Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: K1W5hnfDTRs/ZY3s8o0Dthw9iJOX5RmAOBwJlUfZ5GM=
Subject key identifier: 02:B1:CE:33:DE:FF:17:7D:B1:64:39:1E:59:EE:91:F5:13:83:30:97
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 01A0D9170AD95D4D8F1AA96851FF8EB380EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 15:02:40 +0000
Manifest this update: Fri 25 Sep 2026 15:02:40 +0000
Manifest next update: Sat 26 Sep 2026 15:02:40 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: 3ETD+sr7Uir0WvZJWtwh6LwOkmoUjHk5Wijg7ETpHiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:0a:d9:5d:4d:8f:1a:a9:68:51:ff:8e:b3:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Sep 25 15:02:40 2026 GMT
Not After : Sep 26 15:02:40 2026 GMT
Subject: CN=02b1ce33deff177db164391e59ee91f513833097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:33:e6:e3:15:58:f9:9b:f5:36:8d:50:8f:
c5:e4:73:52:24:bb:e6:6c:d2:e3:31:8e:ff:dd:8f:
1f:4e:dd:d1:5c:f3:4a:36:40:52:2c:12:7d:94:c2:
fa:84:ce:a2:89:78:37:50:98:aa:df:75:90:cc:6a:
31:ca:59:3a:99:d9:50:71:c2:57:83:0e:19:d8:2a:
f5:65:89:34:58:43:8d:62:51:a8:b4:63:7c:bd:2c:
03:2b:8e:a0:ba:55:88:ee:25:d4:a1:ed:62:3d:05:
72:70:73:fa:ce:18:bf:0c:75:94:ea:50:17:04:ea:
64:2c:37:8f:42:a0:09:07:de:38:f0:d9:bf:57:f0:
e7:b3:45:e5:d7:8c:fc:d2:47:54:06:2a:f6:86:16:
ca:8c:c4:1a:d9:0d:4b:47:0c:db:0e:ef:e6:b9:c2:
0f:ba:dc:2c:a9:4a:5f:f0:af:c8:14:1d:93:6a:30:
5d:eb:8a:38:7e:fd:4d:c2:5e:f3:9b:9b:a7:c6:38:
d2:a5:1c:c2:6e:60:75:86:01:5a:ff:0a:4a:ee:31:
5d:06:57:f3:79:0a:17:2c:45:97:26:9a:5a:97:8c:
31:c8:be:92:ed:31:00:ad:2e:f2:5b:f4:f1:54:0f:
c7:9b:c0:6b:65:66:9f:6e:c3:3c:31:05:db:8b:c7:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:CE:33:DE:FF:17:7D:B1:64:39:1E:59:EE:91:F5:13:83:30:97
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:43:45:13:99:40:72:f8:86:99:db:84:eb:64:af:01:cc:
09:1f:bf:a3:ca:92:86:41:93:aa:bb:d2:92:97:0f:0a:44:56:
af:95:36:6d:5f:d4:76:9d:8c:81:d1:9b:b7:d2:98:e9:6d:04:
3d:47:e1:c8:ff:08:87:d3:8e:39:e7:1c:8c:15:49:46:34:1c:
06:b1:bc:3d:68:66:23:1f:f2:a6:84:71:33:5b:c9:63:53:ac:
68:d4:56:d8:88:27:95:0a:ae:30:b7:9d:94:b7:35:9b:a3:aa:
46:f3:b8:1d:ab:ce:64:4d:a3:79:03:89:5c:50:b4:33:8a:30:
de:7f:bb:ae:31:51:0a:90:37:97:5e:36:ff:66:e2:0b:5b:5f:
0c:a9:d2:bf:fc:be:b4:d7:41:fc:ff:0c:7b:ae:26:c0:f6:f4:
5b:bd:d3:f6:42:cd:43:69:76:7d:14:34:4d:e0:fd:57:79:74:
d6:8b:5f:e1:16:6f:49:41:d7:5f:4f:82:f2:42:f4:0c:1a:12:
c8:25:07:09:c8:16:66:d5:c2:6b:fb:c7:36:c5:84:eb:ca:64:
9d:65:64:d0:4a:47:b1:c7:fe:40:25:ed:14:df:43:5c:f5:6d:
58:9c:4a:78:9b:b5:43:0e:03:93:92:4a:db:df:30:94:a6:ed:
e3:51:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:46:45 2026 by rpki-client