Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
File: 1LkIqddLShCqH0wOiu1qhKO3kAU.mft (raw, json)
Hash identifier: gy3hKp6d2o/GHCnUWIXbAGd2d1zua37kx8MwvJU/wUU=
Subject key identifier: A8:3E:91:3D:D6:D8:1F:3A:06:40:FA:46:E3:B1:18:73:05:6A:F1:33
Authority key identifier: D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
Certificate issuer: /CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Certificate serial: 01A0EBC097C3A9949F4743F519649BF32568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
Manifest number: 020C
Signing time: Tue 29 Sep 2026 06:01:02 +0000
Manifest this update: Tue 29 Sep 2026 06:01:02 +0000
Manifest next update: Wed 30 Sep 2026 06:01:02 +0000
Files and hashes: 1: 1LkIqddLShCqH0wOiu1qhKO3kAU.crl (hash: cMGZjotUBieHhbKElbVTOc0hP9C2q471Q6jSkZTEs/Y=)
2: FEgeYcFLPGsn_DF04vy60HLH3eU.roa (hash: mvXQQ+TxCYuDnGKabkqj9L+d+yyQb/h/Oz4Zigg1PAE=)
3: oMAU4cDFxFwhA1NEpG0dXZO6zCQ.asa (hash: WY020cbiNFXtPn2WDWywnrSUq7C1vkRuGv5i2lQyac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:97:c3:a9:94:9f:47:43:f5:19:64:9b:f3:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Validity
Not Before: Sep 29 06:01:02 2026 GMT
Not After : Sep 30 06:01:02 2026 GMT
Subject: CN=a83e913dd6d81f3a0640fa46e3b11873056af133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:84:8c:6f:b0:d6:ee:a6:a7:1e:90:b2:a9:
0d:a7:ec:1f:bc:e3:a3:81:9f:90:1c:06:0c:9b:d1:
01:ba:21:cc:ee:6a:52:0e:51:c0:3e:e8:89:54:94:
01:bb:d1:54:67:e7:03:0b:69:a8:19:b7:b6:48:95:
d1:ed:3f:b6:c7:2d:cb:6d:14:9c:de:70:cf:b8:c8:
3e:1b:91:21:3c:f7:1e:6d:0e:3b:80:65:6a:ee:51:
a4:d1:9a:e5:dc:9b:99:15:bd:79:20:f6:49:12:39:
1b:8f:0f:f2:a0:30:ca:c9:5e:bf:61:dc:2c:a2:1f:
0c:9f:09:a0:40:c3:a1:7d:22:e8:5c:f9:e7:26:1c:
7c:cd:6c:6d:6e:25:0c:a5:07:6b:5d:93:06:9c:4a:
d7:ba:d7:f0:ab:77:20:de:36:cc:61:38:c6:6a:60:
a3:5e:83:39:97:46:d0:a6:5a:7f:25:7b:a6:1a:09:
54:15:94:2b:86:53:08:eb:43:11:a7:12:fe:df:cc:
3c:5b:50:24:e1:3e:c5:bd:ef:0c:e6:b4:39:f5:ac:
2e:a0:3b:2e:18:83:82:9e:60:80:06:ac:dd:79:86:
c5:0b:21:7b:b7:e7:41:82:96:95:11:c3:31:14:3c:
8e:bc:2d:48:31:13:f7:fd:d8:62:c2:5e:dd:9d:7a:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3E:91:3D:D6:D8:1F:3A:06:40:FA:46:E3:B1:18:73:05:6A:F1:33
X509v3 Authority Key Identifier:
keyid:D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:58:c8:c8:0b:c8:0a:6d:4b:90:3c:a0:b8:ae:9c:a1:3a:
a9:d7:ed:56:17:c9:79:19:57:38:1e:ae:e2:fd:df:43:96:ad:
49:73:51:4e:96:67:50:cd:66:72:f5:b5:ab:60:a5:c0:51:fe:
01:fa:6e:6d:ac:18:14:e6:64:3c:48:71:55:f3:16:26:04:fe:
d3:de:31:07:cc:27:da:b4:05:24:64:16:93:5e:f4:1f:0f:df:
c2:8b:5e:b7:f0:bd:a0:2b:78:cb:9d:bf:5b:55:9a:0d:a3:4c:
10:e8:6b:50:5e:98:fa:93:b0:67:91:5f:68:74:80:54:bb:0f:
e1:2d:3c:1a:96:e3:f0:e9:c2:6b:74:c3:df:b7:0f:d3:de:8e:
f5:ab:20:5a:da:e7:51:d5:0b:63:ac:c2:03:63:0e:d2:3a:88:
34:98:20:70:4b:7a:c9:e1:ec:ff:77:8c:2e:8e:2b:cc:9f:53:
0b:2f:4f:e4:aa:af:3f:f5:09:54:12:2a:88:11:99:e6:dc:12:
38:80:12:cb:b5:1a:8d:20:9c:4a:87:3a:7a:ec:8b:aa:e6:8b:
aa:67:63:b0:14:ed:a7:b2:2d:97:36:14:c4:e8:38:f5:7c:ee:
f0:fb:01:96:20:42:cb:e7:cb:65:bb:15:53:1c:4d:6d:ac:a7:
b5:88:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:48:25 2026 by rpki-client