Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: oKzKY5Zg86si1oFyuPnVIyC1EKT8V53a91XzSSHUUX8=
Subject key identifier: 89:83:8C:86:78:44:4D:71:EA:64:9F:B1:BE:A7:37:B6:9E:9B:20:B6
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01A0D1250F6F6EDEDD8F6E4D632CF8CBC085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 1A7C
Signing time: Thu 24 Sep 2026 02:01:01 +0000
Manifest this update: Thu 24 Sep 2026 02:01:01 +0000
Manifest next update: Fri 25 Sep 2026 02:01:01 +0000
Files and hashes: 1: 1J8iJjDshk0K5lYg4l_c2ofYegs.roa (hash: qSMx+hDj/RyqV4hBcH75SbfZI3k3bmyUJ0HCop3PjC0=)
2: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=)
3: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=)
4: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=)
5: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=)
6: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=)
7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: bgw2jvri8V4Xysw5sbJFMmd75kVUQsbj7m9zKy3yd2Y=)
8: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=)
9: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:0f:6f:6e:de:dd:8f:6e:4d:63:2c:f8:cb:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Sep 24 02:01:01 2026 GMT
Not After : Sep 25 02:01:01 2026 GMT
Subject: CN=89838c8678444d71ea649fb1bea737b69e9b20b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:6d:16:27:da:09:ad:6f:95:d6:3c:99:69:
91:30:e9:5c:f1:53:b2:50:f6:c1:5d:07:1c:75:95:
a1:11:c9:e2:d8:8d:6c:04:15:b0:6d:55:11:1c:f9:
b6:37:2e:ee:62:b3:64:ee:ea:9c:39:1f:f4:0a:d8:
60:30:9d:30:9d:d3:70:7e:d0:9e:53:70:b3:09:e3:
3a:bc:c8:e0:29:cf:46:e3:48:1a:25:b6:48:e7:c6:
59:a0:46:cb:b5:d2:8f:eb:88:25:2e:27:dc:43:42:
02:a1:82:4e:30:ba:85:88:7d:0a:8b:1d:11:50:09:
f6:91:02:78:79:e9:07:a6:93:dc:f1:1c:30:65:50:
88:6a:6e:9c:18:31:50:3d:1a:de:b8:43:fe:6d:1e:
f2:d9:91:b4:41:63:e8:7e:e2:2b:34:73:a9:cf:6e:
33:84:47:d5:83:bd:86:e1:db:a3:7c:87:bf:3b:3d:
b3:8f:f4:45:46:53:a2:82:d9:9f:db:38:66:8a:17:
41:e7:59:d7:ba:f0:08:f5:e3:12:fc:36:56:77:68:
63:3b:29:7e:dd:b1:c8:3d:e5:82:cf:6e:20:06:da:
01:b8:81:49:45:92:10:12:c1:25:29:e2:2f:7e:5e:
48:ea:95:38:08:66:2c:6f:e5:4e:72:93:f8:7e:aa:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:8C:86:78:44:4D:71:EA:64:9F:B1:BE:A7:37:B6:9E:9B:20:B6
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:3d:41:93:02:68:31:1c:65:20:bf:8b:d1:b1:d9:a6:6d:
8b:a1:f2:1b:01:8c:f1:64:4c:8e:ff:68:15:ed:d1:91:a6:56:
ef:d3:ff:d7:11:ab:e9:70:1d:41:9b:ca:2b:db:c4:1d:11:8b:
92:94:32:18:1c:9f:69:62:5a:51:ba:b3:9a:65:11:08:5d:2f:
7f:19:4e:77:af:0e:70:23:08:73:c6:65:bd:46:e7:96:00:3e:
f6:3d:e5:24:9b:3c:3b:6f:d8:31:0c:4c:b5:b2:be:ac:76:f6:
96:ec:30:c7:16:0c:50:c5:af:03:6e:4f:b3:42:5c:d5:bc:18:
f0:d6:b0:03:89:5e:93:8c:d8:15:48:13:75:d1:ee:c9:92:3f:
ae:a8:5f:08:ba:9a:c4:8a:c3:37:48:30:25:61:c4:1d:e3:c2:
9a:09:d7:b0:85:08:e9:32:01:3c:ea:1a:31:ae:3b:2f:67:ad:
31:de:9b:2d:74:8d:21:22:dd:07:cf:a1:09:1a:00:c7:c2:83:
27:5d:9f:0f:b3:38:d1:87:ca:0c:d2:b4:de:2c:0b:42:3f:bf:
d1:05:af:33:f1:16:64:03:c1:b5:f6:97:7a:5a:a2:80:35:86:
52:ef:98:4c:c2:bb:b3:96:4c:dd:f7:80:c1:d6:19:4c:f8:46:
d0:1f:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:59 2026 by rpki-client