Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: RN8wIHPirO2mUiThyQ+v8W+GUkDhg//Q/fnMvh2zyjA=
Subject key identifier: F4:32:29:08:38:02:C9:B6:4D:9A:EC:96:1C:03:E6:A9:B0:D1:85:57
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 01A1065C67DD58A42A73B691EA0B6AD1EE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 10:01:21 +0000
Manifest this update: Sun 04 Oct 2026 10:01:21 +0000
Manifest next update: Mon 05 Oct 2026 10:01:21 +0000
Files and hashes: 1: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: vK9/NZ63EFiYuYsUJ/a5IWfeEBPw4VWfCJm+U6wCKp0=)
2: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (hash: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:67:dd:58:a4:2a:73:b6:91:ea:0b:6a:d1:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Oct 4 10:01:21 2026 GMT
Not After : Oct 5 10:01:21 2026 GMT
Subject: CN=f43229083802c9b64d9aec961c03e6a9b0d18557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:2f:25:90:b3:a0:71:f3:b7:99:b7:72:71:
0d:c6:0e:b9:91:95:86:2d:bb:eb:8c:6d:b3:46:47:
eb:64:f6:bd:8f:c7:e6:3b:b8:54:1a:40:62:a5:34:
83:45:d3:d3:f3:0e:c8:ef:ac:6f:fd:57:42:6c:2c:
fc:af:1c:d8:98:27:51:04:00:e8:fb:f8:f6:07:f3:
d6:67:71:e4:d9:99:d3:5e:fc:86:29:29:fd:ee:44:
31:a1:9b:14:6c:0c:b7:66:8f:61:32:7d:46:e3:63:
f7:5e:ba:65:3d:10:46:0d:23:7e:a6:45:d0:a6:c5:
be:b6:bb:89:05:aa:4b:dd:8d:92:0f:d3:4f:a1:53:
8c:5d:a2:7b:cc:7c:d8:eb:5e:0f:29:ef:c1:68:1f:
a9:b0:29:21:ea:46:22:2b:57:45:d6:31:d8:27:a7:
9e:cd:f0:f3:bf:01:e6:82:5f:49:3e:99:06:12:3e:
c8:f8:03:60:ce:58:cb:18:7c:c1:93:25:3b:d4:c7:
25:88:d0:05:b1:5e:ba:ef:90:63:73:dd:57:a9:ff:
c6:65:e4:18:c5:ee:9f:27:7c:66:e0:e5:4d:90:f2:
2e:2f:69:bf:76:52:ee:0a:ea:87:95:04:17:a5:f8:
4a:3f:74:b0:71:92:c2:be:eb:8a:0f:d1:24:9b:b2:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:29:08:38:02:C9:B6:4D:9A:EC:96:1C:03:E6:A9:B0:D1:85:57
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:32:07:8b:42:a0:71:a8:99:cb:63:82:57:f6:8f:53:46:05:
05:69:03:2f:53:98:d2:ac:69:c4:d2:fc:83:47:e5:5f:1b:d1:
aa:06:9f:9f:47:f3:d4:d1:10:da:ef:36:49:b6:fe:b3:9c:6b:
b1:69:c7:bf:aa:a8:90:ef:ad:7b:a3:46:b1:f8:a9:26:25:5a:
a6:63:0d:dd:82:ff:ee:63:dc:8b:ac:c8:02:8b:c4:81:86:f7:
c0:f0:99:ca:64:a7:c2:09:2a:b3:77:30:22:ca:fd:7c:92:d6:
63:63:e2:45:e3:b6:a8:31:fc:f3:28:2e:57:f7:93:b5:41:d9:
16:9a:0a:bf:fc:0a:59:92:23:5c:4c:b9:10:66:b4:9a:38:d0:
1c:c7:43:ca:a4:f6:7b:14:bd:e5:7a:19:3a:d1:aa:4f:20:18:
ef:17:31:4e:16:c1:37:a5:a2:d3:13:4b:bb:19:a7:c6:b7:f2:
88:ed:58:b8:64:9f:e4:4e:14:27:c9:a2:6b:60:4e:63:79:10:
30:6c:06:fd:39:df:18:5b:3b:34:1c:5c:c4:38:37:19:50:b2:
6f:d8:3a:f7:43:52:2d:61:55:b1:fc:7d:da:a3:e1:26:d7:58:
3a:1f:44:2c:bb:27:b2:bc:9a:a5:91:91:81:4e:95:60:76:ef:
79:a1:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:28 2026 by rpki-client