Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: t8GkP5vZY5QtWv9q3IpzTvADBbhkSJaoN9BNx4JaOi4=
Subject key identifier: 15:A7:27:9E:C4:29:40:FB:D2:9C:B8:6B:70:EF:87:D8:BA:6D:59:83
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 01A0EA09A0FD15BCB402D514264FC3CD4088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 11BE
Signing time: Mon 28 Sep 2026 22:01:34 +0000
Manifest this update: Mon 28 Sep 2026 22:01:34 +0000
Manifest next update: Tue 29 Sep 2026 22:01:34 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: gOyjSDPWjYsBw7NWlRKcwCyD/e/M2fe/P6QpdSHYszU=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:a0:fd:15:bc:b4:02:d5:14:26:4f:c3:cd:40:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Sep 28 22:01:34 2026 GMT
Not After : Sep 29 22:01:34 2026 GMT
Subject: CN=15a7279ec42940fbd29cb86b70ef87d8ba6d5983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:93:be:fd:8a:ad:f9:6a:6d:88:da:e6:0e:
e3:cc:ec:9c:17:4a:e6:14:84:75:7f:5b:3c:b4:66:
40:d2:0c:f3:30:3e:5f:20:49:c1:14:aa:f3:f6:5f:
48:3b:49:81:f9:62:f7:c2:c4:7f:d0:22:7c:e7:52:
2e:03:df:a4:60:88:d8:22:47:58:7e:1b:9e:fd:d8:
e2:99:c1:2f:f8:aa:39:d1:f7:af:31:6c:d4:73:ed:
37:19:7e:a3:65:fd:63:8e:b8:8d:f5:17:10:19:21:
ae:ce:bb:44:65:70:38:6d:23:c5:44:c7:48:70:0e:
7d:b7:c5:2d:b0:7d:26:6f:02:30:9f:17:4d:9f:09:
4b:20:a1:f9:a8:58:d5:a0:3d:a0:e6:68:77:12:38:
72:62:93:0e:c3:4f:c8:af:e3:5b:65:86:25:66:23:
1d:67:52:38:c5:c2:dd:63:3b:bd:6b:b0:56:d4:7e:
02:da:39:be:06:c6:4f:ab:9c:ac:49:4f:62:fe:fc:
cd:09:fe:dd:81:8d:5c:3e:06:00:59:18:a9:da:5a:
0c:f6:a0:13:e8:11:a5:a0:08:ca:b8:62:fe:74:d5:
68:e9:0b:6c:ee:75:a2:a9:de:45:a0:7e:09:5a:a7:
23:a9:15:8d:28:88:6c:25:0d:e3:ef:99:97:95:22:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:27:9E:C4:29:40:FB:D2:9C:B8:6B:70:EF:87:D8:BA:6D:59:83
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:38:86:64:d1:5a:be:b0:79:9c:f9:fa:11:e6:a9:c5:42:
bd:6b:52:3c:e3:e3:3b:dc:99:0e:76:ac:59:ad:91:1f:7c:7d:
db:3a:c2:65:b6:2c:83:f1:2e:93:a7:1b:fd:6f:eb:5e:8f:36:
c7:3f:b0:ec:1a:b0:d4:b9:dc:47:12:91:dd:76:7c:7b:36:ce:
4a:3a:0f:7a:a2:71:a5:79:72:65:0c:2e:37:13:96:eb:d2:31:
4b:50:60:91:fd:00:54:ac:03:86:cd:9c:a9:4a:cb:55:19:70:
93:d0:bb:db:24:9a:4e:20:9a:70:83:b9:6b:b8:3e:9a:49:79:
e2:00:99:cd:d1:f7:43:97:4e:e9:0c:8a:9e:7d:ea:7b:59:a8:
f4:4e:c4:9a:6b:11:6f:c7:25:b9:50:01:f8:2d:e9:66:e8:48:
2f:68:b6:f1:67:10:8d:9a:93:79:c2:0a:9d:b8:fc:a6:c3:a6:
7f:f7:ca:31:dd:7b:3b:f1:e0:e6:b9:6e:3c:66:0b:d1:f2:35:
08:41:39:2c:9a:3a:30:25:51:01:50:9a:b2:83:5c:47:f6:dc:
92:01:bf:10:a6:b1:6e:ce:b7:e5:ff:5c:fa:01:7b:c5:9b:80:
b2:34:0e:e1:2a:d0:ae:5e:5a:7c:25:b2:e6:2e:0b:f3:8a:74:
37:f2:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:45:21 2026 by rpki-client