Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: 12XvULvSEXx2uuMeMzzQOMLIu1si7UHLp48ktBoayvE=
Subject key identifier: 66:CE:C0:57:DB:B5:5A:86:C3:40:87:98:62:19:2B:1A:A0:09:4A:18
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 01A0DC168C4B878BCD835A08C1AEA4735C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:01:00 +0000
Manifest this update: Sat 26 Sep 2026 05:01:00 +0000
Manifest next update: Sun 27 Sep 2026 05:01:00 +0000
Files and hashes: 1: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 9kcrpy2y4SnxrXRZa8QaS6uZ56ILZMB5NtLkc7I+JEs=)
2: fRifEZefvRsk6jclv7pVpILB6hQ.roa (hash: XNNUYM/7petSjasXKNt7qFQhJMSQer6H9QEr1epnmY8=)
3: yDFjBcpO_rK8R2DYPm8fJ39oFdA.roa (hash: B955P2LGm+p4uxnj3O6YVa6b5/IJbwPos+qiuEjVJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:8c:4b:87:8b:cd:83:5a:08:c1:ae:a4:73:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Sep 26 05:01:00 2026 GMT
Not After : Sep 27 05:01:00 2026 GMT
Subject: CN=66cec057dbb55a86c340879862192b1aa0094a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:35:20:88:b3:33:1d:01:6a:e1:16:45:8e:
01:2b:83:8d:ba:6e:ca:c8:ba:75:0c:8f:1e:01:2d:
b5:eb:e2:5c:d1:7a:94:a6:96:c3:6c:0e:54:eb:2b:
41:0f:87:6a:80:b6:c6:02:09:e8:56:7b:be:fd:7a:
3e:af:05:0d:e7:52:a0:0c:3e:17:b4:01:2d:1f:e0:
87:c2:4d:cd:01:2c:04:e9:46:06:87:a6:0c:7b:e4:
a7:c8:45:76:a1:44:70:41:72:1e:61:31:0b:bf:14:
f9:2d:7e:cc:82:8d:a2:7f:97:e9:d7:f3:5d:a9:05:
78:56:7c:62:aa:1f:62:54:f9:2a:a8:63:a2:64:49:
57:95:01:56:f4:87:34:88:f5:24:f5:7f:41:a8:f0:
5b:75:75:23:6a:cd:13:88:99:10:a9:76:b1:31:dd:
00:fe:18:2f:22:e8:be:26:64:18:66:9d:0a:10:f0:
77:3e:9d:fd:1f:73:c7:15:dd:bd:fc:4f:26:48:86:
c4:6a:56:13:9c:c5:04:6d:6d:00:a6:35:e9:b1:b7:
20:21:ac:19:f2:21:48:82:47:7e:f6:d7:d9:d1:74:
68:cf:31:0a:35:f5:52:59:10:67:99:ff:77:37:35:
f3:31:4e:2e:1c:28:a7:f2:ae:a0:15:a9:33:20:df:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:C0:57:DB:B5:5A:86:C3:40:87:98:62:19:2B:1A:A0:09:4A:18
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:f8:bc:ec:f6:2d:8e:31:1b:17:3b:b3:85:72:14:df:58:
97:25:b0:25:55:64:4c:1e:cd:fc:07:56:cc:fa:90:05:c7:bb:
63:b3:28:c2:a1:38:92:e9:cc:f7:47:b7:0a:53:45:f9:2e:0f:
d6:5f:36:22:34:82:ff:25:27:92:b2:84:da:4a:77:dc:48:47:
5b:5a:a7:90:1d:8e:d1:7f:fb:b5:ee:41:a1:a6:0e:f3:fe:78:
9e:92:26:1f:eb:74:95:ea:2f:cb:ab:26:a9:a3:02:8e:43:8a:
c1:27:7c:08:a4:db:6e:d3:ef:0c:34:e2:b5:70:0e:5c:2d:16:
33:7c:95:6e:67:a2:c0:0d:63:9d:c4:0d:25:96:d7:3a:ad:04:
e3:be:a5:fa:23:27:70:d7:32:91:57:19:cd:1e:12:b4:94:43:
b8:df:ca:0c:03:96:48:61:69:0e:b5:e5:cb:7f:6c:63:7c:69:
37:b2:2d:9e:cd:2f:4e:17:a7:ce:8c:04:97:e7:ea:ea:8a:82:
97:fb:a3:ce:4a:ff:2c:5d:25:8a:bc:5e:d7:40:68:a1:23:df:
55:3e:86:79:e9:5f:dd:ea:08:a4:c5:7e:1e:0a:96:6d:1f:ab:
b2:e4:21:b6:73:3e:f4:b3:0b:4d:ac:f9:75:f8:d2:46:2a:88:
10:23:28:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:22 2026 by rpki-client