
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: vfrRE953bUR//OALgq3KReRT3LTPviDhF2j//SgOqWk=
Subject key identifier: 70:AF:83:07:7F:EE:83:78:A3:CE:76:35:8C:AB:B8:4B:97:4F:77:D5
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A0D315CE5651A21AE2E1C77D29DFB5BCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 078D
Signing time: Thu 24 Sep 2026 11:03:36 +0000
Manifest this update: Thu 24 Sep 2026 11:03:36 +0000
Manifest next update: Fri 25 Sep 2026 11:03:36 +0000
Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
4: RArElwhZ2L2Zlj0l8O2N8bOSric.roa (hash: 4r5JtsLOAT3pIVx8q/4/irh2e8gGrH4iwTU+5S/pCGo=)
5: kcCZM38l6ytFTSCCRGE4xZmb_5M.roa (hash: vdyTwvLkPGrGBvR3sd98RK3Nag8A+19y2RgUseY1tS8=)
6: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: E/TwRQxh/J18xz8f8it+AdpL+8eOqRa7UlVT40Xs7e8=)
7: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:ce:56:51:a2:1a:e2:e1:c7:7d:29:df:b5:bc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Sep 24 11:03:36 2026 GMT
Not After : Sep 25 11:03:36 2026 GMT
Subject: CN=70af83077fee8378a3ce76358cabb84b974f77d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:15:ac:50:65:1f:20:8c:b6:41:c0:bf:41:
89:ce:1d:9e:30:42:81:fe:ad:99:d3:a5:43:a5:b4:
26:b1:c7:0c:1a:b0:4a:80:56:9d:7b:ee:c3:94:09:
ce:54:28:7b:81:7b:5b:fd:e4:7d:c6:78:72:b4:14:
ca:a0:ea:ce:e6:2e:66:0f:26:0d:7a:ef:e5:90:8d:
f4:af:91:8c:2c:86:d4:62:30:00:0d:7c:77:e4:3a:
30:10:8d:e3:b8:0e:4c:61:b6:90:5d:a1:05:f7:8c:
04:80:76:60:e2:e7:20:a2:d0:72:bc:f0:0c:26:a1:
c1:7c:79:ea:94:af:ee:59:01:4c:f0:75:4f:88:f8:
23:fa:e4:bd:ae:ed:87:f4:31:21:13:97:03:b2:ac:
d3:e1:63:72:c2:cf:2c:51:1c:61:92:f1:24:e2:4d:
47:72:ae:dc:f0:b3:d2:0b:b2:2e:d3:64:d3:0a:ef:
00:3b:61:36:5c:ea:61:82:b3:1f:ad:8b:eb:c5:ff:
0a:0b:c9:6b:64:32:5f:11:cd:07:35:df:95:57:67:
f4:c3:67:b3:61:3d:c2:9b:d0:1e:d8:0d:10:fa:17:
72:c2:1a:4c:0b:bf:03:e3:82:98:92:10:dc:04:66:
60:e1:eb:d6:ee:f6:94:d9:fd:18:d3:27:39:63:88:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:83:07:7F:EE:83:78:A3:CE:76:35:8C:AB:B8:4B:97:4F:77:D5
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:23:2d:1e:69:f4:72:90:a8:03:46:7f:ea:b2:1b:a2:50:e1:
52:02:54:79:c1:83:47:68:2d:29:b9:e8:2b:84:71:c5:bf:55:
11:c5:5c:0a:7b:b9:19:6c:fc:51:6e:88:cc:f9:4e:e5:51:b5:
3a:9c:fd:f9:e0:71:17:b3:13:7f:72:e7:b5:36:ec:7d:2e:d3:
5b:66:34:44:c3:9d:27:94:19:a4:0f:b7:e1:bd:69:65:77:f3:
c1:c7:36:57:b1:cd:68:00:13:08:af:9f:2d:65:0f:2d:7c:34:
56:bd:f6:ce:7d:2b:d7:7f:d7:a5:64:26:8e:06:d9:57:6a:37:
69:d6:86:68:4f:16:c6:2a:d9:71:17:a1:97:15:b3:a1:e3:95:
33:40:60:63:1b:4c:6a:e8:22:b2:49:e5:a2:ad:92:42:bf:9b:
67:12:1e:11:02:03:09:66:cf:52:89:14:2c:14:e5:06:73:0d:
7c:6d:39:c4:3b:ee:3f:f3:30:9d:b1:33:44:50:4a:45:a5:7b:
77:3f:ab:74:c8:c8:e5:41:fd:36:49:be:26:99:b9:33:cf:47:
e7:d9:f1:53:cb:85:1a:80:2d:40:c7:54:fa:78:77:28:88:50:
55:33:06:82:e3:5a:28:50:ba:bd:48:2f:2d:a1:fc:0f:64:86:
e1:c6:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:20 2026 by rpki-client