Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: mJibFr3Tsih4cKofeBgOR3d9vbMjHXpTOZVHxlUqKaU=
Subject key identifier: 02:94:2E:F4:31:0A:AD:02:FF:85:73:C9:2F:8A:62:3C:9A:6E:B3:80
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 01A17C5FD8960451C903DCAA572C146BDB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 09F9
Signing time: Tue 27 Oct 2026 08:00:18 +0000
Manifest this update: Tue 27 Oct 2026 08:00:18 +0000
Manifest next update: Wed 28 Oct 2026 08:00:18 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: X9Tt/tC14Xc7c/ikgVWrWl9wnHJTxux0QHYLjtQOifg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:d8:96:04:51:c9:03:dc:aa:57:2c:14:6b:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Oct 27 08:00:18 2026 GMT
Not After : Oct 28 08:00:18 2026 GMT
Subject: CN=02942ef4310aad02ff8573c92f8a623c9a6eb380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:e4:5f:c1:67:ed:2f:d5:02:9d:66:79:97:
53:91:5d:9d:56:26:36:3a:43:8a:a8:40:88:53:72:
55:4c:66:19:a1:50:5c:22:cd:08:f1:f9:b1:57:9b:
18:ab:21:e6:e7:67:52:d3:64:7b:7b:26:ad:15:99:
5f:9c:8c:12:8a:bc:2e:39:26:dd:f4:0c:31:49:cc:
b6:0e:28:e5:ac:1c:f0:a0:00:c1:87:12:7b:89:96:
9a:5b:b8:2e:dc:4e:bd:99:88:ac:00:14:3a:c0:09:
33:5f:10:48:f0:e0:9c:4a:4e:ef:1f:8d:41:90:60:
50:7c:fa:de:e6:58:da:e0:6d:d5:97:36:15:e3:84:
1f:13:0b:22:72:11:ef:62:08:75:4d:9f:d1:64:0d:
6c:45:1a:31:fd:f8:7c:3f:bf:1c:31:e3:c8:f2:18:
09:18:40:17:da:e1:30:1d:be:67:a1:8e:34:71:cf:
74:99:41:5f:ad:29:f6:d3:73:6f:77:87:02:11:a5:
e3:8a:bd:dd:e6:3d:5e:4d:1c:35:d4:3f:fc:cc:fe:
45:c3:81:21:cb:48:5f:1c:3c:bd:9e:61:10:ab:b4:
52:93:d0:af:da:7f:b5:b1:89:18:3e:9c:92:a4:50:
ba:0f:bb:23:8c:19:76:9b:3a:e4:12:cb:9e:90:5b:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:2E:F4:31:0A:AD:02:FF:85:73:C9:2F:8A:62:3C:9A:6E:B3:80
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:de:09:e9:52:15:6c:0b:7d:f8:48:fd:98:de:18:b8:71:
0f:18:2d:60:d3:1a:c6:92:50:92:38:b6:35:60:20:3a:a3:d0:
2d:68:c4:45:44:58:86:8a:cc:4e:ba:56:8f:66:a8:8d:02:fb:
b0:c3:49:c8:f2:72:c1:69:f6:0b:87:b6:e1:8e:c4:a3:5e:5d:
e3:8d:74:02:93:ec:a5:2f:06:ea:9e:0e:b1:95:f8:5c:48:05:
d3:0e:31:eb:bf:47:f0:ba:f4:ee:7e:79:a1:f9:45:36:48:48:
3f:ca:24:cb:e3:39:9f:68:7e:05:bf:aa:f7:9e:0c:00:d4:a2:
21:d4:6b:75:28:c8:44:d2:71:48:08:60:b0:1a:06:46:8d:91:
9b:b5:6f:a0:8c:c9:57:81:d9:fe:2c:34:f0:7a:c8:90:91:1b:
a6:20:c4:e0:94:17:8a:db:53:22:fc:d5:f4:1b:59:c4:c3:06:
34:7d:d9:2b:30:53:0e:c1:28:ff:a9:c4:db:ff:f0:e2:ca:53:
b9:02:26:30:02:2a:ba:46:97:a8:7a:01:f5:5a:25:f1:25:d3:
90:18:33:cb:d0:7d:f7:d3:06:da:63:f7:aa:dc:e3:7f:4a:5b:
31:9b:58:3e:fa:5c:e0:cf:e4:24:26:c8:ec:5f:8d:41:57:46:
a9:be:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:44:41 2026 by rpki-client