Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
File: lrrMW97hlpQXoUa8RYZbRascN3c.mft (raw, json)
Hash identifier: 8QBfDFvIiC9kq+9g3hkqeClyyQN1/G9bPrmKWHZ03VI=
Subject key identifier: 3F:CF:F6:9F:BE:3D:8D:C7:EF:E6:B6:68:F0:EC:A2:D9:24:29:42:EE
Authority key identifier: 96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
Certificate issuer: /CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Certificate serial: 01A0C47CEC81880F20E8325772DC2DC9B2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
Manifest number: 7D
Signing time: Mon 21 Sep 2026 15:01:56 +0000
Manifest this update: Mon 21 Sep 2026 15:01:56 +0000
Manifest next update: Tue 22 Sep 2026 15:01:56 +0000
Files and hashes: 1: Pgpyk-hrzki9Ic59DdPNuzjskEw.asa (hash: Fu0SEp/DMSPXcJMhtPEEsmMFFRDBhn8d7ifvtyYjfQA=)
2: lrrMW97hlpQXoUa8RYZbRascN3c.crl (hash: UJKbkoBstBGwT2aBmroGntUe9qOec0eVAiwNcQVKRtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:ec:81:88:0f:20:e8:32:57:72:dc:2d:c9:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Validity
Not Before: Sep 21 15:01:56 2026 GMT
Not After : Sep 22 15:01:56 2026 GMT
Subject: CN=3fcff69fbe3d8dc7efe6b668f0eca2d9242942ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:95:5b:80:32:84:87:38:75:a9:8d:28:26:
cf:49:72:8b:45:4f:76:33:cc:2e:99:12:d3:6c:59:
e9:1d:6e:63:f5:f1:6c:94:a8:9a:d0:68:bb:d9:ba:
9e:0f:be:18:13:5b:3f:ea:54:b0:69:78:ba:59:b8:
ba:55:d7:d2:92:eb:0f:41:d6:dc:c3:32:3b:61:7a:
fc:ac:24:a3:1e:d8:20:d8:64:56:47:69:24:1d:ef:
c4:28:18:7b:da:19:44:d5:28:a8:3a:fa:28:67:c2:
0f:ce:ef:3d:78:4f:38:be:ff:06:68:26:dd:e9:c5:
0b:d7:8d:d5:ff:7b:10:c5:6e:e5:25:14:50:41:4e:
c1:63:b0:27:8e:a1:10:3a:d6:6c:ab:8c:e1:36:b9:
65:22:fe:11:24:71:88:ba:ab:7a:41:76:96:a2:12:
14:61:bf:42:7f:a6:89:26:44:10:46:f5:20:9b:fd:
b4:42:c1:c7:5c:5a:48:e7:34:78:59:22:f8:00:4f:
6c:1b:ea:49:7b:8b:02:d9:87:c0:8e:44:02:73:4b:
ae:00:bb:a2:f7:95:bb:39:ec:bc:c0:a5:52:af:e7:
58:47:cc:f3:f2:c6:fd:c6:1e:ad:07:dc:4b:83:c1:
34:84:42:41:99:f0:e7:99:02:97:0c:ee:06:95:19:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:F6:9F:BE:3D:8D:C7:EF:E6:B6:68:F0:EC:A2:D9:24:29:42:EE
X509v3 Authority Key Identifier:
keyid:96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d4:21:3f:fe:44:32:10:79:db:66:db:c2:4f:16:2e:ba:09:
06:77:59:4e:98:a3:fc:1f:3d:e7:a0:e8:0a:26:68:bd:33:53:
09:a9:4f:54:99:fb:40:80:65:cf:ba:27:e8:03:30:95:2d:f8:
62:68:c8:b3:4c:85:d5:d8:a3:e4:d8:f7:31:d4:6d:98:c7:3a:
83:57:05:5e:a0:65:8d:26:48:4a:0d:c9:4a:5d:35:76:82:74:
0b:dd:16:1a:0f:48:75:5e:e5:ff:05:3c:eb:60:64:08:d2:ba:
2b:4d:f1:45:b9:1d:1e:43:ab:0a:b9:a9:eb:cd:1b:0e:f5:ff:
7e:8c:ce:ee:9a:fc:0c:c0:77:3b:46:66:4c:f5:a4:d4:d0:25:
9b:b6:e7:02:56:f7:e0:de:5a:af:f1:1c:5e:ea:6f:68:c0:2b:
6c:f9:27:2a:44:9f:61:c5:58:f9:24:46:6b:a3:b3:81:76:a8:
e8:05:7f:1a:38:f4:cf:08:80:81:1b:df:ca:6c:50:9d:04:42:
d0:22:83:25:82:fd:cf:0b:82:0b:c4:e4:fe:00:74:d6:65:aa:
78:16:09:e4:03:49:ec:bb:e9:bd:18:e6:01:70:f7:f5:00:c4:
40:36:8a:ec:71:64:ad:0e:b7:f5:a4:4d:73:97:7f:fd:9a:ee:
91:78:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:49 2026 by rpki-client