Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: hnY6W3LiYAMrpHjjltnZgtkiIKpXm2zSYDLanaubiVo=
Subject key identifier: 0B:67:78:4A:D7:0F:C7:21:04:5B:D5:8B:04:EF:62:85:FA:45:16:93
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 01A10625E11877309E0A2836D4530880E663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0EF4
Signing time: Sun 04 Oct 2026 09:01:48 +0000
Manifest this update: Sun 04 Oct 2026 09:01:48 +0000
Manifest next update: Mon 05 Oct 2026 09:01:48 +0000
Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: Pof8RkZYIHM6pVqcLR2ILCHqupEpgMydS/XrO0kIqtQ=)
2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:e1:18:77:30:9e:0a:28:36:d4:53:08:80:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Oct 4 09:01:48 2026 GMT
Not After : Oct 5 09:01:48 2026 GMT
Subject: CN=0b67784ad70fc721045bd58b04ef6285fa451693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:f2:76:4d:ee:0b:78:16:d6:25:74:ac:82:
38:d7:8d:79:eb:fa:0f:94:12:c6:f3:b4:60:1b:80:
29:cf:ce:03:c8:fe:de:ae:d7:e4:04:c7:48:93:e9:
46:fc:9f:04:44:b9:92:0b:af:77:16:ca:94:6d:77:
0d:e1:78:48:cb:14:fd:96:b4:11:bf:2f:a2:ac:cc:
69:4c:7b:3c:34:99:82:f0:b0:bd:d4:c4:1b:a5:1c:
0b:d6:d2:ba:cf:15:7e:1f:35:10:f6:2c:8e:a7:a7:
2d:30:7f:63:17:0c:ab:14:23:b9:9e:3b:de:13:01:
d0:7c:03:25:b4:b8:4f:26:15:1c:c7:41:8b:66:b5:
3b:2d:d4:69:fc:36:53:2c:50:eb:3b:9e:ca:98:a5:
11:ac:97:77:5d:0d:c8:53:82:ea:19:b9:21:80:b8:
7d:58:18:0f:24:3b:bc:fe:88:6a:ea:11:35:fd:d6:
9f:3c:4a:99:12:99:b2:63:27:92:df:ee:67:b1:76:
55:77:23:43:72:a2:e0:ee:b8:c6:9b:84:b5:8c:1b:
fc:f8:c2:65:2e:a1:09:87:1d:1a:f0:a9:96:61:d8:
96:25:50:87:98:8c:2c:58:83:4b:0a:83:80:93:cf:
cf:7e:57:a8:e7:42:44:a2:58:ee:1c:1d:f0:58:d6:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:78:4A:D7:0F:C7:21:04:5B:D5:8B:04:EF:62:85:FA:45:16:93
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c2:f4:18:dd:4b:ba:dd:30:0d:a9:a0:bb:ee:a4:10:3b:07:
cc:51:8b:b7:3c:f1:88:3f:26:bc:bf:ee:dd:04:3b:3b:5d:c4:
1a:43:94:83:16:79:9b:bd:07:5e:b2:89:09:af:19:80:24:a4:
5a:c1:bb:6f:cc:5d:f1:0f:6b:96:6f:50:ca:b8:78:2e:51:71:
c2:d4:c0:93:6c:4a:26:29:bf:9d:71:94:f3:6e:41:08:16:68:
03:1b:ec:84:69:db:9b:90:5b:54:b7:87:57:64:b4:c3:28:b3:
dd:a6:f4:89:1c:65:b5:67:01:27:a6:68:98:94:8d:c6:40:42:
47:0c:11:c9:66:35:23:4a:bc:4d:58:99:32:a6:53:db:8b:c3:
c5:f4:73:f0:b5:f6:37:ca:81:3b:c1:e2:37:d6:81:ed:80:87:
2a:a3:fd:a7:b6:99:63:f7:51:57:ef:1a:9a:8e:9f:e5:d8:f2:
64:12:d6:b8:35:fd:f6:20:28:89:47:11:5b:ff:92:55:0d:b1:
2c:0d:c8:f1:68:15:b9:cf:d7:26:f0:3a:16:d0:05:70:e7:47:
fa:9e:51:ea:35:b5:6d:1e:e5:fa:28:77:64:7a:8a:a5:28:a8:
f4:41:cf:15:ba:9b:26:5d:8c:70:e9:01:ed:b7:69:79:e1:8e:
a6:af:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:51 2026 by rpki-client