Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: fdKanxmSWDmc6jmHSnDRHP8edenm4lIlykSXONWE1MU=
Subject key identifier: 76:35:24:0C:DB:AF:61:A9:E8:BF:34:FE:FA:23:01:39:8D:C2:FE:C7
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01A1D9B7CC6E732D3DF76988B9D38DAE4ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 189A
Signing time: Sat 14 Nov 2026 11:01:03 +0000
Manifest this update: Sat 14 Nov 2026 11:01:03 +0000
Manifest next update: Sun 15 Nov 2026 11:01:03 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: JWalK2P+PjCtlWMgPCZ4QJlY/8To/LjowOS1AbfAqTA=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b7:cc:6e:73:2d:3d:f7:69:88:b9:d3:8d:ae:4a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Nov 14 11:01:03 2026 GMT
Not After : Nov 15 11:01:03 2026 GMT
Subject: CN=7635240cdbaf61a9e8bf34fefa2301398dc2fec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:5e:74:c9:49:c9:c1:5a:55:e8:bc:8b:61:
10:47:0b:9d:b4:9f:3d:23:71:41:3b:8c:92:6d:fc:
e5:9d:19:2b:ae:74:ec:75:21:83:72:c5:70:d3:66:
87:f0:db:55:1e:bc:5e:34:13:a3:f5:1d:a3:84:fa:
34:f8:72:a3:1c:3b:09:b5:02:64:d7:1b:47:cc:f3:
e1:f3:cf:61:a6:42:3b:71:1d:7e:5e:6b:b3:95:be:
25:b1:17:70:ef:2a:13:6d:c6:fc:2d:b6:07:10:ab:
1a:cb:14:84:aa:5d:61:da:05:f1:d1:8a:5a:c5:88:
72:f1:33:93:54:41:7e:e6:62:21:83:55:15:ff:e4:
28:be:22:f1:4f:10:ef:c1:65:de:66:41:19:5d:b3:
c7:b2:3b:02:27:1a:68:c5:41:f9:af:78:ed:27:f2:
b7:e0:8d:ed:7d:2f:53:71:15:d1:b9:fa:0e:f1:f7:
0e:af:86:15:9d:6b:7c:fb:42:20:bc:79:af:dd:ec:
01:de:32:5c:28:82:f2:70:a8:35:1f:5e:2f:a6:16:
5f:05:33:fe:44:b7:3e:36:8b:f5:70:a3:1d:8a:0c:
d1:1b:84:58:49:5a:94:34:2d:af:39:db:2a:aa:07:
73:ab:c4:cd:08:82:dc:37:5c:54:4a:b8:fe:8f:74:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:35:24:0C:DB:AF:61:A9:E8:BF:34:FE:FA:23:01:39:8D:C2:FE:C7
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b6:e6:25:86:d8:35:5e:7d:c6:bd:c3:00:91:72:8e:15:ac:
a3:98:35:f3:46:5c:25:a9:36:95:69:a5:f8:45:ea:a8:9e:0b:
d1:d6:6a:7f:8a:05:0b:79:15:3a:d1:60:d8:7f:25:fe:25:19:
ef:3b:3b:18:a8:9e:f4:b8:b3:d1:4c:4c:1e:71:8d:f7:1c:c2:
bf:a0:ac:48:e6:09:a1:2d:7a:44:d8:f9:d9:8d:d3:52:92:04:
3c:05:06:29:be:3d:de:6b:1e:05:30:2b:26:c6:a6:0b:86:20:
72:7d:d8:b2:db:20:28:aa:17:80:4f:7c:bd:ae:94:5a:2d:3c:
86:7e:23:3a:38:a9:ae:75:a7:2c:28:6e:0f:f6:cc:9f:a3:13:
ec:db:89:13:db:7d:b7:50:54:dd:25:ed:64:f0:44:3f:bb:2d:
7c:06:4f:bb:4a:3a:c0:51:6e:2b:73:5a:52:9b:cf:b2:cf:2b:
19:67:d6:67:f3:8a:ea:e8:48:46:fd:72:e3:a7:18:e4:9d:ec:
c2:75:43:ec:06:ee:ba:45:19:51:98:49:1c:db:80:18:48:df:
08:d8:41:39:fd:c7:a4:4b:2c:71:85:14:96:1b:b9:97:3e:e9:
59:91:12:c6:17:66:a0:4a:05:41:b6:76:76:3b:13:67:a1:06:
1f:e9:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:47:18 2026 by rpki-client