Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: dIQI8xlRcjdHK1ivGhbxvionrj071mc7NeQ6Yt510I0=
Subject key identifier: 28:6B:BA:55:CC:6E:BA:FB:76:B0:F4:CF:D8:A5:EA:60:02:41:72:65
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 01A0CB90665EF41364F8277DB3B6FC6933BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 00:00:33 +0000
Manifest this update: Wed 23 Sep 2026 00:00:33 +0000
Manifest next update: Thu 24 Sep 2026 00:00:33 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: DA4N2mMunrRovOhGpNxNY1uyHeUlZe9HZqWGyQHZwMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:66:5e:f4:13:64:f8:27:7d:b3:b6:fc:69:33:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Sep 23 00:00:33 2026 GMT
Not After : Sep 24 00:00:33 2026 GMT
Subject: CN=286bba55cc6ebafb76b0f4cfd8a5ea6002417265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:49:5d:87:24:65:83:c0:21:f1:4d:3f:3d:
7d:56:89:25:6b:c9:02:fc:aa:09:c7:de:fa:1b:5d:
af:73:3a:e5:04:8d:af:0a:c2:31:0a:27:36:62:02:
e9:a0:b3:bd:bf:69:2f:a7:22:c2:6d:6c:31:9f:68:
0e:2d:0d:09:ba:7f:d9:0d:d5:13:a2:76:04:11:31:
e3:6b:5c:3c:1c:56:11:4e:bf:53:40:49:37:df:d0:
c6:90:b5:d0:7e:2b:bc:79:5d:c0:bf:3e:8c:db:9d:
32:96:37:d3:f0:0f:84:66:45:6c:35:14:43:68:d8:
4e:f7:ae:5c:63:65:61:85:b2:32:b6:a8:ee:64:04:
c1:d9:69:2a:95:e9:24:36:59:c8:e0:3e:b9:1c:e0:
8f:d5:2d:16:b2:d3:2c:ee:6d:42:42:3a:dd:81:47:
1e:2b:7d:5c:b7:c0:76:67:c1:99:25:4b:ee:a0:97:
dd:8f:89:f2:25:ae:90:7c:37:c6:42:3d:7a:54:ff:
ee:19:ad:8c:c5:b5:10:e1:50:48:9b:15:bd:d1:9d:
6c:37:36:3b:92:2e:98:1f:0c:96:3d:86:3b:6e:a8:
15:79:e7:25:c4:cc:38:0f:11:4e:66:3a:3c:48:10:
bb:6a:31:67:bc:73:b4:d7:db:35:df:b1:49:a6:34:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:BA:55:CC:6E:BA:FB:76:B0:F4:CF:D8:A5:EA:60:02:41:72:65
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2f:63:47:e3:57:63:68:17:a3:aa:8e:f7:62:58:4b:26:3b:
bf:4f:9c:b4:19:22:c8:4d:5c:dc:95:c1:5f:57:48:46:85:ba:
81:7b:e8:f2:d9:62:98:f0:42:65:9a:a2:c7:43:15:f0:6b:82:
4f:bc:d9:1c:8c:18:bf:1f:a6:6b:f1:13:5d:70:c4:a5:0b:a3:
f0:c9:c8:33:4c:00:43:7e:2f:c6:86:3b:c4:00:a9:a4:e5:1e:
68:27:07:9a:0f:ba:f3:b3:b4:91:ee:c3:10:e2:4e:bd:e4:58:
81:15:b6:f5:8f:e2:d3:8b:0a:f1:4f:56:27:fb:2d:a2:0e:8c:
28:2c:fa:0d:dc:a4:4b:91:61:5f:7f:18:25:d4:d9:45:15:29:
b1:87:f3:c9:04:0d:84:e8:75:45:b7:49:d6:f5:b1:d4:3f:af:
a6:34:d9:a3:16:e7:8d:f3:15:0d:44:45:36:bb:e4:31:65:5d:
86:19:44:1d:77:35:ba:6e:b6:41:2a:5b:10:da:a6:63:11:63:
c9:ee:77:67:e9:b5:06:b3:d4:0a:80:18:99:1e:d4:5e:62:8c:
78:b0:34:9d:e3:52:c4:06:cd:bb:17:53:53:6d:bf:e1:6b:ec:
36:0f:63:43:71:a0:c9:2f:b8:02:13:af:73:40:03:cf:f1:6d:
0f:1b:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:49:22 2026 by rpki-client