Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: /3Ft3jtPJK6NckYnIATKlIsvdez0Ctv6jB3n+m4yXRM=
Subject key identifier: 23:A1:E9:C3:A7:75:6D:3F:73:BD:D7:F9:B7:80:E1:2D:64:C8:B8:33
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01A1822B712A17D4759D7AE88C75633AA64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 11:00:47 +0000
Manifest this update: Wed 28 Oct 2026 11:00:47 +0000
Manifest next update: Thu 29 Oct 2026 11:00:47 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: p6NgpteQ/LhQ91mZd6gKy8Ay4YcDHt9P4AbY5tBtkko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:71:2a:17:d4:75:9d:7a:e8:8c:75:63:3a:a6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Oct 28 11:00:47 2026 GMT
Not After : Oct 29 11:00:47 2026 GMT
Subject: CN=23a1e9c3a7756d3f73bdd7f9b780e12d64c8b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:ea:21:ab:66:9d:ce:13:ed:f8:92:e5:c9:
e7:5a:5e:42:87:c1:2d:15:b1:99:6a:6a:fb:8c:49:
4d:eb:70:1b:2d:86:1e:45:db:10:4e:61:12:41:e0:
f8:ce:f4:d2:e8:d2:75:e7:73:21:17:d7:9e:fa:af:
75:dd:f6:26:56:3c:a3:a7:49:4b:01:db:ce:29:a5:
c4:d2:d3:52:03:0a:be:1c:83:17:72:6c:b3:20:22:
35:df:ae:7b:5e:c5:fa:5a:8b:38:84:e2:7c:47:73:
e3:32:33:58:de:27:4a:e0:ad:95:89:cd:3c:a6:7a:
ed:cd:0d:da:7b:4b:f3:f6:75:fd:50:42:34:5a:6f:
79:77:11:0d:20:09:d7:1a:66:4b:89:06:30:00:7c:
b2:16:23:88:81:93:66:15:c0:e6:81:88:5a:55:0c:
a6:f7:a1:67:98:17:93:ec:fb:d7:32:04:ab:e5:ec:
f2:37:03:e4:04:51:38:5e:c5:24:94:07:39:a5:50:
71:ac:c6:20:9c:b8:4d:3a:ac:d0:81:57:b7:ad:ff:
33:c6:51:67:3b:ad:24:1f:a2:e8:18:17:e5:e6:ce:
25:0d:24:f1:2a:1a:d2:41:69:e1:ab:66:0d:90:7f:
3e:7f:f7:8b:c6:50:c1:76:c2:9e:7f:e7:b3:91:f9:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:E9:C3:A7:75:6D:3F:73:BD:D7:F9:B7:80:E1:2D:64:C8:B8:33
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ec:97:89:34:d9:69:21:54:fb:99:46:fe:aa:b6:d9:6b:4f:
e3:95:18:48:2e:ba:f0:20:3c:8b:cb:48:38:30:80:fe:35:76:
1b:cc:08:2c:d1:9d:58:81:c6:a4:c8:3a:7e:24:b0:84:e1:09:
ed:35:32:93:1b:83:ff:04:fb:5a:73:cf:3f:5d:53:7e:f0:ce:
2a:38:ce:89:7b:af:17:95:e7:7b:e7:de:b5:0e:01:fb:e9:c8:
c1:4a:bd:9e:f3:12:4e:d5:aa:15:cf:eb:53:f7:e2:fd:a5:27:
39:b1:b6:37:46:07:6a:b7:2e:5d:7c:d6:22:6b:bd:73:a3:d4:
7a:91:77:2e:0e:46:51:29:95:1a:0c:2a:77:4c:60:f5:1f:cb:
16:91:23:ff:51:e2:f3:99:b5:fc:f4:74:c0:85:73:35:c4:6e:
ac:d0:3c:8c:a4:3d:15:83:e9:af:3f:2e:c4:96:bf:8c:0c:fb:
2f:d4:cc:77:ea:ff:9d:9f:44:28:1d:1d:9f:81:c3:c2:6f:a2:
38:f0:3e:54:b3:c7:08:0b:27:11:37:a9:94:1d:37:7e:81:1f:
78:71:a7:a5:64:ad:09:04:70:75:0b:f0:8f:07:cf:e3:2d:12:
5e:86:77:59:02:73:72:e3:92:fb:f7:00:62:71:cb:6f:34:d0:
59:c4:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:16 2026 by rpki-client