Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: 8h6EgaRe9QAlJRaTt/obh9kvikmHaACEkBCgJ1oICFY=
Subject key identifier: D2:C1:BC:7A:A8:5F:44:1E:5C:3B:CC:F0:03:72:0C:40:8C:5C:71:26
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01A0DACD06F5FDE6D7E4918382D4E726702D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1816
Signing time: Fri 25 Sep 2026 23:01:04 +0000
Manifest this update: Fri 25 Sep 2026 23:01:04 +0000
Manifest next update: Sat 26 Sep 2026 23:01:04 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: A+zRpRDNP5pVe1B5tHtUGXzpDh1VSoksTb0Cybb69PY=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:06:f5:fd:e6:d7:e4:91:83:82:d4:e7:26:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Sep 25 23:01:04 2026 GMT
Not After : Sep 26 23:01:04 2026 GMT
Subject: CN=d2c1bc7aa85f441e5c3bccf003720c408c5c7126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:2a:8f:17:9d:d6:a2:e0:88:c8:e7:54:06:
c0:65:d1:60:fd:01:63:ca:4b:07:d6:c7:80:93:8a:
b1:f5:a6:95:3e:8e:a0:56:58:5f:45:13:bd:fd:da:
1f:2c:65:03:8e:6f:93:a4:70:f1:da:1d:62:d3:21:
49:02:16:e4:e4:60:27:2d:ea:00:39:ae:81:05:9f:
76:80:1d:0a:92:c9:49:f6:f2:f6:86:0f:0f:e1:70:
b2:1f:28:87:6d:78:31:1b:b1:c2:14:c8:91:59:88:
d4:62:30:71:62:64:f2:d5:6b:3d:70:11:08:59:81:
95:16:50:92:ff:2e:68:50:48:d5:b4:b0:8b:c4:d6:
45:e2:54:af:39:b1:81:8b:2c:c8:a7:13:ef:f5:cd:
41:f7:84:c6:70:92:b6:6f:a6:66:9b:80:38:ed:3a:
6c:4e:99:08:80:36:1e:46:a4:94:98:42:ad:56:3d:
f9:7a:5e:59:a2:3d:8e:16:f0:15:d4:20:a2:18:02:
6f:e5:2b:69:0b:2a:65:3d:a5:1a:4b:db:e3:23:0c:
ab:77:a7:7e:ec:af:c9:11:2f:75:18:49:87:fd:48:
cd:58:60:e8:2a:49:75:95:41:e3:66:d7:b8:06:56:
8b:e9:00:15:6f:ab:b3:4a:f1:44:0c:54:cb:7b:9e:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:BC:7A:A8:5F:44:1E:5C:3B:CC:F0:03:72:0C:40:8C:5C:71:26
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:92:dd:f1:a3:c6:d4:90:d1:e5:29:bb:d0:1d:68:9c:0f:
39:dc:e1:0e:a1:ac:ec:7a:5f:ba:ad:32:a7:5c:f3:fb:63:f8:
f9:37:9d:d4:bc:13:1e:d7:63:5c:c1:65:22:cf:44:d5:84:1c:
ea:ff:0e:7e:37:d3:87:8e:85:61:41:39:1f:1d:a1:ce:ad:ec:
bb:56:f9:9f:04:c9:70:25:ca:4d:2b:95:cb:b4:44:10:06:17:
a8:7f:4b:92:21:f7:f9:96:37:ca:c8:5b:12:ce:d8:4d:1d:15:
a1:09:cb:32:4b:dd:03:14:d1:aa:71:e7:b2:2f:b9:2c:c8:f4:
8e:65:67:54:56:b3:87:23:ea:4c:1d:91:44:ea:73:01:8b:6c:
b5:c7:c1:f6:13:64:7f:3d:94:c0:12:f4:1b:b8:91:6b:5b:ca:
18:f3:a2:6c:d3:83:d3:9f:d4:0e:0b:ed:c2:33:6a:6a:8a:bc:
29:1f:3a:36:0c:75:2b:0d:76:7c:ec:69:7c:35:ab:23:21:39:
0c:c1:2e:79:3c:77:97:26:b9:e3:7a:db:06:2b:a8:1d:63:dc:
27:0b:bf:3f:92:6f:00:a9:bd:01:ec:59:29:1c:d3:d4:fd:c2:
29:1e:20:a2:a7:f2:c3:79:70:44:2e:cb:7a:b9:f3:88:66:2d:
f0:26:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:08 2026 by rpki-client