Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: Z+gCkvzispkGotOnAbqSttvDOYufCsTsd1mF1CXBYT0=
Subject key identifier: A8:B3:14:20:FE:18:38:05:C9:41:AD:81:AF:51:6E:40:45:71:32:47
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 01A1027FD2A64191E5D59F24CED45D71C62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 16:01:33 +0000
Manifest this update: Sat 03 Oct 2026 16:01:33 +0000
Manifest next update: Sun 04 Oct 2026 16:01:33 +0000
Files and hashes: 1: EV5B5CDx-yO9QhQKgIOGKQuwu8Y.roa (hash: BneDEJ5QoDJkAJJC30tOaDJaCQOMhWb/wOIFibxQ6Ms=)
2: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (hash: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM=)
3: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (hash: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: 8nspvrfiC3MvjMYzlmC/VGiMbVJoxWUdW8eNDMJqwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:d2:a6:41:91:e5:d5:9f:24:ce:d4:5d:71:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Oct 3 16:01:33 2026 GMT
Not After : Oct 4 16:01:33 2026 GMT
Subject: CN=a8b31420fe183805c941ad81af516e4045713247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:15:68:4d:50:a2:4c:29:53:fa:64:e3:4f:
df:9e:f4:91:f9:c0:37:ca:20:43:4c:45:6a:4d:22:
87:77:23:53:68:3d:c4:ad:13:fd:52:e9:98:de:3c:
59:94:35:38:33:be:ab:1b:40:54:67:53:2e:21:78:
17:82:68:30:fd:fb:bc:1d:de:a2:96:35:22:65:72:
c3:af:71:3b:8d:d7:24:b7:23:6a:6a:3e:61:e5:67:
1d:73:9e:86:a1:e8:b0:27:36:22:4f:ec:2d:b7:15:
7f:33:e9:82:84:d6:1a:3b:ca:d5:d9:c0:4f:fc:95:
8c:d4:18:e8:4e:b4:ce:cd:d9:d8:e7:22:f6:b8:4d:
51:c4:23:45:f7:cd:02:39:b3:71:97:c4:be:60:fe:
f9:a4:a7:ac:36:f4:8f:a7:9b:5e:c3:c6:7a:6c:5a:
4b:32:20:cf:98:c6:4a:fc:1d:e8:db:42:67:c8:7c:
86:ce:92:4f:b2:14:71:f3:ca:44:30:57:20:e9:8e:
62:7d:67:19:06:24:f1:87:ba:aa:b8:5b:e2:ba:db:
b6:01:d0:b7:1c:a0:8b:a5:36:11:02:3d:81:2a:11:
b6:bc:d8:05:88:f8:6d:f9:ce:87:57:48:bd:3c:77:
2f:75:1c:d5:7d:f8:47:41:9e:f8:82:05:40:4f:a8:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:14:20:FE:18:38:05:C9:41:AD:81:AF:51:6E:40:45:71:32:47
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:5c:0b:da:a9:83:da:0a:2d:0f:22:f2:5c:e4:e2:5a:94:
90:c8:52:de:97:38:88:26:dd:b7:7b:3c:6c:4b:c8:4e:f0:57:
82:1a:14:67:0a:f6:35:44:5a:13:c0:0d:ae:69:04:16:54:f1:
d5:a1:f7:78:d6:4b:1f:90:10:e2:31:ba:01:09:78:3b:54:bd:
03:f7:70:b9:ef:42:30:a6:1b:55:e6:d0:48:88:d1:e1:e2:3c:
87:da:47:e7:29:5c:ff:f7:98:21:11:2e:a8:13:6c:8c:d7:ff:
0b:15:6c:04:ae:2d:7d:1a:99:20:75:59:eb:98:95:7b:a0:f0:
db:ff:18:48:6d:dd:61:75:4e:89:bf:56:f9:30:08:83:50:42:
7d:94:66:e9:ed:c4:bf:d0:2d:15:13:7f:d3:49:89:6a:e6:a9:
34:95:91:dc:4a:92:7a:0e:31:ec:93:57:65:20:11:04:b4:dd:
75:74:d4:00:02:8b:c7:11:47:15:fb:7c:9e:ee:3b:ed:b9:bb:
d3:d4:45:23:12:5e:93:f7:d4:10:5d:32:3d:0f:22:ad:49:67:
35:6f:48:c3:a2:d6:1f:f2:c5:0b:a7:f8:d7:7f:eb:71:ba:ff:
05:4c:a5:c8:5b:e4:2e:4d:7d:bd:b3:30:26:df:e9:c2:1f:56:
2d:73:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:15:23 2026 by rpki-client