Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: egnwGoSpGudkN+fd0uLbaEqX6R+tsbVxMjEYoZvJcdg=
Subject key identifier: 44:84:4B:9B:A2:78:75:D2:16:3B:83:A5:F3:81:BA:26:72:77:C3:BE
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 01A0EBF97EF767CF3C6DA215F3BC32DBE032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 14A1
Signing time: Tue 29 Sep 2026 07:03:11 +0000
Manifest this update: Tue 29 Sep 2026 07:03:11 +0000
Manifest next update: Wed 30 Sep 2026 07:03:11 +0000
Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: oifxnQV3Yhj3Cp+R0IgnHwyPpWtVC8OFOfyduh8AxFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:7e:f7:67:cf:3c:6d:a2:15:f3:bc:32:db:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Sep 29 07:03:11 2026 GMT
Not After : Sep 30 07:03:11 2026 GMT
Subject: CN=44844b9ba27875d2163b83a5f381ba267277c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:d3:e7:48:55:94:0d:7d:ca:bc:0c:84:a0:
df:d2:81:27:8a:ed:c1:0d:e4:f1:2c:99:34:38:a6:
89:10:86:6f:e1:e1:e7:88:b4:71:4e:69:fd:a3:2a:
18:b7:db:6a:9e:a9:f9:d7:d0:02:16:4a:e7:89:43:
04:04:e3:8e:59:98:73:90:ec:4d:19:e9:a3:7c:b1:
db:ef:94:a9:99:cf:5b:da:3b:6b:e5:ef:1a:a6:21:
92:40:9e:4c:7a:d6:80:d2:bf:a0:35:9e:2f:87:78:
a1:e6:6e:41:fe:4f:d2:8b:12:2e:db:96:af:58:f4:
a1:3b:b5:1d:9b:d4:ee:a9:31:41:57:e0:8d:fd:1e:
13:c5:a8:0a:6f:e4:a2:7d:98:92:a6:83:12:1b:27:
d6:8a:b1:fa:4d:00:10:3b:3d:fc:ab:3b:4b:ad:34:
34:ec:34:07:2c:e8:15:bf:c9:b7:ec:67:02:71:77:
e8:b8:53:08:cf:7d:39:15:fa:7c:86:8b:42:1a:4c:
42:c2:b0:ee:db:09:43:62:12:38:d5:f1:71:9c:36:
b8:e4:e8:9c:48:3d:37:d8:6f:78:ff:98:c6:5c:ec:
e9:a0:0a:16:00:19:ee:71:2d:fe:3f:b9:10:79:9e:
2d:9e:57:cb:a9:58:29:71:17:7b:9f:00:9d:d0:d0:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:4B:9B:A2:78:75:D2:16:3B:83:A5:F3:81:BA:26:72:77:C3:BE
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:72:08:83:10:0d:f2:e1:90:52:41:f7:41:1d:cc:ca:69:72:
9a:98:f6:35:be:6a:ef:94:58:33:f2:df:ac:3f:f8:bc:b8:9a:
9a:c0:50:24:6d:f1:d0:81:99:16:56:b6:0b:da:8b:a9:0a:3f:
84:60:0b:82:44:03:08:56:8f:2d:4d:d6:0b:4f:61:73:14:a4:
41:89:db:cd:2d:77:38:4e:9a:05:2c:97:f1:3d:53:90:92:9e:
30:27:da:d5:72:dd:c6:b8:11:8d:68:bb:70:b0:fc:7a:f5:d9:
d6:79:8d:42:d7:c9:17:32:c2:f5:be:82:77:43:45:81:c9:d5:
d8:77:b2:5b:29:c0:f7:e4:7d:36:30:9f:d5:ef:7e:52:b3:79:
f7:e9:56:48:c0:76:4a:7e:78:17:c0:7c:fe:10:53:aa:90:a4:
4b:c8:1a:79:3a:46:5f:61:70:3a:7d:09:04:7b:32:6c:24:e9:
95:b2:3d:a4:91:17:cd:f0:09:78:a6:5b:75:6c:0e:20:28:a6:
4c:2e:6c:51:d2:57:6b:8c:89:76:ab:c7:95:4d:42:45:1f:7a:
7a:a0:68:02:32:d2:95:54:9a:7f:3f:7f:98:33:76:d6:64:00:
d6:dd:b7:1b:fe:b6:99:0b:c3:11:dc:4b:34:1c:64:0f:f6:aa:
d6:ec:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:15:07 2026 by rpki-client