e:0c:5c:ae:
ee:97:91:e1:3e:7a:cd:08:28:c3:36:e4:2f:b7:8f:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:9D:00:FB:D2:B6:CC:42:3C:A7:AE:6F:EF:A7:59:75:FA:E6:E9
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:02:ba:40:90:50:c0:e4:a5:98:f8:d5:87:82:0a:47:11:
c2:c9:93:76:5a:ca:ec:eb:14:7b:e7:28:15:37:f9:79:24:09:
c9:c8:85:32:b4:8d:d1:4b:4e:c6:0a:1a:ac:de:80:1a:bc:50:
20:a2:92:83:9d:0a:2e:6b:28:e6:f2:50:bf:8f:b4:e0:74:69:
70:56:93:db:28:36:83:b1:52:24:71:d5:4b:19:98:f0:7f:fe:
33:c4:18:91:39:be:59:46:fd:f5:4e:31:44:e0:3f:27:8d:6b:
2b:9d:52:3f:b8:c2:4f:04:23:a0:78:6d:e0:1b:d1:f4:24:68:
e7:19:2d:9b:a6:59:78:c0:6c:8b:ed:4b:c5:f8:80:d9:bf:01:
bc:a4:c5:6b:19:d4:dc:b8:1d:12:5b:3b:87:54:19:3a:a9:6f:
18:d9:3b:81:5d:35:d8:dd:3d:a0:14:15:04:95:bc:86:65:c4:
a3:28:ff:16:53:9e:55:bf:a7:2c:0b:36:c7:44:4a:41:4b:34:
d8:e8:71:b6:0f:7a:2e:b6:7c:1c:a2:27:43:4f:44:ba:1d:22:
28:e6:7f:d2:e9:d3:de:a5:4c:0c:b0:98:90:36:5c:9d:b7:c3:
13:05:f8:e7:6e:f5:af:ec:6d:93:4c:a2:4d:d1:ae:3d:61:c0:
a9:79:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:12 2026 by rpki-client