Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: 1lSE2z3YFTfkvs8s0S7swFLtDB7FWf9HKXd6Ufo5AKI=
Subject key identifier: 59:11:A9:AF:F0:58:DB:FE:6D:1D:DD:B1:11:A7:AA:34:CB:D1:99:92
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 01A0CE5A7EF7DB306492A034866322CA0E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 13:00:32 +0000
Manifest this update: Wed 23 Sep 2026 13:00:32 +0000
Manifest next update: Thu 24 Sep 2026 13:00:32 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: SyQzYB1kr/YsXn70vObQxNchlfhAP+I49zPdLBxnOeY=)
2: OsbNeDemf33I6qy3k7S6aVsfSb4.roa (hash: buqoADQn3zwLUm6WlH1oPTj1EbKPGWnckzo2lLMt3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:7e:f7:db:30:64:92:a0:34:86:63:22:ca:0e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Sep 23 13:00:32 2026 GMT
Not After : Sep 24 13:00:32 2026 GMT
Subject: CN=5911a9aff058dbfe6d1dddb111a7aa34cbd19992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:c7:89:ea:e7:b4:99:56:30:6c:58:61:2b:
27:cb:e4:c3:aa:58:0e:0b:7a:49:eb:a0:80:5a:b7:
40:41:04:71:46:21:74:34:fc:ff:32:8d:15:80:8e:
34:c2:c3:3e:a0:d8:7f:1a:99:c1:73:ee:14:fb:c6:
85:9b:49:77:d3:fe:a1:47:60:b6:3e:42:a8:24:cb:
9f:c8:31:92:fc:06:cf:16:b9:aa:75:d5:a5:14:97:
db:06:c0:75:d5:b0:5a:3d:14:ca:d5:9c:1c:a0:39:
c5:69:90:78:74:99:b9:8c:c0:dd:a9:c8:3c:85:0f:
03:2b:61:cb:0a:85:da:4a:8e:8b:79:ae:b1:d3:56:
33:15:38:5b:c6:c4:48:0c:36:b5:c4:55:81:bb:b5:
a1:9e:e9:25:bd:94:2d:29:5a:b1:d6:c6:5d:c5:04:
87:b0:8f:eb:30:62:ff:22:dc:d9:9f:76:eb:98:82:
e1:4c:fb:6b:d5:1e:89:ff:9b:36:64:8b:da:e4:68:
6d:c3:a6:c2:e6:f0:b5:f1:98:b9:0e:42:ed:a9:e6:
99:48:2a:36:16:53:9d:1b:7a:c3:de:0d:a6:6f:06:
a6:3a:a6:61:d5:51:d6:a3:2f:43:e2:f4:ef:7b:7f:
bb:65:17:af:cd:ea:5b:37:b8:20:7b:6f:08:b0:9c:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:A9:AF:F0:58:DB:FE:6D:1D:DD:B1:11:A7:AA:34:CB:D1:99:92
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:4c:62:b0:09:5e:5e:9b:f8:84:f7:7d:ed:7f:31:ec:35:da:
a6:24:03:fb:2d:8e:82:82:8e:a4:27:7c:b3:97:80:57:d9:04:
bd:ac:90:3a:97:4e:68:d3:5a:2f:3f:ac:df:7d:8b:3b:f9:56:
15:a1:ec:47:c2:7c:99:5f:01:d6:a9:30:6f:8e:73:ae:8a:76:
38:60:d3:1d:2f:03:bb:11:95:95:61:75:8c:8f:22:a7:6a:7d:
8a:ad:87:d1:c7:37:b5:29:2c:c3:d2:e0:5c:af:19:69:ca:97:
79:59:79:2f:22:39:5b:b6:e8:be:bb:4e:fd:8d:db:95:8d:37:
5f:0d:b2:06:1e:02:e0:25:08:12:2f:73:df:e5:7b:b3:98:d1:
d6:f1:1a:7d:de:a4:ac:49:9b:6c:4a:5f:73:52:8f:06:ef:3d:
31:df:d0:2e:87:04:e5:5b:c4:78:7c:d1:23:43:9a:4e:40:78:
cb:7f:53:22:e6:18:b1:4a:0d:99:74:9f:24:43:9a:18:ac:aa:
03:57:17:1a:0e:4f:f3:5d:74:e5:cc:21:b7:b0:02:fc:8d:29:
12:d6:66:80:1b:8a:c5:b0:1d:d5:59:fa:cd:3c:7c:fd:50:c2:
df:93:9e:9f:1d:1d:99:f1:d3:c0:3b:12:2a:57:6d:3a:01:77:
25:a5:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:52 2026 by rpki-client