Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
File: lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft (raw, json)
Hash identifier: KBaD2m6DrPYkCprKEGQG/iA7GB0YKkTsiyJBPgTs6+o=
Subject key identifier: A4:0A:B1:39:F3:BF:49:5F:93:9E:3A:AD:E1:3E:69:40:57:8E:A5:1A
Authority key identifier: 95:32:B4:CF:27:DC:F9:90:3B:46:49:DE:88:C7:97:95:0F:61:A5:BA
Certificate issuer: /CN=9532b4cf27dcf9903b4649de88c797950f61a5ba
Certificate serial: 01A0DBE004DCE5C05AAD81087A143866CC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
Manifest number: 46
Signing time: Sat 26 Sep 2026 04:01:26 +0000
Manifest this update: Sat 26 Sep 2026 04:01:26 +0000
Manifest next update: Sun 27 Sep 2026 04:01:26 +0000
Files and hashes: 1: 6fHpinoH-uoZ3MwtNrsGqXYFS0o.roa (hash: U5hGkOCpGyQ+BL1SZ21wNhsYkEGHFrmEmNNa81QceaQ=)
2: lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl (hash: JW+S4FweciIkJrz5E+0Ss8+tmp2UtI4mFD/5YTesefY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:04:dc:e5:c0:5a:ad:81:08:7a:14:38:66:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4cf27dcf9903b4649de88c797950f61a5ba
Validity
Not Before: Sep 26 04:01:26 2026 GMT
Not After : Sep 27 04:01:26 2026 GMT
Subject: CN=a40ab139f3bf495f939e3aade13e6940578ea51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:8d:e6:f3:4f:dc:89:40:a9:78:e9:bb:da:
2b:e8:25:0a:7d:7a:ab:6a:dc:cf:8a:e6:4c:e2:8a:
e1:a4:7b:29:cc:bb:3b:de:51:94:7d:ae:78:dd:73:
ac:b3:96:aa:77:e3:66:c3:7b:0e:98:d6:be:1e:0e:
40:f4:1e:1c:62:dd:29:ca:81:a4:b3:e3:96:13:29:
84:ed:fc:ea:a8:76:81:de:d9:d1:77:51:62:d4:65:
e2:38:3d:c0:11:27:51:61:ff:81:9d:09:15:ec:17:
80:a8:49:9d:2b:01:33:c7:fa:8d:25:ac:68:51:23:
5a:93:07:f2:8a:94:c0:53:c7:60:87:44:66:55:ab:
46:e1:b3:df:d4:90:0a:26:de:1c:34:01:c2:1d:7c:
9d:a2:c4:62:fb:31:97:cc:69:01:d4:a0:e6:9e:d8:
f2:f6:65:55:00:e5:90:72:56:a5:b6:11:df:48:ad:
0a:52:3c:ef:b8:b9:4f:42:19:b7:ff:ce:ca:6a:ae:
bc:9b:cf:26:0c:11:e5:b5:4e:b3:ab:a4:06:44:5e:
b1:4e:24:8f:94:13:1b:2b:eb:b4:18:87:a0:6b:85:
95:de:4b:86:51:4c:24:93:f5:33:b7:97:a8:79:62:
56:31:45:c1:29:21:3c:cf:b7:1c:f3:4a:00:01:02:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:B1:39:F3:BF:49:5F:93:9E:3A:AD:E1:3E:69:40:57:8E:A5:1A
X509v3 Authority Key Identifier:
keyid:95:32:B4:CF:27:DC:F9:90:3B:46:49:DE:88:C7:97:95:0F:61:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:38:cf:2c:27:53:d7:c9:b1:85:db:a2:a8:16:b4:6a:bc:50:
6b:43:ec:2b:60:b0:f4:a5:9d:53:3f:0a:41:f6:18:73:31:a4:
62:d0:d0:e5:1a:27:70:2a:08:95:3d:c4:76:69:02:08:8a:80:
64:c0:5a:57:fc:d8:fb:ed:ed:75:49:e4:28:1c:a2:3b:f9:bd:
f0:89:a8:36:98:b2:d2:8e:75:c1:7c:f5:66:9f:d7:c3:f8:e1:
02:d4:d7:82:4b:7e:bb:f4:c1:cc:60:cb:28:21:83:cb:9b:fc:
bd:0f:b1:92:b5:5c:53:6e:fc:a2:45:a2:5c:d7:0a:d7:d9:b9:
5b:61:6c:5a:41:c9:17:09:d4:45:64:98:28:41:ac:17:03:6c:
50:30:e4:68:ab:2a:18:fa:e1:41:b0:9a:fd:86:bb:cc:ce:ab:
00:2b:3f:12:1f:19:f5:fc:c4:22:b4:99:d2:b6:e1:30:2a:29:
f6:cc:4b:af:c6:f6:69:38:41:b9:a9:e6:f5:a8:d1:1e:b0:99:
58:af:a0:a1:f6:e5:43:0d:a7:9a:c7:34:7b:e9:d5:62:f5:80:
74:3b:30:14:40:f2:12:12:83:51:46:46:34:c3:4b:e0:0f:90:
17:cc:9a:e4:69:2b:5e:9f:37:b8:9f:43:63:76:b2:39:e9:5a:
b4:de:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:24:30 2026 by rpki-client