Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: tsHxk7gHPZgy6KvIf/smiTOX6ctamb9ACbrv8DxC5gU=
Subject key identifier: 56:BA:64:89:49:2B:DB:26:E1:E3:0F:67:5C:2E:42:87:10:BF:C4:03
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A0D3EF2590B6EC25B03DF9DAA9644CE0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 1B43
Signing time: Thu 24 Sep 2026 15:01:00 +0000
Manifest this update: Thu 24 Sep 2026 15:01:00 +0000
Manifest next update: Fri 25 Sep 2026 15:01:00 +0000
Files and hashes: 1: Oo01x8pERgWGLUwO9m5xfExXg9g.roa (hash: iSqQFbuWHpKMVbwARx0x5sxvGhMHq7DllvKbl8K+zMo=)
2: VlYJfL62zXlK9zhHkeRcXKHwzJw.roa (hash: pyF74z/76/0FbrDm7tHeWDaoslBZYA7e5eho0bYw5/4=)
3: W65vFxXKbxmq7dK_TAJxVeUdWHA.roa (hash: yqxtHV/CslpZBPyeOdQKLmW4Iyq5xnMKwuGrDGPLQyQ=)
4: bgVdDIP4FIow1zAwSao7be6KrC8.roa (hash: 8F5clBuL/Te3i0D4X6PaEO16p9rv+ETHYqT2HNqrKbQ=)
5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: Ta6E/vQuznBv0UPHgk4N8lxW+OqtsqU8ZGroN+GIcYA=)
6: q2983OPzklakgSCjeiVFDoK69Xs.roa (hash: sQVFXTJ4NvpmpUw5zr/gtuq6d3FLh30FaP1gqDZKaWI=)
7: r0mR3JdsSHjQijRrm4Pcq7lgM58.roa (hash: s1x3KCynDraX05aiffgCwXTC5LKE3qCWa29JhXg/r4M=)
8: xkh-HA8JIqHvPIH5H2s9TrhN9FM.roa (hash: yD4AUqZznGBBTnerrmGNIhz4MlxBSwQeUlD2elXSFEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:25:90:b6:ec:25:b0:3d:f9:da:a9:64:4c:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 24 15:01:00 2026 GMT
Not After : Sep 25 15:01:00 2026 GMT
Subject: CN=56ba6489492bdb26e1e30f675c2e428710bfc403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:cc:b8:be:7d:10:a6:fb:78:e9:26:ef:d6:
bc:83:43:d5:3f:25:a8:f3:41:fa:7d:70:7f:f3:68:
c9:22:86:23:b0:b3:c9:71:80:c5:81:a8:ce:43:ee:
92:db:36:2c:ad:18:28:26:57:ed:03:eb:ba:6f:e6:
10:e4:d2:56:7a:a6:09:ab:a3:07:12:1c:4a:05:b1:
1a:41:8a:8e:ba:f6:4e:47:98:19:0a:30:10:f3:1a:
e4:c7:67:2e:e5:0a:a6:0c:4f:30:96:a8:dc:6e:a3:
8c:33:2b:ef:6e:d4:44:ba:49:31:87:eb:54:9a:90:
c4:b8:a9:ca:54:10:99:a6:96:12:0f:23:f6:90:c1:
f9:00:b2:9f:cd:ce:ba:eb:ef:79:e0:d1:36:a4:f3:
d3:58:ed:53:16:be:9d:e9:e4:0a:31:93:12:f3:6c:
35:fa:7d:08:87:17:65:d7:7e:f9:8f:8e:88:5e:e4:
bc:9f:41:44:ca:3f:13:3d:c2:66:c6:6f:ae:79:3d:
8a:97:02:cb:f9:7e:55:30:7f:14:fb:65:72:5f:6a:
46:b0:1a:04:31:15:36:ad:78:20:00:ae:02:c4:eb:
8a:7f:00:2e:58:3a:10:9b:cf:6e:eb:52:15:6c:c0:
ba:60:bb:56:46:a1:09:ee:a8:58:fd:cb:f3:f6:be:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:64:89:49:2B:DB:26:E1:E3:0F:67:5C:2E:42:87:10:BF:C4:03
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:b0:d6:59:48:c7:d9:7e:a9:db:0c:11:d6:37:9b:fe:65:
0d:ea:a0:08:67:72:cd:64:a2:22:1e:4c:f1:6d:23:8d:30:39:
47:73:4f:ec:b0:bf:82:ea:4b:08:cc:95:4c:3f:16:bf:69:a8:
17:5c:12:8a:87:84:f8:15:97:3e:24:a8:1d:c3:be:61:d9:bf:
7b:26:b0:14:ea:fd:10:ab:7a:9f:e2:95:57:0e:36:3f:33:08:
41:32:cb:42:fa:f4:bd:04:7a:1b:b3:20:d5:86:c3:62:6f:4e:
a0:75:72:0b:0b:1d:cb:2b:7e:92:b1:bd:35:ca:39:cf:6c:4a:
51:9f:d8:18:cf:5b:11:9a:9b:cd:d5:97:f0:29:ed:26:4a:d4:
dd:be:45:53:fe:a1:f3:02:a2:fe:be:a3:4a:f0:e2:94:84:5b:
2a:2d:cd:b2:08:05:e4:28:6b:00:ad:60:b9:38:50:ca:8f:77:
3e:9a:66:29:3f:79:4c:a8:26:aa:ed:f3:2e:27:5d:f6:2e:a4:
7e:c9:5c:68:e4:b3:9d:09:ff:62:c4:94:51:8a:52:a8:7d:ce:
8b:4f:23:1b:82:ee:bc:4b:ea:92:42:14:5c:f1:34:cd:f3:f7:
2a:20:e3:99:a8:aa:9c:b2:b8:2b:d6:3d:85:77:90:a4:99:d3:
e3:00:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:51:47 2026 by rpki-client