Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: HqoWgSSIyBxgm7EZ94uRR17dE4tWUT5K6/nv+QPdPnI=
Subject key identifier: BD:2F:24:F4:74:D8:83:5D:6C:CF:4D:EA:0B:ED:39:70:83:E0:F3:EC
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 01A0D9BB046C49996015E9338C30D6140805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 18:01:47 +0000
Manifest this update: Fri 25 Sep 2026 18:01:47 +0000
Manifest next update: Sat 26 Sep 2026 18:01:47 +0000
Files and hashes: 1: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (hash: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0=)
2: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: zQJraJkAZLw/0c5N+rWiHA2jOmPiiDXK3XgClTnDusY=)
3: ytydS8iceftOnYaB5-5LVqpPFZo.asa (hash: DW5PX1MGoo1+t2QgyExciwvbXJdSvCnWIToame1qzqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:04:6c:49:99:60:15:e9:33:8c:30:d6:14:08:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Sep 25 18:01:47 2026 GMT
Not After : Sep 26 18:01:47 2026 GMT
Subject: CN=bd2f24f474d8835d6ccf4dea0bed397083e0f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:ed:ab:61:88:c7:50:b2:98:89:ca:0c:78:
a7:33:3b:d4:1e:39:ad:ee:ab:a3:82:d5:ae:45:6c:
4a:22:98:2b:4a:dd:58:02:ad:2d:02:82:23:0d:eb:
03:ff:81:e2:79:8d:8b:c6:8f:30:32:73:91:e1:17:
6b:28:6d:d4:f8:aa:ac:e2:06:0b:2e:d8:34:44:8c:
bf:3e:a6:d4:78:74:53:16:5e:23:4c:6c:b4:5b:38:
5f:c0:db:ea:ea:5e:3a:8b:57:19:85:a6:0a:bf:81:
14:f4:44:60:0e:7e:66:09:3c:11:73:84:b4:bf:41:
d5:7e:6f:cb:3d:6a:01:17:48:55:0c:bc:a4:b3:99:
90:50:ee:b6:c6:0a:c3:7c:92:50:84:b0:85:fe:b8:
eb:8a:4d:30:d8:7c:62:c6:56:b0:69:a8:dd:e9:13:
d2:92:b9:99:1a:41:e8:30:d8:47:81:2a:85:ad:8b:
e9:40:2a:d7:63:9a:1e:f6:47:74:29:8e:5b:b0:55:
6f:de:7d:c0:25:c1:98:e3:79:52:10:80:c7:7d:56:
80:11:83:52:e0:03:3c:22:93:ee:7e:af:85:a3:67:
50:8d:36:c7:be:b7:fb:1f:e7:62:bc:70:0a:8e:62:
90:c1:e5:33:64:01:2c:db:00:8e:a2:2e:01:6d:8c:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:24:F4:74:D8:83:5D:6C:CF:4D:EA:0B:ED:39:70:83:E0:F3:EC
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:03:74:e2:8e:fe:f0:0b:24:02:b1:f1:de:24:eb:d0:94:fe:
66:9d:8b:fa:70:75:fc:1e:e5:74:07:4c:e0:55:d1:ab:8d:2f:
1c:b5:1b:11:2f:46:4c:55:f5:a3:ca:53:93:e4:d0:81:d7:59:
0f:13:92:33:ee:25:24:c2:36:44:25:1b:0b:08:d5:5d:31:10:
f8:45:35:bf:ae:62:b3:6c:29:b7:3a:61:76:30:2f:cf:dd:23:
bc:f3:c2:3f:ce:f0:5f:3c:0a:7f:45:cd:c3:97:df:5b:c9:05:
0b:40:08:02:d0:a9:aa:34:f3:7e:fb:a8:f5:c4:22:40:ce:53:
9e:52:8d:74:3e:58:09:8d:07:51:58:83:22:76:d6:26:37:c7:
63:a9:f1:8b:fb:5e:6a:90:49:13:76:4a:4b:a9:b4:c3:35:3f:
13:f5:a9:17:80:22:6e:76:24:8e:8a:36:32:4d:0a:f0:ad:e5:
1a:8b:eb:9a:f2:93:92:4d:88:ac:9d:80:d7:f1:26:7d:28:4f:
3b:92:6d:1d:2a:9b:76:3b:2a:55:af:2e:0c:f7:b0:b5:f9:ea:
67:08:11:5a:e6:93:44:77:56:f8:57:92:ce:b4:9e:de:5b:77:
78:80:df:99:2a:02:c9:05:bd:0e:26:a5:22:39:66:01:bf:c1:
a8:e9:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:51:20 2026 by rpki-client