Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier: NZciTCrEkwFeuasdXDdaYIv4ZIXz5G5Fzptt8gY6CEI=
Subject key identifier: 86:FB:17:4B:4B:56:A0:73:CD:27:43:B9:D0:4D:A1:04:0C:EC:39:C4
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial: 019E205A876A9F950A733A8542DC7495D21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number: 0AB2
Signing time: Wed 13 May 2026 08:01:04 +0000
Manifest this update: Wed 13 May 2026 08:01:04 +0000
Manifest next update: Thu 14 May 2026 08:01:04 +0000
Files and hashes: 1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: B6qzsWldnJLdVXrDJrJhKpOUDnewhx8D9idhvwuRpLc=)
2: PSue4eiiw2nCVw1drjwPSALcgXg.roa (hash: 1oP3e5TROxxn5gXpmfRVqjhOwGv4slj/HbiqgPw4q/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:87:6a:9f:95:0a:73:3a:85:42:dc:74:95:d2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Validity
Not Before: May 13 08:01:04 2026 GMT
Not After : May 14 08:01:04 2026 GMT
Subject: CN=86fb174b4b56a073cd2743b9d04da1040cec39c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:3d:41:08:c9:44:bc:42:86:b5:42:ee:87:
17:73:a9:27:08:d8:70:bb:aa:dd:2d:69:28:e8:c8:
99:06:ab:25:87:11:b5:24:a4:9d:d7:d7:5b:20:e4:
53:7e:f8:ed:10:38:54:87:0f:45:b9:30:73:92:98:
b1:5c:fc:b7:d7:99:1c:6a:c7:5c:c7:5d:df:32:22:
59:dc:af:45:50:38:a4:48:18:33:e4:e7:da:17:fe:
b5:bf:f6:eb:ef:39:f6:02:e6:02:bc:c4:d9:59:48:
32:0e:12:6e:8f:fd:7b:01:e1:aa:ec:5f:33:0d:47:
82:00:f8:a0:e1:be:12:9e:6b:2e:f2:04:de:f4:b3:
ae:10:73:72:6f:00:09:31:ae:ab:c1:49:77:29:95:
ba:5b:3c:26:ff:96:51:6e:19:7b:e3:00:f3:f0:89:
4f:05:93:3b:f9:e5:6d:4e:97:a7:53:ec:0e:71:8a:
46:6a:35:8b:8a:c6:7e:86:8b:2d:9d:7f:88:d5:c2:
2d:49:c7:5c:62:59:d7:ea:7b:f0:59:b8:15:83:a0:
93:f1:cc:2d:59:e3:aa:9d:84:62:5c:80:99:f9:e4:
29:1b:a6:ea:c9:be:9c:ff:bb:da:0b:5a:ad:b8:24:
de:21:43:cb:7d:8c:7e:1b:c7:f0:bd:29:7e:38:d6:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:17:4B:4B:56:A0:73:CD:27:43:B9:D0:4D:A1:04:0C:EC:39:C4
X509v3 Authority Key Identifier:
keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:63:57:da:c7:2c:88:d7:77:86:16:cc:a3:80:e8:a9:98:
3f:52:fc:eb:c6:8d:3f:e7:d3:a2:92:7f:e3:a9:80:76:aa:b0:
64:03:7a:66:bd:c5:c9:d3:bf:7e:a9:61:c4:64:93:b3:be:aa:
b6:54:97:05:35:3e:4c:90:8c:36:7e:f1:f7:fe:39:88:37:c7:
ba:db:51:0f:6b:28:9c:8a:4b:86:9c:eb:45:52:8c:03:a6:70:
f7:3e:c1:69:83:db:c0:bd:08:04:9e:03:d5:ad:dc:3f:02:59:
2d:52:4e:c5:e5:b9:84:51:e9:e9:40:0a:bd:e4:02:c7:47:dd:
08:70:84:fc:86:a6:57:e8:7e:d5:17:0f:e5:00:87:0b:66:e8:
8b:78:5a:7a:b6:e7:dc:0c:b3:73:d6:6e:e4:5d:bf:16:17:7b:
d1:d4:60:c5:7f:3f:8e:cc:4f:cd:aa:2a:d8:ba:a3:9e:6d:22:
5c:dc:4f:36:33:d6:dc:55:91:4f:27:9d:08:c1:b3:d9:2c:96:
1e:c8:c1:af:90:4b:51:d2:ee:64:32:cd:40:e0:1e:47:cd:b4:
a4:b5:3e:1b:f5:6e:6e:86:cf:cb:7d:27:3c:1f:c2:26:35:75:
0b:0b:c0:c7:28:36:e1:81:eb:d0:ee:ea:38:08:c1:c5:c8:50:
e4:78:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:38:34 2026 by rpki-client