Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: AviRTAMqVzV1wSLwixKH/mrFFWaVh613X8W2e7hMV3E=
Subject key identifier: 5A:21:6A:94:06:80:AB:66:A9:6B:FF:4F:73:11:76:7C:CB:A8:36:F5
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01A0CF36986C98026B635E360C4ED1E91214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 17:00:56 +0000
Manifest this update: Wed 23 Sep 2026 17:00:56 +0000
Manifest next update: Thu 24 Sep 2026 17:00:56 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: Qdd7uR7Sw5pdCn0gmof3H3K0b0QIuJ7lfp3Z770tbAw=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:98:6c:98:02:6b:63:5e:36:0c:4e:d1:e9:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Sep 23 17:00:56 2026 GMT
Not After : Sep 24 17:00:56 2026 GMT
Subject: CN=5a216a940680ab66a96bff4f7311767ccba836f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:81:67:14:a1:03:19:c4:89:4f:71:37:d9:
99:56:54:3e:bd:4b:14:71:7e:1e:ff:da:04:1b:ed:
f5:28:b4:94:98:d7:ab:c5:ac:7e:df:cf:61:7a:d8:
e4:25:db:e1:dd:61:75:0d:87:c9:09:b7:67:f3:b5:
c1:78:35:cb:c2:b2:71:c4:28:e2:3b:a3:55:04:89:
6d:e5:e4:ed:16:51:ce:be:9e:d8:dc:6c:36:4b:21:
53:8f:28:24:f8:30:07:04:81:f4:d0:98:a0:b2:4c:
f1:f3:a3:20:77:51:99:fc:a5:c7:34:53:1b:a3:4b:
41:6b:cf:ca:01:b5:f8:11:bf:74:97:55:86:f1:e1:
68:b1:ee:6b:fc:a7:bb:5b:45:7e:4c:25:34:3f:aa:
85:c1:1a:3b:93:db:c8:70:7a:82:42:8a:4c:a0:84:
ac:7b:a9:f6:e9:88:71:b8:9b:05:86:5a:e4:53:4f:
7f:aa:3f:c1:de:37:81:bd:e8:ea:77:e6:22:91:2b:
72:7e:f7:e7:1b:89:cc:af:ac:bc:8d:07:86:25:c2:
e0:97:4c:ec:63:be:a1:af:c1:a9:01:59:fd:de:f9:
b5:e6:a0:70:f0:1f:e8:14:33:69:1f:be:83:a3:1d:
71:be:80:b6:f9:04:d6:f2:91:a8:c5:88:dd:79:e8:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:6A:94:06:80:AB:66:A9:6B:FF:4F:73:11:76:7C:CB:A8:36:F5
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:37:c0:76:d3:b8:c2:8d:cb:74:2a:1c:ee:ac:e9:2d:c2:82:
f1:d5:e2:d3:32:63:d4:40:e6:5a:a8:0c:da:b8:63:ee:c9:01:
cc:32:83:e2:c9:cc:5d:7f:e7:97:75:be:3e:0f:71:62:24:d8:
c5:e3:68:f6:3a:82:13:d1:50:56:66:27:1f:19:db:b9:a2:2f:
ae:62:86:61:11:8b:39:4b:e2:f5:ed:06:51:1f:5c:be:fd:63:
ce:fb:f2:30:0c:7d:7b:28:3f:6b:43:22:1b:69:ed:f4:db:02:
89:f8:25:f3:23:3d:23:5f:26:a8:39:1c:ba:44:3e:29:87:f0:
f5:3d:fc:8e:60:55:d5:e3:ec:56:f5:5f:4f:84:02:a7:f4:c7:
40:fb:6b:a2:ee:62:c8:08:8a:1c:a6:2c:6b:d7:47:a8:a9:60:
87:e8:6d:eb:e8:92:e8:3a:b3:cd:a4:44:e0:4f:00:9c:43:56:
9e:ce:d0:14:7d:33:15:b9:31:ce:7b:e2:b0:cb:5c:c0:99:90:
9a:41:8f:4c:6f:c8:a9:b0:d5:ea:6f:a8:f9:02:e9:de:f8:cc:
8e:a8:4a:6a:c9:89:a7:da:26:9a:e4:4c:88:97:03:a6:3f:0d:
ed:c1:bb:55:97:51:15:c8:8c:87:77:18:a1:af:82:e0:e0:d8:
b9:a4:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:48 2026 by rpki-client