Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier: dMyn3kCH6yQq8lXzTql2dq8xe7Sie0CTkM2+uvLt1IU=
Subject key identifier: 19:49:E3:8B:0D:50:B2:E2:F8:0F:33:21:E4:65:BE:9C:BC:06:27:F7
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer: /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial: 01A0DD6096E7A6182F467084440E4E0B072C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number: 028A
Signing time: Sat 26 Sep 2026 11:01:29 +0000
Manifest this update: Sat 26 Sep 2026 11:01:29 +0000
Manifest next update: Sun 27 Sep 2026 11:01:29 +0000
Files and hashes: 1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: oLSZT/b9DYI56dhytHn9uMQyCPFD8Vhk1OgyWAQttOg=)
2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:96:e7:a6:18:2f:46:70:84:44:0e:4e:0b:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Validity
Not Before: Sep 26 11:01:29 2026 GMT
Not After : Sep 27 11:01:29 2026 GMT
Subject: CN=1949e38b0d50b2e2f80f3321e465be9cbc0627f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:f7:90:c8:8a:69:7b:41:1b:0c:8f:96:7b:
e2:59:4b:80:98:55:88:93:92:0b:11:78:99:40:da:
6f:21:5f:8c:ae:bc:6c:08:4b:1f:9b:59:b7:3f:60:
c3:95:d8:ee:b9:58:13:82:68:a8:ab:67:1a:db:34:
4b:28:e2:42:2a:77:08:b3:05:e9:31:55:bf:ed:96:
28:37:77:e6:ae:59:ee:f7:af:84:8c:87:12:2a:5b:
d7:30:e1:8d:a2:40:ab:76:58:8a:83:cd:d6:5a:56:
75:08:24:8a:48:e9:41:27:57:b7:cc:e5:86:0c:41:
dd:f4:f9:0a:d0:4d:9b:64:00:0b:b1:57:38:4d:8b:
e8:71:da:27:d8:aa:88:31:12:79:17:44:7c:df:3c:
d0:e7:99:e0:84:33:e5:e8:46:a1:6c:5f:0d:5e:fe:
a5:05:69:0a:5b:a6:42:75:76:45:3b:1a:8a:7d:b0:
0d:a6:59:d5:21:4b:5d:7f:de:be:f8:80:cf:4d:1c:
81:4a:df:57:de:fa:40:de:65:d9:e4:66:55:68:4a:
36:2d:58:22:dd:bf:fe:73:eb:c7:62:b6:c0:ac:77:
9f:80:c1:a2:3c:28:f6:be:33:2c:ff:1c:a9:14:c6:
24:73:f9:a5:c8:42:68:61:4e:54:63:9a:73:97:6e:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:E3:8B:0D:50:B2:E2:F8:0F:33:21:E4:65:BE:9C:BC:06:27:F7
X509v3 Authority Key Identifier:
keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:79:a6:46:9e:ed:c0:63:f9:be:fc:d7:a0:23:7d:69:fd:91:
2a:b2:21:25:77:47:43:1e:3a:b3:bc:01:5b:53:64:09:49:af:
34:c5:0b:19:b0:8c:e2:be:74:b0:7a:9c:f8:30:8a:64:b7:6e:
bd:62:73:b1:f1:e5:be:5d:9e:08:0c:d4:f3:0d:70:d9:20:4e:
a4:54:da:9f:6a:36:bf:e0:21:20:8d:32:7e:07:cd:bc:f4:fe:
5e:a0:97:4d:50:e4:fb:eb:e5:26:9b:b7:12:07:53:cd:d2:88:
10:e0:ed:4b:d8:bf:e2:a0:8e:05:d9:a2:10:2d:36:5c:8e:73:
36:a0:f8:2a:ff:d4:47:37:ba:16:15:99:07:00:59:3f:4a:83:
f3:29:fb:aa:ba:c6:10:70:44:a2:8e:f6:d5:06:6a:d5:4e:b9:
f8:f1:da:d2:46:59:62:95:aa:5e:89:f4:9e:dd:02:3b:52:0a:
58:2b:5c:cc:5d:39:c7:1c:58:51:5a:f9:de:d3:cd:b0:aa:f2:
75:2e:df:2e:5b:db:33:d4:52:8d:a9:34:ef:80:8c:22:6d:a0:
9a:5c:b1:57:c4:14:e1:7a:ed:1a:a3:11:cc:d2:4d:31:f0:47:
b8:fe:ce:cb:bf:e4:ec:09:cb:5b:32:fd:28:79:0f:09:7c:8a:
ce:de:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:21:58 2026 by rpki-client