Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.mft
File: lR-DmkE-2T6_ePBDLL4l9Pro6QU.mft (raw, json)
Hash identifier: YavStZDR2ElUEtzRq7vuPAMydxt7nOI8BFsjmeFQjAI=
Subject key identifier: 5F:CD:F5:B2:9E:90:82:E8:93:0D:02:78:6C:E5:A2:13:EA:09:2F:D4
Authority key identifier: 95:1F:83:9A:41:3E:D9:3E:BF:78:F0:43:2C:BE:25:F4:FA:E8:E9:05
Certificate issuer: /CN=951f839a413ed93ebf78f0432cbe25f4fae8e905
Certificate serial: 01A0D23712C1CB425A0D39D3E76600AFFBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR-DmkE-2T6_ePBDLL4l9Pro6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.mft
Manifest number: EA
Signing time: Thu 24 Sep 2026 07:00:19 +0000
Manifest this update: Thu 24 Sep 2026 07:00:19 +0000
Manifest next update: Fri 25 Sep 2026 07:00:19 +0000
Files and hashes: 1: lR-DmkE-2T6_ePBDLL4l9Pro6QU.crl (hash: Yd6BIy0KLsg7n0wZsvxsj1KpitMCOYFC8sTH4xJnbyY=)
2: x4qFKRANAaEzFw65uXjBX8Q0YzM.roa (hash: udTLiFbZWbqbbeAZDxB4yt4p0RUzVY8opqITNTWH/FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR-DmkE-2T6_ePBDLL4l9Pro6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:12:c1:cb:42:5a:0d:39:d3:e7:66:00:af:fb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951f839a413ed93ebf78f0432cbe25f4fae8e905
Validity
Not Before: Sep 24 07:00:19 2026 GMT
Not After : Sep 25 07:00:19 2026 GMT
Subject: CN=5fcdf5b29e9082e8930d02786ce5a213ea092fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:23:1d:c6:b4:23:34:07:bf:33:9c:cb:28:cb:
09:1e:63:48:1a:cc:55:a2:ca:f7:35:66:69:fa:96:
6c:8c:90:a8:bc:74:35:b1:e6:8a:b4:a2:66:74:fe:
af:8a:f6:10:33:92:16:5d:3a:c2:c8:5f:f3:86:2e:
c7:5d:f4:23:b8:a2:d5:34:51:49:5f:11:3f:ab:53:
57:5e:da:2d:90:5c:ff:2f:c3:d6:05:20:0b:9c:4a:
2a:29:5f:88:2e:3a:a2:9f:d5:a1:f4:f6:ba:51:3f:
17:d7:59:b0:94:ca:f5:c6:ac:c7:3f:a2:0b:d6:6b:
5e:b3:c7:cc:80:b2:c6:d6:9a:7d:64:85:85:3e:a4:
19:ce:e5:54:a2:ab:3b:3b:00:a2:65:be:a7:05:07:
a9:44:19:41:a7:22:39:7c:9a:6e:6f:02:4e:7c:71:
b5:90:23:30:e7:e3:df:52:c1:47:86:7e:bf:0e:09:
cc:3f:14:42:8d:a0:c5:9e:51:fd:47:ac:e1:d8:f8:
c7:47:f4:01:70:75:0a:89:e3:c5:0d:07:37:28:95:
58:c6:14:14:ac:f9:f7:dc:ff:14:14:d9:50:04:fb:
48:43:67:01:83:41:25:7a:88:58:69:17:e2:31:64:
da:8a:cf:6f:ed:15:8f:34:98:99:4b:74:df:cb:3b:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:F5:B2:9E:90:82:E8:93:0D:02:78:6C:E5:A2:13:EA:09:2F:D4
X509v3 Authority Key Identifier:
keyid:95:1F:83:9A:41:3E:D9:3E:BF:78:F0:43:2C:BE:25:F4:FA:E8:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR-DmkE-2T6_ePBDLL4l9Pro6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:5b:0f:f2:65:94:0e:46:c3:2e:cc:4f:27:69:26:c6:2c:
92:b5:5d:83:f9:95:6c:64:0c:ff:6f:4e:83:14:9e:a0:8b:2c:
25:37:ed:c3:1c:fb:6e:13:2c:40:f8:92:a0:1c:a6:20:02:73:
9f:5f:b7:87:97:d6:4a:ed:fb:bb:4a:e1:6d:9c:b8:57:fc:b2:
60:2b:9d:61:cb:0a:42:cc:68:80:95:e5:8e:29:2b:2f:87:d3:
7f:5c:e7:eb:48:55:15:9e:b3:a9:9d:69:19:fe:2a:97:b8:46:
ff:99:78:c9:bd:2e:4a:9b:b6:f3:5a:92:1b:48:3a:06:51:88:
eb:8b:91:1d:8c:4c:64:e5:7a:11:4d:ea:1d:6a:9d:fe:9d:75:
d5:40:e5:d2:e5:c0:be:7b:d7:dd:a2:41:7c:12:cc:cb:60:96:
98:6c:1c:17:d4:47:16:8e:de:22:63:36:3a:4c:39:9a:63:57:
ac:41:68:64:29:54:aa:76:61:92:c5:ea:79:c7:cc:90:ac:ca:
2b:20:06:e7:42:b7:cf:43:4c:ad:86:1b:9f:d6:72:18:ff:b2:
cb:ed:dd:dc:ec:72:19:7b:e1:bb:e0:fb:09:6f:fd:08:14:50:
02:99:9f:a3:a9:51:f2:62:ed:ec:ff:cd:a0:3c:20:77:0c:e6:
c8:e3:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:05 2026 by rpki-client