Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
File: lKszmh2jvU9yxzAm71jQthrSdwU.mft (raw, json)
Hash identifier: KT6tZ6kqG+zbPw+LHOHn5UnWannpbMYR8apDU9+K4p0=
Subject key identifier: 08:BD:3B:CE:7D:9C:DB:79:68:30:A3:67:BE:C9:10:43:5A:94:DA:94
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 01A13A4A5BCC869A243295D9FC43A22755AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
Manifest number: 011C
Signing time: Wed 14 Oct 2026 12:01:54 +0000
Manifest this update: Wed 14 Oct 2026 12:01:54 +0000
Manifest next update: Thu 15 Oct 2026 12:01:54 +0000
Files and hashes: 1: lKszmh2jvU9yxzAm71jQthrSdwU.crl (hash: ZuW6eQnyT/2NPRxpO7y/sA+J6BoTQ/InjB4ZLKagiWA=)
2: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (hash: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:4a:5b:cc:86:9a:24:32:95:d9:fc:43:a2:27:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Oct 14 12:01:54 2026 GMT
Not After : Oct 15 12:01:54 2026 GMT
Subject: CN=08bd3bce7d9cdb796830a367bec910435a94da94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:e9:50:ce:80:22:80:df:96:b4:23:e2:9e:
90:06:ee:cd:10:c2:46:6e:58:46:32:d9:47:b6:14:
a2:c2:56:50:2e:cd:09:55:00:e9:bb:e0:4c:2e:a5:
ad:52:00:f2:90:30:36:47:d2:a3:ba:72:8e:a8:08:
d8:50:76:2c:03:f0:ec:ea:9e:fe:5c:32:d0:94:78:
f2:d6:7e:85:d0:12:21:d4:d6:e6:8f:f9:09:bf:67:
f1:e4:fc:5c:6b:5e:96:76:86:49:bd:7b:5e:61:bf:
f3:83:f9:2d:8d:58:13:29:a4:47:72:9c:6b:a4:04:
93:1f:c2:8d:f5:df:1d:36:62:76:9e:64:8d:89:e0:
21:82:ff:4a:da:14:33:8e:22:ee:20:d8:e6:0e:4a:
42:59:4b:6f:97:04:7c:dc:b4:cc:52:0f:f0:4d:04:
8c:66:4d:4a:35:57:bb:1c:70:ff:f6:92:63:82:52:
4a:1c:a0:11:9c:fd:ab:92:96:96:90:96:a1:de:67:
9c:41:52:87:40:3a:a9:a5:0b:05:a1:f2:74:24:4e:
b9:37:36:ed:83:bd:05:b5:7f:c3:fd:c4:ba:04:6a:
65:e9:88:b1:01:60:c9:09:1a:11:e9:dc:dc:40:ef:
3b:ef:7e:1f:95:f4:df:9e:36:c8:9e:8f:de:ff:01:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:3B:CE:7D:9C:DB:79:68:30:A3:67:BE:C9:10:43:5A:94:DA:94
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:50:5c:0b:b8:c2:7a:f6:e5:e9:b5:95:1e:e5:51:5c:9e:31:
f6:1c:27:19:c2:e0:73:8b:d5:60:20:1b:3e:9e:87:66:25:0a:
96:eb:45:75:fb:79:37:18:f1:f8:6b:02:90:2c:47:23:94:3b:
ef:77:3b:bd:51:a8:06:59:ea:ea:a3:7f:31:5e:a3:dd:0c:80:
77:7f:64:4e:d2:a9:55:63:f6:a9:11:b7:f9:1b:81:54:34:52:
07:65:5a:ac:6f:d3:3e:17:38:f0:88:f9:fe:c6:21:e2:fa:33:
c0:44:29:ef:0e:c5:b7:e0:f7:9c:5d:9b:1d:0e:2c:af:64:c9:
2b:09:91:fb:1c:76:ab:18:d9:26:b9:91:ea:97:aa:54:0a:ba:
03:0a:ff:22:bf:fb:ec:86:b2:3f:25:30:19:92:bf:cb:af:33:
03:99:da:39:98:8c:41:80:75:31:61:70:95:95:ca:8d:7d:19:
52:11:dd:af:9b:eb:b6:8d:b9:82:e6:2b:b3:8f:62:03:02:11:
dc:e9:cb:ab:bb:ed:df:97:a6:33:27:0a:6a:fd:eb:1b:e7:27:
59:58:06:94:9c:7b:22:8e:14:36:9a:a2:76:84:74:2e:2d:82:
1b:a6:91:ba:1e:c8:78:fe:d8:fe:0b:53:27:1d:03:80:4f:98:
c3:2e:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:42:45 2026 by rpki-client