Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: HUsCKW7sRrSEhMCPDAEJC8pBzmi7/Hjf5KGcxyvk/7Q=
Subject key identifier: AC:14:03:DE:FF:BF:2D:C5:C5:C0:DC:BA:56:62:0B:1D:FF:1D:3F:DF
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 01A0CA4730A27389281C4C1F4FD3293E4DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1A6F
Signing time: Tue 22 Sep 2026 18:00:58 +0000
Manifest this update: Tue 22 Sep 2026 18:00:58 +0000
Manifest next update: Wed 23 Sep 2026 18:00:58 +0000
Files and hashes: 1: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (hash: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0=)
2: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: JeXoUfWgmYvQo5fARvDX8Dx/CJMl96dwUEg3aTfaPfM=)
3: ytydS8iceftOnYaB5-5LVqpPFZo.asa (hash: DW5PX1MGoo1+t2QgyExciwvbXJdSvCnWIToame1qzqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:30:a2:73:89:28:1c:4c:1f:4f:d3:29:3e:4d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Sep 22 18:00:58 2026 GMT
Not After : Sep 23 18:00:58 2026 GMT
Subject: CN=ac1403deffbf2dc5c5c0dcba56620b1dff1d3fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:90:6d:ff:8e:5a:a0:cc:de:06:c8:96:26:
41:85:4a:8d:d0:65:35:c3:65:dd:32:3e:3e:d6:60:
fe:fb:b9:47:8f:cc:18:de:5b:da:b1:ba:0c:45:36:
d0:b0:63:21:2f:a6:4f:6c:4d:01:2b:44:4b:00:7d:
86:df:4b:76:7b:a1:a9:66:98:e0:9b:4f:52:ab:8b:
28:de:99:d6:1f:4a:0c:2b:cd:a9:ec:d0:d9:52:2d:
1f:6c:d3:52:0e:36:69:1e:2c:5d:ff:22:91:fa:27:
ba:ff:c8:00:3a:b2:70:2e:39:f0:42:65:aa:da:59:
59:55:44:2e:a6:a9:51:59:3d:c6:0c:ce:76:4e:85:
28:54:3e:38:7a:19:ca:8b:32:f6:eb:b1:e1:e1:11:
ba:20:2b:0e:8c:2b:b3:c0:5c:00:67:58:80:b6:01:
18:48:20:bc:51:33:11:ef:66:6e:91:b4:c4:55:84:
f0:d2:87:e2:58:66:74:6a:d3:c6:27:3a:01:7e:73:
ad:08:10:2c:d1:1c:eb:8f:e5:b9:e9:6c:57:b5:ac:
3e:3c:65:63:7e:4e:8b:2a:22:1d:ba:35:07:9e:22:
3b:d5:c3:c2:06:f0:9e:97:0a:a5:c9:76:fa:40:eb:
63:cb:e1:ff:8b:b8:7e:61:d9:3b:9f:8e:62:87:2c:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:03:DE:FF:BF:2D:C5:C5:C0:DC:BA:56:62:0B:1D:FF:1D:3F:DF
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:69:ae:75:3b:2f:ab:0d:14:94:ba:b6:0d:96:e9:d9:0d:
79:f3:c5:19:45:af:44:6a:fa:61:29:0b:44:93:8a:32:74:c8:
91:ba:1e:b5:a5:f8:7a:43:b2:f0:45:fa:50:9c:7c:5f:47:b0:
63:2a:43:da:da:7f:54:64:88:2f:13:04:e2:f8:91:98:21:f6:
ac:2a:da:1e:10:fc:56:87:34:c1:d8:e2:9b:d0:82:50:81:b7:
24:27:4e:65:21:b6:d2:eb:ef:f2:a9:03:ad:5f:3f:30:1c:4f:
72:17:b8:0b:b1:f4:a1:67:2d:d0:df:e8:dd:a8:0e:f2:6a:73:
23:99:02:ae:70:ce:e8:f8:cf:c6:15:aa:66:98:55:b0:21:e6:
e2:7c:43:ca:9c:93:1d:a6:6a:a8:4a:69:d7:e7:da:f5:88:82:
1b:2f:8c:5b:ba:31:46:5b:3f:33:27:bf:3d:b5:5b:4e:41:4d:
bb:46:1f:3a:8a:5d:c6:eb:52:4e:f3:64:89:61:fc:3a:9b:52:
59:2e:3e:9d:d7:b1:06:74:34:9a:ae:0e:5f:46:70:48:c7:2f:
0e:c8:68:0c:97:95:e6:6b:7d:19:63:c8:e8:32:ce:fa:6b:38:
84:27:04:5c:bb:52:f9:9b:3f:7f:a9:b9:06:06:50:5b:56:4d:
03:3b:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:51:41 2026 by rpki-client