Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
File: ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft (raw, json)
Hash identifier: tPDen88J5hfE4QCMpmylK+AP2KFU+IvZAYWhshK7Jis=
Subject key identifier: 34:23:96:EF:E1:40:9A:26:4C:A8:9F:1A:D3:73:AC:8A:B3:57:E3:63
Authority key identifier: 96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
Certificate issuer: /CN=96ce931f852f4046ff8db482b39450219f8b383a
Certificate serial: 01A0E098094E827139DADFDF28F310959575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
Manifest number: 018F
Signing time: Sun 27 Sep 2026 02:00:55 +0000
Manifest this update: Sun 27 Sep 2026 02:00:55 +0000
Manifest next update: Mon 28 Sep 2026 02:00:55 +0000
Files and hashes: 1: 2rO9mH3OXryLXQ1fKrL6Nz5IHqU.roa (hash: pjcgHLDWo1fInBoA6L65uzzfcpINA+52BV8ltO/eZJE=)
2: OMAfxlKlArt8nhDTTD6Xvr--tCg.roa (hash: qjVFBgoWq2ZsGj3ZMQWgpCZMEuEApEEAzRA1asj0/Ns=)
3: ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl (hash: gfstsF2ByICYPSXJBAmNnyz3G6HWwKYDjdWnLmjqgzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:09:4e:82:71:39:da:df:df:28:f3:10:95:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ce931f852f4046ff8db482b39450219f8b383a
Validity
Not Before: Sep 27 02:00:55 2026 GMT
Not After : Sep 28 02:00:55 2026 GMT
Subject: CN=342396efe1409a264ca89f1ad373ac8ab357e363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:a4:d5:6a:16:96:28:f8:e3:68:dc:ba:04:
ac:46:4d:25:65:97:90:66:69:7c:ed:e6:98:49:10:
25:eb:f5:b0:b3:3f:68:3e:f5:06:97:ef:9c:14:ab:
92:eb:d3:1b:ba:53:b5:e7:c0:6c:5a:6a:2d:37:1d:
67:2c:a4:66:5c:c2:97:ed:51:cf:64:66:cd:27:5d:
0c:bd:5b:cd:2e:46:77:32:ea:ea:e1:84:c0:cc:3e:
22:91:5a:ba:8c:3a:c1:a2:4c:03:9b:e6:0f:d7:42:
4c:ad:c3:91:b9:29:9d:a2:f4:f8:3c:aa:b0:6e:fe:
0a:17:cf:0d:dd:01:a9:70:5c:56:00:e7:3a:45:73:
71:60:9c:56:06:0b:b8:e8:41:48:c0:a3:a0:58:45:
2a:d2:b3:13:02:d0:df:e2:8f:90:94:65:ba:c2:00:
0b:89:ca:6b:9e:2c:a8:bf:35:22:bb:eb:6d:2f:44:
b1:2e:e8:eb:4f:d2:69:69:17:be:75:75:7b:dc:14:
b3:25:74:89:79:f5:68:29:22:9b:fa:7b:46:e0:76:
ca:95:0b:ad:83:f3:e8:92:30:1e:9b:99:4d:2c:78:
43:9a:28:82:04:79:cd:1c:6f:4a:ae:8e:a9:8b:d9:
1e:ea:14:41:ab:f4:cf:80:af:9c:7f:32:9e:f5:86:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:96:EF:E1:40:9A:26:4C:A8:9F:1A:D3:73:AC:8A:B3:57:E3:63
X509v3 Authority Key Identifier:
keyid:96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:76:57:f6:cb:9e:25:c4:f7:22:dc:8e:b0:11:27:dc:3b:
47:f0:af:56:27:59:d0:29:ea:f2:f4:8d:f6:93:38:41:7a:51:
3f:27:10:b3:cf:ba:8d:2f:a6:cd:4e:b7:17:8d:2e:e0:5a:09:
aa:84:27:62:2f:4f:32:43:ee:64:ef:cd:69:8d:29:ff:92:02:
68:42:6b:b4:a9:af:76:63:c9:0b:b6:e0:f7:79:f8:90:72:74:
66:81:df:f9:92:ea:75:75:79:e7:2c:e0:34:ef:54:2c:cb:29:
5b:ec:8f:8d:7b:f0:51:64:58:d3:8f:4c:fc:c9:c6:db:d6:65:
0e:5d:c1:9e:a5:e5:dc:4a:9b:94:31:75:f8:52:f8:dd:de:f5:
12:27:b2:b4:53:4d:0e:eb:75:89:d1:82:b2:59:dd:53:9a:f3:
a3:ef:5c:9a:3b:fc:c9:0d:39:e7:61:8b:e1:5f:e2:ee:87:a2:
ea:7d:58:25:64:7b:68:c5:f6:13:5b:77:2a:4d:c7:b8:92:5e:
c4:b0:95:44:10:a8:48:b0:b1:e8:92:5a:de:de:58:54:56:e3:
b2:90:26:ca:bb:b2:e2:1d:62:d4:cf:56:0e:a0:29:37:f4:53:
b3:08:86:7d:c6:06:68:b5:b1:49:32:bf:78:8b:82:7f:df:53:
e2:af:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:41 2026 by rpki-client