Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
File: ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft (raw, json)
Hash identifier: blgt5ooY4XCtHRnWVcBUp83saCYDA9FkVAcig7ExoYQ=
Subject key identifier: C6:06:31:80:FF:6C:CF:DA:05:8A:33:9C:FD:D5:4A:9A:A1:67:68:AC
Authority key identifier: 96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
Certificate issuer: /CN=96ce931f852f4046ff8db482b39450219f8b383a
Certificate serial: 01A0C96B4BF08A279009A9C6EA101F2F91DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
Manifest number: 0183
Signing time: Tue 22 Sep 2026 14:00:47 +0000
Manifest this update: Tue 22 Sep 2026 14:00:47 +0000
Manifest next update: Wed 23 Sep 2026 14:00:47 +0000
Files and hashes: 1: 2rO9mH3OXryLXQ1fKrL6Nz5IHqU.roa (hash: pjcgHLDWo1fInBoA6L65uzzfcpINA+52BV8ltO/eZJE=)
2: OMAfxlKlArt8nhDTTD6Xvr--tCg.roa (hash: qjVFBgoWq2ZsGj3ZMQWgpCZMEuEApEEAzRA1asj0/Ns=)
3: ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl (hash: NXvz8TnOQwGvwkIINv6/LMotHBWjcW+PsoeM/68uqpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:4b:f0:8a:27:90:09:a9:c6:ea:10:1f:2f:91:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ce931f852f4046ff8db482b39450219f8b383a
Validity
Not Before: Sep 22 14:00:47 2026 GMT
Not After : Sep 23 14:00:47 2026 GMT
Subject: CN=c6063180ff6ccfda058a339cfdd54a9aa16768ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:3f:2f:aa:60:27:9d:9f:4d:94:b1:ff:ab:
24:82:38:21:34:63:3a:84:97:55:f2:ba:c6:a3:b6:
1f:2f:67:e6:1f:e0:43:60:74:e2:93:1a:f3:73:53:
21:14:40:dc:a0:a5:b1:d4:be:7e:96:21:f6:0a:08:
aa:12:26:cf:b0:a5:48:4b:f5:e3:69:9d:4e:5a:25:
2e:4e:bd:63:24:e2:c5:58:ef:ec:fc:1e:07:62:4e:
40:58:b3:33:d8:32:76:76:94:cb:ae:b8:f8:45:a5:
72:6f:4f:2c:c4:04:1c:ab:a6:1e:76:9c:d7:0c:da:
16:6f:26:c3:ff:0f:8b:cf:d1:04:e9:06:2f:16:2a:
c8:be:f5:c5:4d:4b:ef:c3:36:c4:c3:9c:e0:67:46:
e9:01:ac:1c:5d:e9:35:f1:d5:4a:0e:c8:29:2d:36:
be:97:ce:52:3b:f2:fc:48:a5:28:bc:ac:25:00:8d:
f3:3a:8a:60:d9:bd:5c:ee:87:2b:7b:ec:53:5d:c0:
3d:4f:ed:86:bb:57:66:4b:4f:28:4f:43:7f:bd:c7:
4d:bf:95:6f:d2:6a:ea:eb:dc:87:b9:0c:38:74:7d:
f1:bd:6e:7b:2d:1a:9e:66:46:3c:b2:28:ae:34:ce:
92:1a:55:74:91:4b:24:41:75:e5:8e:28:bf:db:e1:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:31:80:FF:6C:CF:DA:05:8A:33:9C:FD:D5:4A:9A:A1:67:68:AC
X509v3 Authority Key Identifier:
keyid:96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:ca:7c:23:1b:2d:e6:4f:43:f7:61:1a:48:e9:77:d0:71:
4e:20:fa:fe:c8:ef:64:2a:64:4c:d1:d1:99:d4:c5:79:ac:82:
bf:f5:5b:2a:2a:6d:d8:f8:09:26:a6:2c:9a:3a:37:69:13:86:
bf:ae:c2:10:dd:2e:61:ff:ea:8a:99:bc:5c:53:3d:f7:09:50:
39:8a:54:79:19:8a:a3:f5:b3:ea:29:e8:a8:1c:06:44:93:18:
fc:8c:2c:6b:78:fb:c3:c8:94:94:c6:b8:b0:a3:b7:d4:bb:cb:
b6:6c:4e:06:e1:90:06:68:a9:76:a7:53:92:1e:ac:55:28:33:
7a:4f:5c:b4:e2:6e:22:e7:4f:21:f0:9f:a9:fe:71:f2:3f:0a:
e3:92:99:d5:74:d2:1c:ec:50:f0:18:a2:2a:8d:28:6e:57:61:
de:0f:20:30:ba:2b:08:aa:4a:d8:d9:50:bd:3b:71:e3:e4:e0:
7e:c1:18:b7:ea:bc:f3:d9:5d:b7:ba:fa:e3:06:61:7e:72:6a:
0a:4f:b5:14:17:a0:79:77:71:0e:ea:f4:71:0a:bb:53:fb:16:
39:ba:3c:ff:38:a9:bd:7d:4c:e8:8b:9a:cc:15:5d:07:1a:2b:
e1:9c:e2:67:82:67:ee:80:1e:7b:1a:66:f2:53:55:49:72:03:
e3:31:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:10:18 2026 by rpki-client