Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: 53zyLMI8dVCU0qvU0Ydmb7FlJt0sZCINm78AxQJibS8=
Subject key identifier: 82:9E:50:31:6A:48:BA:4D:EA:16:0D:D9:30:66:01:A2:B5:85:B8:18
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 01A13A7FDEF6A22AAF4BC025FA02523C23AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 0456
Signing time: Wed 14 Oct 2026 13:00:20 +0000
Manifest this update: Wed 14 Oct 2026 13:00:20 +0000
Manifest next update: Thu 15 Oct 2026 13:00:20 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: ffTjlax2L3_qkeVG4NxzMjhK28c.asa (hash: Qu/y5WIIF9VY4B8JNEet75dDX2mW7ndSyJhDDiWSFNA=)
3: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: WKAoFN4Pem7S/qkLQLMq8whRFBn5+H8im9OCRyBYmw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:7f:de:f6:a2:2a:af:4b:c0:25:fa:02:52:3c:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Oct 14 13:00:20 2026 GMT
Not After : Oct 15 13:00:20 2026 GMT
Subject: CN=829e50316a48ba4dea160dd9306601a2b585b818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bd:22:a1:55:61:cf:a8:1d:6f:02:16:73:97:
c1:8a:07:f5:9a:8f:e8:df:e0:d7:99:ea:dc:7b:03:
fe:a2:10:4f:b1:cd:49:cc:e7:62:8c:0a:2c:5b:57:
7f:03:65:e0:19:9d:62:1a:98:83:d7:f9:31:cd:dd:
97:12:75:c2:31:64:0c:5d:f7:dd:3a:b3:b0:d6:a3:
dc:ac:a0:75:1e:b8:a3:09:b2:b6:44:d7:75:63:2d:
31:03:7b:03:da:e3:7e:79:3e:a9:80:93:b8:12:c3:
c2:de:30:9e:71:e0:ad:1d:15:c3:9a:a1:fb:f4:92:
c3:12:a1:85:09:20:82:0d:98:6e:51:c4:cb:bb:24:
12:0d:85:86:09:15:38:8b:85:7f:89:75:fd:03:82:
88:e8:5b:23:9d:1b:52:ae:5e:ae:3b:84:69:c8:01:
22:54:06:5d:4a:f8:26:7a:a0:1e:63:0f:0a:57:bc:
7e:51:a7:ec:89:c6:1c:f0:21:ec:d6:21:d5:4e:ec:
f1:de:5e:63:17:cd:5c:b4:2b:0e:d6:69:3e:fc:44:
62:14:00:0f:c0:4f:ae:d3:5c:05:23:fc:3d:74:19:
f9:ac:43:c1:a6:b9:75:f3:0d:d9:de:78:ab:25:7f:
68:d8:64:43:77:36:96:e5:b5:fb:5f:73:9a:5b:26:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:50:31:6A:48:BA:4D:EA:16:0D:D9:30:66:01:A2:B5:85:B8:18
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ca:68:ea:e4:f6:b6:ff:00:7d:9f:f1:af:06:d5:33:18:b9:
d3:97:a5:68:7c:aa:4b:7f:58:04:e1:f6:87:67:f7:8b:05:36:
57:67:5d:bf:81:f4:49:82:d2:5f:50:07:d2:ec:57:f0:7d:91:
84:0c:eb:a7:08:0a:8c:be:39:f1:61:25:f2:5e:d7:27:78:99:
88:a3:e3:dd:e8:db:4b:2c:d1:12:32:22:ee:d3:44:e2:d9:8f:
f5:96:dc:4a:70:ac:d8:d8:85:ba:a0:92:9b:f1:a5:14:1a:4d:
7b:2f:b7:3d:65:fc:2f:02:4d:d5:55:2a:2e:24:c4:4d:51:d6:
2a:48:21:f9:55:d9:b5:6c:c1:a1:f3:fd:21:a5:a5:91:7b:06:
49:5d:45:73:1c:f1:a1:f7:09:fa:d5:56:5d:a6:6e:15:db:7d:
cb:22:50:3e:50:07:b0:f1:7e:3e:84:37:04:a0:32:b1:78:db:
a8:54:af:0d:0e:96:a6:6a:c0:88:5c:54:7c:c3:d3:ba:c6:b6:
98:02:fc:01:05:dc:61:04:d3:e4:20:28:e3:cd:ac:12:68:f2:
cc:da:b6:92:62:60:1d:4d:df:c1:ff:58:76:33:3e:fd:20:f0:
08:5f:d3:d4:f7:74:57:7e:0b:80:58:fc:53:6c:df:c1:07:b2:
56:4e:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:36:45 2026 by rpki-client