Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: SO0lEvnXTEg/kmUzIaXyihCQ+PO9/Xo8VEoOrdpPDOw=
Subject key identifier: C7:21:D3:9F:2A:F3:1F:59:95:6F:DD:FC:9D:82:28:EF:F8:CA:E1:27
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 01A0D76034C489C59F869B922BB514F8FF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 07:03:21 +0000
Manifest this update: Fri 25 Sep 2026 07:03:21 +0000
Manifest next update: Sat 26 Sep 2026 07:03:21 +0000
Files and hashes: 1: 4QLQLdRNistD58V4Gobwba2l7ak.roa (hash: rdeifE6ly74qVEIujDihCPvAKVfy9CBgE4V+s0Ryjsg=)
2: LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa (hash: p9xq3q/MMRkwXX0B1rVTdYY5jk1Jby2fa+eubc67Btw=)
3: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: lhwKy+udUED1fToXfdU/+JWGGr+gI0tixNHNZAZebiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:34:c4:89:c5:9f:86:9b:92:2b:b5:14:f8:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Sep 25 07:03:21 2026 GMT
Not After : Sep 26 07:03:21 2026 GMT
Subject: CN=c721d39f2af31f59956fddfc9d8228eff8cae127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:89:26:2c:0d:db:8b:97:e7:c7:5c:24:3b:
10:23:61:d3:e3:c9:12:9f:5a:4c:38:12:1f:64:7a:
65:14:5d:1b:a6:7f:47:11:14:3d:66:2e:dd:8a:89:
c8:a7:64:1a:d8:ae:54:3a:a5:83:a5:c6:83:7f:1f:
67:5c:e2:fe:d3:48:10:29:ea:6a:e3:3a:46:ef:a5:
9c:9f:55:9d:e8:50:15:ca:12:0e:74:7f:9f:6b:11:
9c:c8:e3:f7:ea:16:13:80:a5:53:fb:27:78:66:74:
04:02:d4:09:c6:96:38:64:5a:60:b5:96:5d:59:3e:
e3:aa:b7:2e:85:9d:02:3a:fd:de:f9:fa:c4:54:36:
82:c6:e3:27:e8:be:3f:a1:12:79:42:c9:61:66:32:
f5:18:c7:e6:a1:c4:3e:05:9c:f9:d4:7e:c4:ca:f3:
7a:69:b1:4f:f3:ec:2b:b7:11:05:44:87:a7:ea:b6:
be:43:05:05:de:2f:ff:f8:8e:31:70:c0:34:e1:9f:
e9:4a:24:70:0f:45:05:f6:21:ac:67:a5:d1:ce:11:
d0:35:28:9d:62:26:74:46:bc:aa:60:4f:7a:88:32:
12:e8:5c:5d:06:7e:65:4b:43:46:8a:a8:17:69:20:
86:39:ba:43:cc:fd:b7:cd:cb:0d:56:58:71:f6:ed:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:D3:9F:2A:F3:1F:59:95:6F:DD:FC:9D:82:28:EF:F8:CA:E1:27
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:0e:de:7d:94:06:06:34:ef:a7:fe:28:7b:37:01:60:97:
67:fc:88:6b:b9:5b:4c:0b:14:43:97:b7:7e:fa:e5:95:42:b0:
1c:37:1d:a5:93:01:57:53:65:60:d7:ba:cd:51:44:a6:61:d7:
3d:01:61:e5:d6:93:a4:06:af:dd:d3:80:5f:eb:fc:26:4f:cb:
f6:34:1d:d7:55:f3:12:02:df:fe:d6:27:23:fd:6d:20:ca:87:
3a:88:1e:20:cf:40:a0:f2:9d:de:91:bf:9d:09:52:91:7a:68:
8b:93:bb:dc:7e:1c:7f:aa:2e:15:ab:6c:da:c8:a6:9b:94:61:
e1:5a:90:11:1f:85:00:0d:79:2a:0b:3b:8c:73:32:86:8e:64:
04:64:5c:cb:d7:b9:36:7a:e5:d9:98:0d:3d:83:34:43:2a:a0:
f4:db:83:32:f3:62:63:23:9f:58:cb:5e:a5:1f:71:ac:82:e5:
a7:b5:da:51:d0:a9:9f:f5:92:69:c0:2c:80:2a:86:56:d1:f5:
3e:ed:6f:de:c9:5a:2e:b8:f6:a0:08:98:5e:26:32:24:04:1c:
ec:af:75:e1:5d:62:f3:13:cc:26:60:82:5d:ec:92:8b:72:cd:
ff:37:46:8c:5a:b0:fb:8b:da:74:08:3b:4d:28:da:63:be:1a:
29:86:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:33:40 2026 by rpki-client