Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: jcq1Uu6rkOV+rvZmCl/95ciAkn+9fEukfdiIK5yI954=
Subject key identifier: E1:B3:07:22:BA:B8:C3:C4:95:40:D6:14:05:2B:79:48:41:C2:0E:6B
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 01A0C6A0EE27F2373A8F0E5A43972478C3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 01:00:30 +0000
Manifest this update: Tue 22 Sep 2026 01:00:30 +0000
Manifest next update: Wed 23 Sep 2026 01:00:30 +0000
Files and hashes: 1: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: 4Ak51afx9VY4YkCmQe273a1F7YgBUTeB80txvxBVQEM=)
2: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (hash: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ee:27:f2:37:3a:8f:0e:5a:43:97:24:78:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Sep 22 01:00:30 2026 GMT
Not After : Sep 23 01:00:30 2026 GMT
Subject: CN=e1b30722bab8c3c49540d614052b794841c20e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:be:a5:ef:1e:b5:e4:e4:9a:76:95:e5:b4:
55:ab:78:b6:35:7b:90:e6:dc:05:53:59:1d:af:a8:
f5:00:a2:47:ca:24:ef:75:6b:f0:49:8e:2d:90:8f:
d2:c8:42:76:01:e1:c2:55:a8:17:d3:e6:12:f8:2f:
39:e8:e2:1d:21:68:32:9f:b9:b0:1b:49:8f:1b:4e:
8f:0c:6e:38:9a:a1:2c:86:ac:79:86:15:56:03:2a:
be:1d:4f:b4:85:f4:5c:a6:2f:e2:2f:02:a5:40:3d:
8e:f5:98:be:b1:51:ef:47:ed:70:fb:e1:c0:65:00:
05:2b:c2:f6:e4:e3:46:63:fb:fc:b7:93:1a:7b:22:
48:4e:1f:5f:b6:81:39:ee:0c:11:92:d9:dd:92:46:
af:f1:72:88:82:f4:dc:64:5f:5a:b8:52:99:95:fc:
bb:60:49:ec:34:19:cc:f5:4d:d1:6e:74:0f:10:ae:
67:94:0e:02:e9:5a:4e:4e:33:2a:0d:67:57:78:57:
ba:10:6d:d0:93:7c:b6:0d:40:a0:26:b0:82:20:9c:
e0:2d:be:9c:bf:ec:38:67:2a:3c:6c:96:9a:45:54:
fb:00:2a:58:d1:7f:43:47:48:30:26:19:b6:35:9f:
a2:78:8e:c0:84:ed:0d:4c:07:f6:56:e1:cc:2a:26:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B3:07:22:BA:B8:C3:C4:95:40:D6:14:05:2B:79:48:41:C2:0E:6B
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:18:61:fc:e0:90:6e:48:88:3e:d2:49:98:8a:ee:a3:53:82:
c2:9d:a8:00:27:6c:dc:93:29:1c:54:59:6a:3e:c3:2b:5f:bc:
2a:42:61:d9:a7:69:26:c6:27:1c:d8:73:8e:cf:be:b4:64:fe:
b1:46:ff:1e:35:1e:96:64:13:c6:b7:27:08:d0:2f:b9:34:f0:
da:03:41:71:00:a3:3b:5b:51:9c:0d:8c:f1:d1:6d:d4:68:b8:
89:aa:cf:54:a4:2c:27:39:b6:50:a8:9f:06:4d:9d:1c:38:1d:
f1:59:98:33:e7:98:88:63:6b:89:5f:77:be:2f:78:2b:16:32:
f7:ca:37:59:7e:7f:94:82:4d:86:43:0b:ac:ff:50:9e:c6:57:
9b:54:f6:12:d1:75:dc:47:a4:48:78:40:b5:66:fe:84:6e:45:
56:e6:b4:82:0f:be:3c:e6:03:74:7d:65:ae:1d:69:cb:0a:d1:
a6:d7:49:f2:61:d9:e2:d4:a8:e8:28:d3:52:cc:8e:77:ce:65:
d0:6a:a7:2e:0d:5b:7a:df:35:4c:dd:53:17:11:d9:4a:e5:13:
ec:9b:84:7d:0c:c0:85:ea:de:40:24:2e:f0:0e:fc:64:16:b3:
2c:4f:bf:72:98:1c:74:56:1e:f8:a1:10:dd:08:63:00:32:ae:
49:e5:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:36:02 2026 by rpki-client