Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: QSPGk3wSoNToS2y2q2NB9blETGrAh/fLGrZrN2DiNOQ=
Subject key identifier: BD:CF:31:5E:D1:CC:86:ED:38:C8:80:AE:95:1B:7B:11:97:17:79:A2
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 01A1328FD44AF2441D718AD2E8A6275B5DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0BCE
Signing time: Tue 13 Oct 2026 00:00:49 +0000
Manifest this update: Tue 13 Oct 2026 00:00:49 +0000
Manifest next update: Wed 14 Oct 2026 00:00:49 +0000
Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: wbjKO8ENFr2FubynuKQV4vz7ytxULOP+hxKY/me6GZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:8f:d4:4a:f2:44:1d:71:8a:d2:e8:a6:27:5b:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Oct 13 00:00:49 2026 GMT
Not After : Oct 14 00:00:49 2026 GMT
Subject: CN=bdcf315ed1cc86ed38c880ae951b7b11971779a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:bc:91:23:04:f9:57:34:1c:a7:35:21:45:
a1:8a:af:8c:35:b7:e4:d3:38:ca:7b:1c:bf:a7:8c:
59:2b:d5:4a:5b:ac:78:81:d1:d5:b8:10:70:85:97:
20:ee:84:18:5c:32:82:76:0a:ce:b2:34:db:cc:78:
99:c2:8b:77:58:bb:b8:d8:b5:87:83:3f:39:87:23:
68:6c:ce:79:d1:24:f0:0b:f0:fd:a6:04:d6:49:83:
f3:ba:c4:13:cb:bc:71:6c:e8:07:50:0e:4e:8a:2b:
ba:c2:50:b4:ec:14:1f:ec:b7:ce:a4:b6:9b:1b:fb:
7c:81:92:0e:88:25:c9:62:ae:2b:7d:2a:64:0a:fa:
b7:8b:d8:cc:b1:5f:d0:f1:ed:1d:86:c9:b8:89:1f:
fc:74:58:45:37:e5:f1:c5:7e:a0:ae:56:6c:6b:ab:
33:68:9c:6f:07:ce:42:d2:0e:41:b1:1b:4a:6f:cc:
15:01:bb:fe:51:55:ff:42:ec:bf:41:21:42:51:a2:
c0:ca:46:9e:fc:91:ac:c5:f1:20:ad:e0:a8:fc:a1:
83:6b:72:c9:25:77:51:dc:9c:7a:2d:e5:0f:87:b2:
84:18:56:17:fb:81:28:ea:c0:3c:be:15:61:c5:be:
0b:14:8a:4f:95:ec:56:79:48:25:0f:c8:a1:7c:bf:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CF:31:5E:D1:CC:86:ED:38:C8:80:AE:95:1B:7B:11:97:17:79:A2
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:91:1f:98:91:8d:18:ee:18:3a:cf:f9:b5:2d:bf:0e:4c:
de:92:f8:8c:66:ad:b7:ab:c4:3a:73:a4:22:0e:ab:39:25:5b:
b2:89:43:69:9a:32:36:ef:b1:62:3b:69:b0:b9:ba:bc:15:30:
d1:54:f2:8b:fd:b1:06:12:ed:6d:2d:f6:7d:23:5c:7c:a8:40:
df:5d:52:f2:31:9c:9f:3f:b3:d1:e8:e7:69:c5:cb:16:87:13:
73:96:e6:2b:f8:53:5d:1b:3b:87:c9:03:02:4b:97:d4:7b:e8:
cb:e5:c3:46:a6:0f:dc:b1:2e:0e:54:5d:c3:45:f5:dc:9a:ba:
bd:e8:24:dc:0d:3a:33:82:01:5b:9d:73:d5:86:2e:2e:37:15:
a0:e6:ad:b6:7a:15:ef:e4:90:3a:ab:7f:dd:5a:4b:25:39:d6:
bb:9e:f1:4a:7d:a6:fd:72:fe:e2:b3:36:a2:27:cf:89:44:fc:
a2:56:5d:48:85:f9:9d:c5:98:06:5f:7b:9b:47:07:33:c3:e1:
19:d5:25:3e:38:e6:16:87:67:e4:a5:db:35:79:0a:86:68:84:
20:40:13:9a:aa:fb:b9:a9:50:32:8f:a6:70:4f:e8:3e:05:b6:
40:b0:8b:a1:5e:99:2c:cb:02:c4:e0:ae:f7:19:29:56:76:1a:
34:86:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:33:41 2026 by rpki-client