Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: 2BJ2mrZPVF2sFfu4ri3/BdxUqjIo2irWPYLJtQp0xCI=
Subject key identifier: 9D:84:55:5F:69:2E:1A:A0:00:CD:E8:12:69:1F:F8:9F:2D:93:C1:21
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01A0EBF9F4BB558203FAFD7357F0895D4751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1A84
Signing time: Tue 29 Sep 2026 07:03:41 +0000
Manifest this update: Tue 29 Sep 2026 07:03:41 +0000
Manifest next update: Wed 30 Sep 2026 07:03:41 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: vUF7uXnp86mENJ7t9kdW9fereeAMxPL4R0p8RQDX4bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:f4:bb:55:82:03:fa:fd:73:57:f0:89:5d:47:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Sep 29 07:03:41 2026 GMT
Not After : Sep 30 07:03:41 2026 GMT
Subject: CN=9d84555f692e1aa000cde812691ff89f2d93c121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:52:9e:43:8a:c8:a6:d6:68:25:52:e0:36:
13:e6:cf:9d:c2:59:5a:a7:75:f2:c5:bb:78:85:a3:
c1:a4:14:95:10:6d:fa:07:49:ba:82:4f:88:e2:17:
6c:67:29:31:74:97:d2:ce:20:00:44:0e:58:07:82:
7c:94:fc:ee:cf:5a:41:83:8c:ed:c9:8c:22:b9:09:
37:46:2e:88:ec:e8:33:71:b9:65:91:73:58:44:ae:
fa:0f:58:d7:15:df:43:00:17:b5:22:2b:5d:8e:ed:
af:1c:1d:41:4b:b8:56:d9:a5:6b:93:3d:08:f0:d6:
98:e1:67:55:55:1d:66:18:45:38:39:27:da:44:ec:
40:5c:d9:a0:fc:99:3c:b5:9a:b1:d3:51:65:ab:9b:
6b:de:93:6f:09:15:09:3a:bf:d0:bc:51:53:d2:8a:
d9:d0:2a:4d:2c:d3:1b:6c:11:40:70:d0:89:02:82:
7d:04:c7:a6:a4:46:af:9f:2f:1a:bb:68:cd:c8:b3:
7c:8b:6b:f7:f8:05:7a:13:fb:62:c5:da:66:fe:d1:
dd:da:7d:c9:06:76:87:12:49:b1:fc:02:a1:6e:25:
c9:7e:24:ba:85:8b:1d:1c:3a:c7:34:12:66:bc:10:
7a:28:c4:b9:97:94:b9:7e:cf:1f:4c:8d:36:a1:0e:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:55:5F:69:2E:1A:A0:00:CD:E8:12:69:1F:F8:9F:2D:93:C1:21
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3f:64:89:80:12:92:59:2b:0c:0c:97:f3:c2:62:6b:b8:99:
ca:7a:ea:97:79:a1:1b:14:88:7f:c4:4a:a7:53:02:cf:cd:bb:
97:6b:dc:ca:f0:2a:67:05:33:d4:ef:13:37:93:1d:a2:65:51:
21:2a:5d:99:81:91:99:47:a6:1c:de:4a:f0:bc:be:f0:a8:36:
4f:36:24:42:58:cf:2a:44:86:a6:cc:d0:c0:44:dc:38:74:bb:
cf:35:fb:06:13:79:44:61:5d:e6:66:06:46:19:78:d0:4e:0c:
01:a8:cd:c4:b9:8d:27:44:a3:74:ad:87:32:ca:55:d3:b4:9e:
c3:a8:dd:29:88:a8:24:91:37:a0:4f:fc:ba:3e:41:18:08:81:
25:43:ad:30:da:c7:98:80:eb:80:ba:1a:11:6a:97:47:92:56:
de:65:d6:ab:59:66:7e:88:38:cf:1f:e9:eb:de:a0:12:8a:c7:
e3:a0:3d:74:0d:75:9e:ab:5b:b6:92:1f:6e:62:5c:8a:02:5c:
6a:f0:dc:9e:27:2a:24:84:95:63:05:fc:1a:b7:1f:9c:3f:1c:
ba:31:c6:70:c6:5f:c5:e3:fc:46:24:20:7f:fc:fa:bf:6c:86:
7e:13:80:c1:04:b0:ad:7d:bd:0a:35:64:e9:02:15:b8:f0:f0:
3f:39:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:30:38 2026 by rpki-client