Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: JjVgxQLASelrG7Zgwmo7mJR2jh5jaN6TXnvvts7Ejg0=
Subject key identifier: B0:3F:8B:16:1C:C1:3C:02:E5:AF:A3:6E:03:16:C1:7F:1A:65:FC:32
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 01A0CFA4B196B4BECC19DE31EB8B523532D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 13D2
Signing time: Wed 23 Sep 2026 19:01:12 +0000
Manifest this update: Wed 23 Sep 2026 19:01:12 +0000
Manifest next update: Thu 24 Sep 2026 19:01:12 +0000
Files and hashes: 1: Jx3uNY79zTtUVcXRajdPyL_4JyY.roa (hash: m3WDx8L8pFUiyy4V1JFsQgTuaeqJTjIlJ56rCgC/IOc=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: E3bf6+xhJtpjJRGLY9oreNvt4Xsb+dx5HsihDRYXgXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:b1:96:b4:be:cc:19:de:31:eb:8b:52:35:32:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Sep 23 19:01:12 2026 GMT
Not After : Sep 24 19:01:12 2026 GMT
Subject: CN=b03f8b161cc13c02e5afa36e0316c17f1a65fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:38:d8:1e:18:5d:01:7e:e4:4a:2b:cd:66:
24:9d:83:83:b8:cc:62:83:9d:09:a3:dd:84:25:e8:
0b:2b:d3:93:09:8e:e5:fb:8a:9a:b9:22:03:21:01:
cc:72:42:d9:4c:22:bf:be:e2:3d:dc:c6:e4:e6:ea:
9c:5c:9e:01:66:65:89:98:5c:58:ba:57:c6:e7:20:
2f:55:c0:37:2a:b3:70:e6:28:6f:24:d7:24:74:43:
9d:f0:55:ba:65:d5:94:80:74:92:bf:01:aa:90:66:
8a:84:fd:4c:88:c5:9e:20:d2:31:f0:ca:d8:2e:34:
2a:c6:8c:8c:61:8e:86:81:13:a6:1c:80:ae:f7:c1:
a5:43:fb:49:cb:a9:bb:59:db:fd:38:b5:43:d3:f9:
ae:74:da:9d:18:1d:3d:c2:20:7a:b9:b9:7c:b9:69:
e4:0e:26:e8:1a:a4:66:c1:53:a1:2c:0c:82:3b:07:
dd:1c:80:f6:cc:52:56:e6:46:fe:8c:14:34:cd:62:
b3:0a:f4:53:80:a0:3f:f5:c6:ea:e0:2c:d5:c7:93:
54:50:83:10:48:0d:ad:a3:c7:7d:19:b3:35:b6:3b:
e0:05:8a:ca:43:4e:a1:b0:7a:26:c0:d6:61:64:61:
c9:3d:9d:b3:30:8a:85:e6:3f:41:e2:ba:21:8b:8e:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:8B:16:1C:C1:3C:02:E5:AF:A3:6E:03:16:C1:7F:1A:65:FC:32
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:44:ee:69:a4:d9:62:c7:b5:05:5b:a5:ea:4e:24:74:6e:c2:
05:1a:d8:bc:cb:f6:d4:57:1f:1f:df:10:3c:d9:01:42:c3:11:
8b:36:9a:5e:0d:f1:73:f7:b7:01:bd:68:2a:99:2a:40:94:6e:
50:f4:80:05:ca:8b:bf:21:64:2b:dd:85:c5:72:ae:49:91:b4:
88:1a:7f:2c:2f:72:6c:29:1e:04:67:43:eb:a2:f9:3b:38:89:
1c:06:d6:97:99:56:e8:12:5d:47:53:72:65:9a:2b:15:f0:a9:
a2:f0:06:dd:51:35:fe:73:c0:14:90:cf:a5:fe:d7:1b:77:9f:
12:86:97:29:bf:47:09:22:63:f8:93:47:9f:69:06:c6:3f:8e:
63:23:cb:51:d5:4d:c7:b0:73:f8:c7:95:a2:3c:62:f8:9e:ed:
d1:39:da:03:f2:c8:f3:53:13:11:8f:1d:c7:f7:25:1a:6c:4a:
9c:98:73:e0:dd:99:15:97:0d:dc:3d:01:58:f3:bb:34:5e:26:
d2:28:46:de:eb:b6:52:b1:c3:cb:9f:dd:f5:f1:b5:fd:8d:a1:
d0:f7:51:d1:80:88:d7:67:9c:87:9b:39:60:c8:8d:3b:6e:db:
85:eb:76:85:1d:de:e6:dd:21:73:df:b7:62:be:8d:e5:39:28:
54:9a:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:57:49 2026 by rpki-client