Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
File: lrrMW97hlpQXoUa8RYZbRascN3c.mft (raw, json)
Hash identifier: 8Ra7l1CJPr9uzx0LYi+193K7V2Qa6zZA8LxIPZ2LqiM=
Subject key identifier: 9D:B1:2A:12:AD:31:E2:74:AB:A6:88:8C:22:1A:BC:AD:99:37:74:C3
Authority key identifier: 96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
Certificate issuer: /CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Certificate serial: 01A0DBA9FD479D6F094D9ADF58067819D136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
Manifest number: 89
Signing time: Sat 26 Sep 2026 03:02:25 +0000
Manifest this update: Sat 26 Sep 2026 03:02:25 +0000
Manifest next update: Sun 27 Sep 2026 03:02:25 +0000
Files and hashes: 1: Pgpyk-hrzki9Ic59DdPNuzjskEw.asa (hash: Fu0SEp/DMSPXcJMhtPEEsmMFFRDBhn8d7ifvtyYjfQA=)
2: lrrMW97hlpQXoUa8RYZbRascN3c.crl (hash: d6/NOhGR9uyFkTFi9XM0reb5MUbueWZt7GtaL75crkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:fd:47:9d:6f:09:4d:9a:df:58:06:78:19:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Validity
Not Before: Sep 26 03:02:25 2026 GMT
Not After : Sep 27 03:02:25 2026 GMT
Subject: CN=9db12a12ad31e274aba6888c221abcad993774c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:93:80:90:bb:71:b8:f2:27:16:e2:ce:16:
cb:33:80:b9:1b:b2:f7:99:c2:ab:5a:fe:c3:60:97:
18:94:d1:24:bb:04:13:fb:a3:95:a6:24:05:08:1c:
d8:83:a6:84:e2:1d:71:2d:21:06:45:b1:f6:11:07:
bf:a2:ee:d1:31:45:97:17:31:6b:51:70:5e:36:34:
01:ba:f6:5d:04:0d:54:03:7e:f7:2d:a4:fd:7d:ba:
36:f4:f8:6e:bb:9d:f1:37:b1:88:83:c4:59:5e:c5:
ab:5f:a3:4a:be:f4:51:4d:65:ea:d7:b1:c7:33:61:
09:1d:97:3f:f9:b8:e8:7d:98:48:83:af:03:04:f3:
bd:03:49:f6:ab:9f:34:2a:bf:4a:37:a0:6b:e9:61:
77:14:21:08:f7:e5:11:5e:01:ca:63:1e:78:47:b0:
5c:95:42:c0:a4:db:f1:0d:de:c6:ca:3a:3c:45:68:
d4:f1:09:1c:de:79:63:e1:7c:c2:64:42:ec:c7:d2:
04:f6:11:eb:6f:c7:f2:24:ba:9e:05:56:82:03:99:
c8:2a:ab:1c:93:d1:38:0a:96:66:ea:dc:74:d1:b0:
79:60:e7:c8:9c:c0:69:e9:1e:63:fb:86:26:0e:5f:
61:5e:be:81:83:c1:a0:c3:7b:d9:40:f1:aa:03:46:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:2A:12:AD:31:E2:74:AB:A6:88:8C:22:1A:BC:AD:99:37:74:C3
X509v3 Authority Key Identifier:
keyid:96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6b:84:9b:53:b5:8f:7f:98:ae:48:a6:a8:68:66:77:35:a6:
e3:99:b4:0a:48:3f:68:4b:cb:46:06:1e:74:bc:64:3e:af:23:
2d:6b:5f:c9:00:7d:08:fd:48:31:46:41:05:0e:a9:c8:1a:e2:
31:55:2f:53:65:40:fd:b7:c8:a7:12:1c:cf:54:79:24:c2:f1:
a4:e6:52:a1:a6:77:ec:99:5f:0e:93:be:e1:da:82:67:a8:ed:
03:87:85:ef:c2:82:c9:58:16:da:dc:eb:ae:fc:5d:66:d1:a9:
60:90:e5:5e:b0:f1:8a:e1:b4:2e:89:9c:83:db:28:b9:73:9a:
01:e2:f7:9e:9e:67:8f:0b:fb:43:89:fe:99:53:f9:87:31:e2:
40:50:31:a5:10:9f:d5:6d:5f:25:14:6c:24:95:30:e6:73:cd:
7c:b1:a1:44:c2:22:5a:0a:ab:7e:ec:27:d1:81:e4:f7:2e:bc:
54:f0:67:f2:07:e9:4d:e3:6c:81:b4:60:0d:06:2e:2b:92:f5:
de:97:92:cc:36:95:79:c7:e9:ed:ce:31:b4:16:42:93:5f:28:
b7:66:e4:47:f7:fa:52:bc:c2:a1:b1:aa:52:50:bc:ee:c6:cf:
55:a6:0f:4c:94:54:4f:3f:86:ea:37:c6:82:df:87:f2:38:c4:
b5:c4:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:57:49 2026 by rpki-client