Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: LkqOSwXmtRciDaJGv7o9UcUrE/Qvodw7fWA0NeHVNJg=
Subject key identifier: E4:C5:B7:F1:6D:64:3C:56:F4:D7:DB:2A:5B:19:1F:5A:57:C0:2D:B3
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01A1DD9531CBDD4F5528079A0E1C958C4549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 05:01:44 +0000
Manifest this update: Sun 15 Nov 2026 05:01:44 +0000
Manifest next update: Mon 16 Nov 2026 05:01:44 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: QNovm2oO7vGS/TjtsmR71hOr30F9ICcMX2VTu1vSSbc=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:31:cb:dd:4f:55:28:07:9a:0e:1c:95:8c:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Nov 15 05:01:44 2026 GMT
Not After : Nov 16 05:01:44 2026 GMT
Subject: CN=e4c5b7f16d643c56f4d7db2a5b191f5a57c02db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:7c:3a:04:6d:48:55:a4:0e:f3:82:4f:76:
f7:0d:eb:aa:54:83:60:89:e5:8c:25:25:3e:6b:a5:
32:a9:c9:92:30:64:24:f7:3e:85:10:cc:1b:5e:c7:
74:92:42:9a:4a:04:13:a8:50:9d:43:30:5b:87:ed:
0f:e1:8a:ec:95:ed:3b:73:e7:55:80:e4:03:82:a6:
2f:8a:eb:40:39:d7:b0:f4:77:0a:59:63:e6:6f:36:
6b:46:32:76:a9:bf:5c:67:77:48:14:de:75:00:03:
44:d3:c2:63:34:f2:fa:85:da:ee:84:3b:f4:54:8f:
82:5d:62:84:5e:62:32:10:83:b0:86:42:2e:7b:cf:
c7:fc:50:b6:82:a4:f2:10:d7:c2:40:f2:bb:cf:b5:
f3:cb:1c:09:73:56:e5:b7:c9:e5:b9:55:f7:40:9a:
40:a2:2e:92:e0:7a:c1:9a:64:cb:31:af:e4:30:8d:
56:af:4a:35:78:db:33:77:bc:b5:b2:df:91:88:fd:
6b:06:27:44:d5:8b:0a:b1:92:fc:f1:98:9a:1a:2a:
3b:e6:b6:b7:43:02:c0:b9:cf:b6:59:c8:07:ed:c3:
1e:00:02:95:7d:94:fb:5f:f7:4a:81:88:3d:14:7b:
00:57:2c:83:98:0a:af:dc:b4:cc:b7:2c:c6:80:e8:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:B7:F1:6D:64:3C:56:F4:D7:DB:2A:5B:19:1F:5A:57:C0:2D:B3
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:f0:ba:7d:fd:5f:6b:d1:0b:25:b5:6c:d2:a2:83:0a:7b:
8b:3b:9b:cf:b3:98:8a:bf:0e:03:7b:95:29:75:50:80:be:91:
e6:2e:c3:c2:c5:3c:3f:46:96:ed:2f:a6:b1:13:a7:09:f0:c8:
4d:4c:50:90:17:34:35:a4:60:95:83:8f:98:4f:68:fa:e0:cf:
82:4c:e5:eb:ff:24:34:2d:d7:73:e5:2b:cf:dc:8b:21:52:2c:
cf:2f:8b:d0:eb:76:56:7e:5b:e5:6b:71:fc:d1:1f:3c:22:e0:
2e:06:87:4b:ee:23:bf:c9:62:b0:87:cd:fb:66:69:fb:5d:7c:
99:68:ee:c3:d6:d0:ee:69:f7:3d:d0:c1:e1:a6:20:1f:f7:d7:
f2:74:bd:92:16:f7:0e:39:b6:00:02:65:f5:2e:cc:3a:a0:fa:
0e:62:6a:92:a2:b4:98:cb:2f:37:2a:c6:fd:64:78:b1:4d:df:
63:98:f2:82:5a:ac:05:7b:81:59:93:f0:36:82:0f:02:ac:6e:
ea:85:29:01:9d:a1:b9:cb:a8:2e:dc:d3:ab:50:13:6e:c2:f9:
62:83:19:27:01:5c:16:b1:86:2d:d9:13:a2:92:2e:f3:b0:c1:
08:49:e8:ed:8d:f8:67:c2:3a:e4:32:48:3b:d5:2a:3e:60:8e:
25:64:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:51:22 2026 by rpki-client