Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: 8rd5yPYNoLwjZUrf61uNexfhieVqpiBkUB0qFLNI7ZI=
Subject key identifier: 88:78:38:E7:F6:2B:CD:97:4A:9A:5E:01:43:19:ED:C9:06:9B:6A:7C
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 01A186E37D6B5DB976528F772E600B024F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1AC9
Signing time: Thu 29 Oct 2026 09:00:18 +0000
Manifest this update: Thu 29 Oct 2026 09:00:18 +0000
Manifest next update: Fri 30 Oct 2026 09:00:18 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: 41GRIy5Kl030YePkpbfvWS1xPGUhpMWGAL6p8jTA08Y=)
2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:7d:6b:5d:b9:76:52:8f:77:2e:60:0b:02:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Oct 29 09:00:18 2026 GMT
Not After : Oct 30 09:00:18 2026 GMT
Subject: CN=887838e7f62bcd974a9a5e014319edc9069b6a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:78:87:87:8d:d1:84:e0:00:61:9e:3a:b8:37:
2e:47:d7:44:12:db:35:0f:e1:6e:1a:8a:3d:b4:46:
0b:81:59:2b:1c:76:54:85:07:cb:2e:56:a7:d2:a6:
65:52:a0:24:51:9e:11:54:59:0a:71:62:85:7c:79:
46:52:0e:eb:10:11:41:d5:40:2b:37:20:49:01:3a:
a4:45:1e:4d:8e:69:9a:e3:ba:3a:90:9f:bb:ed:9c:
38:8e:50:ea:40:4b:a1:60:ce:a5:f3:5f:88:5e:79:
a5:31:48:14:aa:f0:04:b7:e3:26:35:61:f2:22:54:
be:f8:64:5a:f7:56:c3:e0:13:38:cc:1e:7d:7b:16:
1b:84:e0:13:90:e1:34:fe:a1:13:ec:32:46:19:4a:
b3:b1:f7:89:be:b3:d2:fb:6a:99:58:3d:77:3f:61:
a7:3c:fa:59:6b:7c:f0:ab:85:5b:fb:f7:04:5b:1d:
ea:8e:5a:4f:7e:d8:13:71:94:f8:24:91:d2:96:e0:
37:af:5c:c2:4a:fa:18:3a:76:1e:de:26:13:6f:a6:
ad:58:4a:a7:1e:bf:90:11:51:95:7f:64:46:a1:27:
e6:cb:3e:7e:04:3e:f5:d7:40:0c:4f:d3:6d:a1:ab:
9c:9f:ad:49:5f:26:7f:2a:4e:27:28:cd:f9:6f:d4:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:38:E7:F6:2B:CD:97:4A:9A:5E:01:43:19:ED:C9:06:9B:6A:7C
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bf:0d:b1:5f:31:b1:b5:3d:5c:21:10:7e:ed:c5:5e:9f:d7:
67:0c:64:8c:70:b9:8a:df:88:6a:dd:01:d1:08:26:08:5b:38:
39:c6:d0:c9:08:2d:a2:42:ac:c7:91:8b:f4:c8:03:5f:ef:8f:
f7:d4:9a:a6:26:48:48:c1:34:65:2a:94:38:42:8d:5e:d6:ca:
98:97:88:41:1b:2a:80:76:b1:e0:9d:3a:14:83:74:3f:57:6c:
e2:ce:35:4b:50:a5:01:ac:0d:b6:59:49:a6:fe:4d:30:bb:17:
ec:80:ce:5e:7d:3a:8a:47:17:83:75:8b:4c:2b:ea:64:00:9e:
3d:14:47:b6:36:b4:17:8a:88:61:4b:53:b6:e9:20:55:0a:9e:
90:d1:72:28:69:97:d4:aa:cb:05:bc:b7:7d:dd:1e:c4:ef:e9:
a4:62:e1:8e:fc:ae:32:77:36:91:2b:69:40:e0:d7:a5:6f:c5:
89:69:81:fe:52:15:a4:1c:dc:48:aa:81:63:f3:a2:c4:06:9a:
2b:27:f7:b7:05:67:02:36:b2:d0:51:81:fd:83:09:3f:a0:ea:
a9:71:bb:a7:3a:be:9f:95:28:dd:e1:5f:bb:74:b4:dd:51:f5:
f0:fd:70:55:ff:8c:3a:55:08:c7:bb:93:9d:45:ac:a8:40:60:
5b:74:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:29 2026 by rpki-client