Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: gITlrder/nPq0na+QUAg0GJV8PmEYYwY42SI61gXW2Y=
Subject key identifier: BB:A7:D7:91:57:0E:71:B6:02:F3:D9:D0:D3:B1:4A:0E:F8:A9:B2:44
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 01A0CE9164512DB714BB541C5948E58EA1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0605
Signing time: Wed 23 Sep 2026 14:00:29 +0000
Manifest this update: Wed 23 Sep 2026 14:00:29 +0000
Manifest next update: Thu 24 Sep 2026 14:00:29 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: NyR60UfkoVzo7x1zQeJZGpVvMm5fC/q+M6YOWuzLyEI=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:64:51:2d:b7:14:bb:54:1c:59:48:e5:8e:a1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Sep 23 14:00:29 2026 GMT
Not After : Sep 24 14:00:29 2026 GMT
Subject: CN=bba7d791570e71b602f3d9d0d3b14a0ef8a9b244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:2f:b6:6e:94:32:c6:4b:54:3f:80:f0:74:
05:65:55:d9:c6:94:5d:44:1c:28:41:b7:c2:9d:cc:
ce:01:71:54:78:2b:0b:36:84:4b:0b:a3:ed:39:ac:
18:29:a9:6f:7c:83:84:da:54:60:e8:0f:3e:82:76:
28:4e:d1:ad:39:4b:5b:42:b5:74:2f:a5:c3:ac:3c:
75:eb:f9:92:b3:68:2a:9e:0e:fd:f4:8e:ac:c5:53:
00:89:e5:16:6d:e2:c2:9c:82:98:66:95:b0:34:79:
05:d6:d7:9c:a9:c5:4a:9e:b3:8c:81:c0:b2:05:be:
10:50:50:af:25:df:ca:24:dc:21:03:ce:09:ce:f5:
c1:66:9d:1a:33:a9:b4:5e:ed:86:f8:b1:bd:71:e9:
61:aa:ef:a5:f3:ba:e5:ef:4b:2c:ad:02:53:e1:42:
85:62:75:4c:3f:38:45:f1:f4:3d:4f:6e:e3:19:48:
c9:3d:79:f3:15:bf:79:e5:99:78:ea:d2:b7:69:45:
e4:b0:5d:d0:0c:32:50:ba:a9:08:aa:26:95:bd:26:
cd:4c:c6:b8:9a:96:bd:71:2d:35:6a:5b:e6:ba:7b:
de:3a:b6:f7:23:3b:35:d2:aa:60:43:68:4c:15:bd:
02:7e:b7:10:41:d2:19:9e:33:fa:eb:f5:a3:ea:5a:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:D7:91:57:0E:71:B6:02:F3:D9:D0:D3:B1:4A:0E:F8:A9:B2:44
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:f4:e4:41:2e:b0:21:c0:c9:37:dc:6b:05:a7:ee:67:1c:
e5:98:44:fb:6d:64:cf:9c:3a:02:75:48:d4:7c:68:4a:51:49:
af:a1:3f:ac:31:f6:7d:d0:81:6c:b7:9d:89:1c:2a:bf:26:56:
e5:68:71:37:bd:dc:81:bb:60:8e:f9:a1:ec:2f:e8:93:9d:09:
f5:01:35:c2:16:d9:95:ba:4e:c1:28:de:5e:43:b5:68:46:a3:
d1:f9:b3:e1:dc:12:c7:c6:f9:0d:09:31:65:0b:80:4c:5b:b3:
fc:25:58:f0:88:f2:f5:f3:9f:d1:be:32:88:30:c2:9e:21:8a:
04:36:49:f5:cb:25:c6:1a:ab:1e:34:88:f8:92:c5:87:eb:b9:
57:28:b1:41:a4:01:f3:35:02:e3:a0:bd:d8:90:ba:ea:a5:5d:
44:73:20:d5:68:f6:6a:71:72:90:cd:93:a9:f3:16:5f:5b:3e:
a6:06:de:f6:4d:07:b7:d0:31:78:d2:3f:8b:01:88:8e:21:21:
5b:f1:6a:72:1f:a2:70:43:c4:5b:ee:d2:54:da:b4:3a:4e:22:
6c:02:9a:8c:69:2d:7c:5d:8b:3a:77:06:d2:f4:f8:2a:d2:72:
40:5d:03:a1:a9:6b:d6:e3:27:33:61:87:d9:47:66:aa:95:34:
89:ad:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:05:41 2026 by rpki-client