Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: 8S/2iCmSf2eY0HGxhs1VCk+lQq6T8m5Y4/0IZTacGrU=
Subject key identifier: BF:D3:18:70:85:02:49:06:FA:1B:13:D0:DF:F1:AF:9B:61:EA:50:08
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 01A127D58C0FF0EF90DAE4C186A541EA6A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1AA1
Signing time: Sat 10 Oct 2026 22:01:08 +0000
Manifest this update: Sat 10 Oct 2026 22:01:08 +0000
Manifest next update: Sun 11 Oct 2026 22:01:08 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: NSjhprFf3BJKXIk0//HwPCXzezZfHbxkI+1T8Sl1mEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:8c:0f:f0:ef:90:da:e4:c1:86:a5:41:ea:6a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Oct 10 22:01:08 2026 GMT
Not After : Oct 11 22:01:08 2026 GMT
Subject: CN=bfd3187085024906fa1b13d0dff1af9b61ea5008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:f2:50:24:c5:71:5d:9e:58:f7:ca:44:0e:
66:e4:4d:d3:e1:6f:2c:90:02:87:c0:d2:27:17:04:
59:42:bf:35:ce:1d:f3:8a:89:dc:d5:eb:d2:d1:6f:
1b:0a:3d:c1:87:71:a7:f9:38:07:be:5f:64:7f:a3:
1b:ce:0e:2c:3e:35:b0:15:8c:3f:66:99:a6:43:50:
8e:ce:20:50:85:1a:8f:2e:3d:dc:e1:f1:e4:40:20:
a9:bf:4f:e6:72:89:f2:dd:a0:97:d4:d2:f4:4b:42:
45:9a:18:ff:d6:a6:59:45:df:95:29:d0:8b:b1:d3:
66:90:8d:7a:01:70:fe:e2:41:38:18:c7:7a:28:b3:
b2:d8:72:00:82:76:2f:86:a4:a4:90:2a:3f:41:80:
11:8a:8f:66:4d:43:3d:b6:89:67:fb:ef:24:df:7d:
fb:4a:46:d0:c2:b9:a9:26:96:cc:ac:ad:a7:d5:94:
0c:39:10:9b:ba:01:3e:d6:4c:fb:c6:34:83:3f:a4:
0c:f4:5b:9d:36:41:cc:65:5f:79:2a:84:43:46:8f:
d8:1b:97:3a:a2:66:6f:84:f0:fa:dc:11:42:f5:a9:
91:02:7e:f6:1d:2c:6b:d1:8d:d0:77:fa:97:31:1d:
f9:51:e7:69:eb:d3:b0:4a:07:28:5f:38:ea:3d:09:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:18:70:85:02:49:06:FA:1B:13:D0:DF:F1:AF:9B:61:EA:50:08
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:2b:29:60:0a:6c:53:1c:3a:65:1c:bc:54:8a:cc:1d:81:
30:d9:5b:6d:fc:68:c9:ae:8a:9b:dd:76:24:8f:e5:cc:a8:7c:
f1:b5:6d:60:79:94:98:d5:a5:42:81:04:88:c7:5c:2b:b9:d6:
ca:7a:46:2f:51:ab:ad:8c:d0:de:32:ed:66:98:e1:96:11:d3:
f9:8b:6f:aa:39:eb:6d:19:06:f2:01:13:eb:8e:1b:17:98:fa:
b7:fe:4f:c6:d4:fa:2a:f1:e2:a3:2a:41:2d:88:c5:1c:f2:f2:
0a:d6:65:56:8b:25:f4:21:b0:31:c6:be:49:3d:50:20:74:7b:
0c:78:10:66:4b:ea:f7:bf:91:d7:97:de:dd:34:db:54:3f:6a:
21:00:44:84:c2:26:e8:d5:7f:b6:27:ec:f7:dd:4d:4d:ac:d1:
e2:3d:30:9f:77:11:fe:43:72:53:6a:1c:58:e9:53:58:67:4c:
2d:d8:08:17:11:ae:98:c0:3f:a4:c7:e4:c2:c6:a3:ad:81:09:
25:fe:4a:3a:9a:c0:b0:e9:34:65:c5:25:6c:8d:c5:df:f1:0f:
a6:50:41:07:6f:2f:5e:cf:59:a6:d9:0a:a5:63:da:98:7f:28:
ef:b0:15:60:e2:26:b0:09:f2:df:b0:0a:70:43:e5:39:34:af:
f2:c6:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:27:50 2026 by rpki-client