Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: psGCK5TRINqxAd3lzOuGYGwiia/7oNopLWNOk1iXWkk=
Subject key identifier: 4E:C7:BC:30:A6:09:B1:6E:AC:B9:2C:E4:F7:C8:8A:AF:E5:AA:D0:74
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 01A0890C0AE8F8FF4FC6D500002D4A8EBDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 097B
Signing time: Thu 10 Sep 2026 02:01:02 +0000
Manifest this update: Thu 10 Sep 2026 02:01:02 +0000
Manifest next update: Fri 11 Sep 2026 02:01:02 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: bnlMGY2fKtnDQnx7dQU+4ZG/5S/Ls/wOWvNGurgiX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:0a:e8:f8:ff:4f:c6:d5:00:00:2d:4a:8e:bd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Sep 10 02:01:02 2026 GMT
Not After : Sep 11 02:01:02 2026 GMT
Subject: CN=4ec7bc30a609b16eacb92ce4f7c88aafe5aad074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:f9:33:eb:de:05:73:c4:56:5a:0d:cf:c9:
1c:af:a5:26:6c:36:97:5f:5d:f0:0a:1b:59:ff:6c:
52:79:6d:11:9f:11:a5:95:cf:62:f4:6c:98:ef:c6:
94:2c:86:96:5d:93:23:3e:f5:0a:ba:d6:14:64:f0:
40:33:6c:c5:97:b4:1a:d4:97:50:d8:6d:f0:a4:3c:
80:ae:dd:78:4f:93:0c:91:75:d0:5b:02:10:3c:8f:
1d:ea:30:d2:30:a2:e2:a2:e3:71:33:e4:6f:54:e6:
7d:cb:e3:cb:30:58:b3:b6:8e:26:d8:bc:5e:0a:c6:
45:11:f8:60:64:7d:e7:9a:22:42:f1:37:c9:6f:6e:
d5:46:2a:67:a6:d4:89:b5:b5:1e:0f:04:b6:36:50:
01:32:12:b7:e0:5d:ff:09:a4:76:94:13:ff:27:f7:
21:37:e2:4c:14:2c:be:d9:84:f8:9c:77:c8:93:41:
bd:69:64:74:b2:ea:fd:2f:13:e5:d9:c5:0c:88:35:
c0:af:10:6c:03:34:ec:5b:5d:01:cc:49:52:70:ec:
6f:e5:3b:de:d1:af:7f:59:66:5a:3f:e1:93:6d:79:
55:08:38:92:74:0c:b7:f1:d6:91:d5:fc:18:80:8b:
3f:1e:24:61:34:ea:da:ad:4e:49:a2:4d:50:99:b6:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:BC:30:A6:09:B1:6E:AC:B9:2C:E4:F7:C8:8A:AF:E5:AA:D0:74
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:d4:25:13:8f:4b:3a:2e:af:46:02:43:e6:11:ae:fa:87:
e5:a1:e8:f9:36:2f:06:45:ee:c0:03:5b:9c:55:ae:dc:1b:bd:
af:be:44:e7:f7:cb:90:5d:0f:a4:ea:ca:d5:c9:5f:8a:8f:cc:
0b:66:fc:cc:20:cb:5e:b6:15:35:82:26:f7:41:30:48:5e:af:
bd:cf:25:91:0a:28:db:6a:b2:fb:3a:78:60:72:4d:06:26:93:
21:93:82:12:05:25:00:b3:57:7b:34:1a:f5:24:c0:0c:1b:a9:
a0:81:63:cd:b2:43:33:76:64:7e:c9:69:f5:36:84:ca:0f:83:
39:4e:2c:41:3c:a3:22:ad:c7:7f:50:a4:4c:8c:28:1d:a2:ac:
e1:e9:95:2a:7c:a9:74:af:29:47:b7:8e:dc:c2:db:b2:d8:83:
87:57:26:a1:da:de:20:7c:3d:0e:be:b8:ef:60:38:e0:72:8f:
eb:0d:c7:9d:ea:78:e1:ba:ab:fc:30:20:b7:c7:59:11:3e:b1:
18:74:e6:4b:c9:2a:c4:40:70:3d:1a:d3:ae:1e:94:e3:e2:92:
df:73:83:ad:ca:2f:7a:bd:50:8f:59:6b:8c:ad:dc:38:c0:8c:
6b:33:50:f2:fb:40:e8:1a:d3:4d:62:be:5c:b1:46:90:b8:ce:
64:bc:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:37 2026 by rpki-client