Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: Fj33YLoZ139KJ/xxcFf0/0mW+XFMeFjNEHcwexhHwGM=
Subject key identifier: 45:B5:FF:4D:4A:09:EB:E0:BE:05:18:45:5C:B5:E4:6E:9D:73:96:3A
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 01A119E268B8E34FB4DFD55011E497D6FB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 05:00:30 +0000
Manifest this update: Thu 08 Oct 2026 05:00:30 +0000
Manifest next update: Fri 09 Oct 2026 05:00:30 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: TFM5VqxFIGylP7yvShnnZRwP0SM0VJdmf3Kgf0rJ2PU=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:68:b8:e3:4f:b4:df:d5:50:11:e4:97:d6:fb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Oct 8 05:00:30 2026 GMT
Not After : Oct 9 05:00:30 2026 GMT
Subject: CN=45b5ff4d4a09ebe0be0518455cb5e46e9d73963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:16:72:01:8e:ca:d9:72:b8:05:b6:10:64:
b6:b8:71:45:bf:9b:f6:05:b6:fc:83:08:db:89:33:
ed:b4:09:e0:61:5f:fa:6b:55:43:7e:a4:c9:af:24:
bf:dd:74:5b:32:66:2d:b5:d1:f2:10:df:97:0b:75:
21:56:13:ac:24:5a:a0:9b:40:f9:ab:a9:2e:f5:b6:
38:18:3e:88:e2:35:27:fb:dd:13:17:6e:30:39:48:
67:19:77:0f:ed:7b:01:ca:8a:95:96:ba:f0:46:5f:
ac:08:3a:69:18:e7:85:ee:b8:19:5c:97:46:a2:69:
13:b5:13:a2:18:78:2c:39:5d:72:c4:71:24:2f:7c:
7e:98:0f:10:9c:62:66:0f:16:3a:10:63:cb:57:79:
88:10:1c:fb:59:03:9e:31:7a:86:ec:ce:68:0f:50:
8c:e0:41:71:1f:5d:ba:60:33:9e:0f:e6:1b:02:17:
ae:4b:88:63:88:06:e9:24:98:5d:6a:a2:bc:0b:2e:
7b:b4:9e:53:89:0e:7c:78:a4:4d:49:df:dd:da:56:
53:69:d7:ac:ce:ed:2b:df:97:16:6c:15:01:52:b4:
ec:18:da:e2:25:89:9a:c0:9e:17:65:46:f9:36:ef:
72:58:16:05:22:06:f5:86:1f:c1:3e:34:03:80:eb:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:FF:4D:4A:09:EB:E0:BE:05:18:45:5C:B5:E4:6E:9D:73:96:3A
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cf:8c:7b:7e:f7:f0:38:69:c0:4d:9a:5d:0b:53:49:32:c5:
4a:b2:cf:9a:19:2d:3c:d5:de:cf:f8:86:0c:06:bb:eb:ae:82:
c4:62:ef:11:16:f8:3f:88:67:91:3a:81:c4:cf:6f:79:84:7c:
c1:4d:91:37:a9:c4:c5:97:1e:ad:d6:19:7b:2e:19:25:3d:07:
e4:59:e1:3b:84:b4:a9:f6:f1:ec:e3:6e:f1:d4:49:62:e9:b8:
ed:59:dc:fb:dd:9c:10:37:98:39:67:6e:68:87:6d:ee:82:4b:
fa:08:35:ea:ec:5d:85:47:e1:29:54:48:47:b3:89:37:20:0e:
13:07:eb:cd:09:77:c2:85:99:5c:a4:be:54:d8:67:fc:0f:56:
a5:f4:0c:e3:e0:57:55:d9:63:00:c4:31:82:25:90:54:2e:d1:
f4:3b:00:d0:5e:fe:93:11:60:d1:56:68:3a:b8:77:93:8c:e9:
4b:e3:ed:b2:22:0b:bd:69:71:92:f4:e7:a9:09:1c:36:aa:fd:
0e:eb:ea:31:9b:c8:80:4a:34:b4:5d:81:87:47:c4:a9:de:8b:
a8:bf:8c:08:8f:f8:13:55:74:53:f6:61:8d:31:b7:da:09:96:
04:9c:5a:7b:6b:36:d7:b9:67:ac:e6:4b:30:ec:f5:7c:b8:80:
f9:06:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:01:22 2026 by rpki-client