Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: /vOyPaIIh+Z4bPRwnCfPBurh0I/ci+uOaWl1P+v10AY=
Subject key identifier: BB:18:12:23:19:04:43:7E:F8:14:02:7E:C1:02:03:DE:96:04:24:D4
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 01A0D3EF86B6DB65A3C4A4ABF3EA01CBA2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 15:01:25 +0000
Manifest this update: Thu 24 Sep 2026 15:01:25 +0000
Manifest next update: Fri 25 Sep 2026 15:01:25 +0000
Files and hashes: 1: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (hash: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0=)
2: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: sowNA7aEBwp7LkMq/Qz2VwaHSSsn1GODZGdhR43cosw=)
3: ytydS8iceftOnYaB5-5LVqpPFZo.asa (hash: DW5PX1MGoo1+t2QgyExciwvbXJdSvCnWIToame1qzqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:86:b6:db:65:a3:c4:a4:ab:f3:ea:01:cb:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Sep 24 15:01:25 2026 GMT
Not After : Sep 25 15:01:25 2026 GMT
Subject: CN=bb1812231904437ef814027ec10203de960424d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:ff:8a:dc:34:28:a4:1b:0f:c2:a8:9c:db:
7d:89:d3:6f:32:0b:cc:0d:f2:02:15:88:de:c6:7d:
da:8e:27:d9:2c:ca:76:9b:7f:78:09:31:7e:b7:b3:
7b:6a:1c:fc:fe:eb:2f:7a:cb:0d:9a:a5:fa:46:32:
f1:d5:ba:e1:dc:fb:87:24:93:1b:8c:b6:f8:b6:bd:
1e:e7:54:28:f5:55:3c:4b:12:41:0c:b8:13:bc:69:
97:7d:4e:5c:15:da:56:7f:72:36:25:2d:cf:3f:32:
99:b9:5a:dc:66:2d:f0:ca:62:06:0f:e5:42:f4:fd:
5a:46:bf:ff:79:07:12:ef:c7:0c:1a:0f:20:b0:aa:
9d:e4:31:1a:da:0e:fe:dc:f0:09:88:1d:3d:1e:55:
05:a4:52:15:8c:db:ad:31:ef:37:30:3c:fc:dd:0b:
60:f1:b5:05:bd:4e:9d:92:67:a2:66:45:13:03:96:
1c:86:b0:4e:99:ac:28:f9:f5:f2:57:ce:37:97:18:
ec:ab:49:62:3f:a0:88:af:f1:68:e0:2f:80:f0:c9:
ab:5c:66:2c:08:28:8c:0c:9a:3d:d3:82:3f:1d:02:
ee:ba:2e:53:ca:6d:3b:34:ea:8d:a3:cd:aa:5b:9b:
2e:d0:60:fa:61:2f:98:79:dc:91:a6:28:fa:e7:78:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:18:12:23:19:04:43:7E:F8:14:02:7E:C1:02:03:DE:96:04:24:D4
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:b0:d8:4d:95:88:a3:91:3c:a7:50:89:50:e6:1a:7a:1f:
c4:f5:77:68:da:97:53:67:23:ca:c3:32:2e:26:96:40:6d:e2:
bf:ef:d3:9a:f9:e7:41:4b:20:61:f2:e2:38:a4:db:77:91:40:
78:90:87:d7:48:ee:bc:b8:ed:1b:30:0e:d1:7a:57:65:b1:16:
47:de:08:88:b2:f6:53:7d:48:12:d2:24:be:47:fe:25:43:4a:
15:66:77:ea:13:1c:a3:0b:71:93:29:94:f2:8a:bd:2c:11:fe:
e5:02:e0:de:9a:7e:75:5e:3b:66:50:31:20:ac:11:6f:6a:d6:
61:a7:c2:9b:69:2e:1f:ee:01:70:1c:ac:32:fc:56:2b:dc:3b:
41:3e:43:b8:fe:ff:e5:60:24:9c:28:ca:8e:54:a1:a8:e1:9e:
3c:a7:cb:77:43:a3:cb:97:b4:c1:3c:e6:78:db:12:0f:f4:f3:
98:0d:a3:66:99:da:0b:eb:9b:06:7f:ae:b4:ad:99:47:86:0d:
3c:54:ae:a2:5c:fd:22:d8:89:53:ef:66:01:55:3f:b4:ca:70:
7b:6d:11:cf:95:cb:7d:d5:f8:2a:6e:d5:04:44:c8:61:83:be:
f1:6c:27:dc:63:78:04:be:9a:5e:6e:5a:59:95:22:a8:52:53:
8b:2d:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:21 2026 by rpki-client