Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: Q1cVT3aB8SGOv+louLXX4787WNrvEEZqBXAvaha5znY=
Subject key identifier: FB:81:43:CF:43:6C:12:F0:F3:F3:1F:45:B8:F9:90:35:82:C4:8B:0D
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01A0C55761E04E2268343C59901846BC3EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1A70
Signing time: Mon 21 Sep 2026 19:00:33 +0000
Manifest this update: Mon 21 Sep 2026 19:00:33 +0000
Manifest next update: Tue 22 Sep 2026 19:00:33 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: g7/yzVaS3I0uei1ZKoAxa+7+jvagT9w7CnEsjmkMQaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:61:e0:4e:22:68:34:3c:59:90:18:46:bc:3e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Sep 21 19:00:33 2026 GMT
Not After : Sep 22 19:00:33 2026 GMT
Subject: CN=fb8143cf436c12f0f3f31f45b8f9903582c48b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:e1:7c:68:e1:87:95:69:14:e8:7e:bb:0d:
f5:0c:3b:fb:e8:72:35:f3:30:00:07:17:4a:6d:d8:
05:0b:06:eb:d8:d6:c3:0c:ca:c9:48:64:2e:ba:ab:
77:1e:5c:bb:31:d3:e2:0e:45:10:99:7e:d3:b2:b5:
92:f4:58:db:58:4f:08:6f:25:65:93:1b:da:ca:f6:
e2:50:8b:33:2d:12:54:04:da:2b:30:95:95:0b:c5:
25:54:f8:aa:5d:2e:4c:07:05:52:6c:99:e6:a3:52:
e1:54:84:46:c2:63:4c:e2:67:c7:5b:e8:27:ab:b7:
c9:b8:a7:e5:ae:51:dd:fc:62:f5:5c:fb:9a:a1:29:
ed:c6:90:a9:b8:d2:b8:21:6c:7f:6d:36:03:93:1e:
c1:d1:5f:31:64:c4:f5:aa:3c:28:cb:b2:23:8b:ba:
9b:04:1b:55:1e:c3:f8:d8:c9:77:36:05:3a:53:35:
14:a1:f4:03:8e:66:0d:01:9e:0b:2c:e2:be:e7:3d:
83:6f:03:51:ef:02:17:de:78:dd:c1:45:81:3a:4c:
c0:bb:bd:d7:de:61:6b:4a:09:38:52:e9:b9:ee:31:
14:f0:c1:d6:b0:71:84:83:cb:6c:9a:6b:77:be:e7:
47:de:a1:93:c1:9d:8c:af:f2:d1:42:0a:17:2a:4b:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:43:CF:43:6C:12:F0:F3:F3:1F:45:B8:F9:90:35:82:C4:8B:0D
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:0c:cb:9c:30:5e:b8:c2:ef:34:ba:a7:9d:d2:80:ce:a7:
8d:90:6b:b6:c2:97:63:ef:71:33:79:0b:a7:60:3c:66:f7:3e:
3a:b8:f8:1d:62:01:de:f3:4b:81:99:9f:1b:ac:7e:5e:cc:63:
98:de:65:e1:a4:76:5e:a9:69:a5:c5:31:3a:bf:c3:7e:9c:48:
02:78:e3:51:a9:57:84:a2:5f:16:f6:3a:bf:e1:2a:13:ed:26:
e0:e8:1e:f7:63:f7:c7:10:6e:28:45:c4:29:1d:0b:a2:71:d8:
e4:a3:1e:57:4c:82:85:00:0f:f9:40:f8:ff:db:29:db:b4:ba:
5b:80:ba:28:88:6d:59:b7:d7:a5:f8:1e:89:e5:b4:04:8a:34:
f5:55:bc:d4:a4:c2:19:62:b1:1b:4a:6e:b1:cf:90:84:ba:8a:
a1:f7:29:7f:e5:71:c3:1d:51:58:bb:6d:42:b8:2c:93:b7:ba:
2c:26:d9:50:dc:bf:a6:54:b1:e4:4c:c3:b7:bd:8a:08:2c:43:
09:65:35:68:9f:a0:22:85:02:38:ba:33:7e:6f:90:4b:b7:ba:
45:e0:91:44:6c:4d:a4:6b:c6:b0:0d:b3:33:24:d7:53:5c:e9:
7b:ca:0f:22:44:00:11:8b:b4:72:af:dd:59:d4:c6:f7:e0:c9:
e6:46:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:19:14 2026 by rpki-client