Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: ufpBKYXWVmEPi/H5TgC9HAxnTzMQBcAr5ogs/7zfgZM=
Subject key identifier: 4A:49:3B:C6:9C:4C:48:FC:1C:F0:F7:08:AA:FC:6F:23:A0:2C:B6:34
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 01A0D83BCCFB2F0C2827B23D6840C239D662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1A00
Signing time: Fri 25 Sep 2026 11:03:12 +0000
Manifest this update: Fri 25 Sep 2026 11:03:12 +0000
Manifest next update: Sat 26 Sep 2026 11:03:12 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: c89U+gil6BbEyZh2FbrBk2iKhpQq7EYMTdDj+7RjBmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:cc:fb:2f:0c:28:27:b2:3d:68:40:c2:39:d6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Sep 25 11:03:12 2026 GMT
Not After : Sep 26 11:03:12 2026 GMT
Subject: CN=4a493bc69c4c48fc1cf0f708aafc6f23a02cb634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:ac:6e:7a:b4:02:42:1b:5a:6e:2e:17:34:
21:5b:c6:52:53:1b:04:85:be:ba:ff:d2:a6:a4:61:
1f:b2:c4:f2:50:62:05:f2:a9:9c:02:b0:ee:ad:fd:
15:c3:bb:a4:12:82:b7:bc:1c:1f:a7:e7:eb:2b:61:
0f:e7:e1:4d:a0:28:b9:99:9f:06:e9:13:9d:dc:5b:
5b:32:e8:46:b3:b2:65:1d:a8:c5:be:76:d2:75:0e:
b8:77:a6:de:c0:ef:62:ff:34:c6:62:c2:92:aa:de:
f2:00:c3:74:c4:6e:45:d2:23:a7:79:6b:a0:79:e3:
fa:cf:76:20:f8:43:99:d3:9c:96:6c:53:d5:e2:c7:
aa:81:15:09:0a:eb:0b:11:4a:24:e0:cc:d3:4e:c9:
c6:12:51:3d:06:57:c7:3e:41:9b:fb:97:67:7a:68:
c2:63:13:09:b1:9a:28:93:8b:69:3e:79:7d:c1:ec:
fa:b0:55:6d:52:1a:63:4f:f3:62:75:39:f2:64:66:
29:f3:91:b2:fa:c2:aa:1e:e4:6c:55:1c:b8:d4:7b:
d4:8e:29:03:e6:5c:1a:20:f1:2c:38:a7:5c:9f:f3:
5f:2d:e2:38:69:5c:72:3d:c3:fc:4c:24:7a:10:e1:
dc:06:19:33:c4:ff:66:29:3b:0d:7b:8a:ed:b4:7c:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:3B:C6:9C:4C:48:FC:1C:F0:F7:08:AA:FC:6F:23:A0:2C:B6:34
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:82:51:2b:66:e4:5f:35:d5:5a:b1:c1:72:c0:65:53:01:c6:
56:58:45:fa:bd:49:38:2d:ec:fa:1c:78:d9:ea:58:2f:f0:3d:
fd:c8:cf:65:74:f7:60:90:4f:30:1c:5f:57:7e:46:00:1b:1e:
b2:47:ce:82:67:32:d9:56:ea:1b:a3:aa:37:69:54:5c:52:1d:
e5:63:20:51:41:b1:e8:a0:34:b0:95:9e:02:9e:99:15:1c:fc:
07:26:78:eb:43:1a:cb:33:0c:e1:64:1f:06:24:48:07:76:18:
75:c5:31:f5:b8:07:b2:ba:d4:5f:eb:3e:a5:a7:b0:44:f6:03:
cc:eb:0d:08:e1:e5:68:59:50:4a:b1:9e:c3:df:3c:c1:3a:65:
db:5a:9e:a6:01:c6:61:69:49:e0:27:d7:45:42:36:4a:93:02:
72:fc:0b:68:58:7d:db:b0:d4:a2:34:41:17:e9:e2:5f:c6:4c:
99:ec:96:ed:1b:2c:de:93:b2:e5:22:c1:85:a8:6f:ef:c8:4c:
78:fb:14:f7:73:bb:55:f9:e6:9a:a3:0b:33:f1:e2:34:4d:59:
b3:de:8a:31:8c:52:01:c0:65:15:87:65:49:8e:e4:e8:49:08:
19:84:e1:7b:b4:f9:0b:29:ad:40:18:16:17:64:f0:10:39:f1:
94:9e:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:53:45 2026 by rpki-client