Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: +rYdmFI/y54AHMfq+CxdwPmPSt7MIRRr4tnIVWMIQME=
Subject key identifier: 1D:A4:B2:6A:42:BC:AB:93:40:EF:62:BD:F2:82:F3:BE:3E:36:38:29
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01A0CAB549DE78C66036F5F3856D16FA386B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 20:01:13 +0000
Manifest this update: Tue 22 Sep 2026 20:01:13 +0000
Manifest next update: Wed 23 Sep 2026 20:01:13 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: v4JBYqQqkwm2imclM9+Sq1ivBwQMNH+JaMztaIlJbcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:49:de:78:c6:60:36:f5:f3:85:6d:16:fa:38:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Sep 22 20:01:13 2026 GMT
Not After : Sep 23 20:01:13 2026 GMT
Subject: CN=1da4b26a42bcab9340ef62bdf282f3be3e363829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:a4:72:f7:da:2b:3e:dd:a9:fc:b1:89:21:
6d:a4:0b:eb:92:b4:dd:a5:07:59:48:37:f2:0b:23:
26:6d:7d:17:32:2c:f6:ce:e6:31:2f:26:5f:8b:05:
1b:03:52:ee:8f:e2:d9:1f:0e:5f:75:b2:60:28:ff:
36:27:aa:e9:9f:53:f3:cc:81:b8:86:59:5c:0d:75:
7c:86:4e:cc:a4:84:8c:e5:9f:6e:ff:0b:8b:aa:ad:
4f:7c:b4:36:4f:30:86:ba:5e:e9:91:7d:6d:b3:f1:
3b:6d:5d:ee:f8:f4:90:56:81:e6:8a:89:b4:e1:af:
cf:c5:62:a9:13:0d:16:c9:5a:76:fb:aa:d3:18:75:
2b:3e:f5:3d:dc:cf:18:11:c1:0e:fd:ed:0b:79:50:
67:e2:8e:0a:a5:df:28:c9:07:5b:49:06:4b:b8:cc:
a0:8e:cd:ad:de:91:2b:fc:30:9b:61:0e:ad:de:ac:
4e:c8:9f:c2:fc:79:9b:84:be:b7:cd:58:ab:da:53:
a9:ef:14:cf:ce:1a:15:c1:5b:41:a5:11:cf:14:e7:
f7:e1:6e:63:6a:c0:0f:47:12:5f:1a:fe:5c:d8:85:
4a:fc:d2:54:1e:ae:fb:66:32:cd:79:24:2a:02:cb:
cf:a4:a2:be:ef:27:50:f1:09:a8:a3:c9:b0:a6:83:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A4:B2:6A:42:BC:AB:93:40:EF:62:BD:F2:82:F3:BE:3E:36:38:29
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:3a:ba:97:24:ea:8f:d2:b5:15:4d:36:37:d8:de:8f:b8:
1d:0b:70:04:6c:d5:c7:bb:32:56:85:d2:25:cc:3e:13:9e:e4:
39:cb:0b:4a:8a:02:3f:7a:83:bb:b5:d2:e8:09:b2:5b:62:20:
64:5e:f6:26:25:51:9f:8a:f4:1a:08:87:ac:9f:d2:33:5d:bf:
aa:d1:c8:3b:cf:94:87:91:e2:75:ec:51:92:11:72:7b:5d:01:
a8:b5:2a:29:3a:1e:75:cb:cd:a5:79:4f:a6:bf:cd:7a:98:e8:
b5:aa:f6:13:c7:c5:20:20:f9:29:0f:71:d7:f4:54:6f:08:bd:
b7:02:2d:26:c7:ac:b1:75:16:cd:64:f1:12:d1:66:a0:ff:3f:
7f:8c:29:45:4f:89:e3:ff:df:18:c1:79:03:67:c9:36:5c:af:
08:df:59:9e:a6:d3:1b:62:9f:83:53:99:8a:7c:9e:91:b2:1b:
20:1c:b7:c7:1c:ce:9b:8a:57:d4:00:2d:81:c2:98:e7:48:ff:
55:fb:9a:7e:0c:36:93:04:27:b6:9f:33:6a:39:3b:4b:98:06:
9a:bc:00:7d:64:fc:c0:b3:10:3f:6f:1d:76:5e:04:43:d2:a3:
41:17:92:a1:03:38:27:55:0b:ca:77:0a:ea:1a:f3:65:fd:a7:
6c:3c:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:06:37 2026 by rpki-client