Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: GwUuMfIOYv5clX2e1LTFS3P18bwg4lJhJ5/IPg7l8QE=
Subject key identifier: 12:E6:58:E5:CC:B8:5A:6B:76:E4:A6:B9:4B:9E:94:D1:0A:2C:43:0E
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 01A0DDCE7168A42F8C577F46412AE603ECDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 13:01:29 +0000
Manifest this update: Sat 26 Sep 2026 13:01:29 +0000
Manifest next update: Sun 27 Sep 2026 13:01:29 +0000
Files and hashes: 1: EV5B5CDx-yO9QhQKgIOGKQuwu8Y.roa (hash: BneDEJ5QoDJkAJJC30tOaDJaCQOMhWb/wOIFibxQ6Ms=)
2: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (hash: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM=)
3: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (hash: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: w/oVFC5RrUdwT6egaGp+jZ9edlc+F2sRpvQ5m2fFiyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:71:68:a4:2f:8c:57:7f:46:41:2a:e6:03:ec:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Sep 26 13:01:29 2026 GMT
Not After : Sep 27 13:01:29 2026 GMT
Subject: CN=12e658e5ccb85a6b76e4a6b94b9e94d10a2c430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:e1:1d:50:d0:2e:af:61:52:a0:71:79:d5:
89:bd:9c:b8:bb:05:d7:5d:5f:5d:7f:ca:c9:1e:4a:
fa:79:e0:b4:7f:b8:79:d1:0a:32:da:5f:63:13:37:
88:63:73:3b:b7:eb:23:49:9e:8e:36:d3:ec:66:e7:
ca:a7:e7:4e:91:84:00:93:ef:51:16:76:b7:9e:e7:
f2:40:bb:ab:5c:43:af:8f:20:fd:3d:3c:dd:fe:fa:
4d:3f:c9:7c:d6:63:e8:0c:8e:9d:bb:52:db:17:bc:
30:85:92:07:d7:01:01:86:10:a2:67:a8:92:e1:2b:
f5:52:81:90:82:18:2e:62:df:f5:60:73:2f:22:dc:
13:67:9c:41:79:6a:af:23:83:7f:c5:5e:db:0f:90:
6d:d8:78:a9:b9:a8:42:69:82:ca:76:18:6d:9c:81:
c7:45:c9:f0:1c:4a:63:28:55:cd:71:4b:3b:80:2b:
84:fe:cc:92:82:08:26:97:59:34:12:f4:ee:2c:f5:
28:17:34:a0:80:f2:68:5c:a1:97:56:46:b4:01:29:
aa:ba:cd:70:6e:30:ce:77:14:1b:66:c0:7c:df:92:
35:5a:18:8c:4e:b6:e1:ba:f7:96:3d:56:f7:96:2b:
26:e2:ae:6f:53:3a:4d:50:5d:89:7f:f7:64:f4:19:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:58:E5:CC:B8:5A:6B:76:E4:A6:B9:4B:9E:94:D1:0A:2C:43:0E
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:b6:31:eb:37:5c:35:38:c2:d7:97:72:34:63:ea:00:b2:
39:4f:65:7c:55:fe:ff:fc:3c:d4:ec:ca:6b:27:69:e4:83:72:
12:5d:80:d6:ea:fd:a7:c0:5e:e7:cc:1c:53:e2:49:94:65:40:
34:db:6e:22:7d:f3:d8:74:af:e1:8e:ec:20:21:db:19:2c:49:
e5:6a:2c:5a:69:aa:fd:ec:7b:82:8b:0c:99:59:2f:19:b2:92:
51:f0:05:5f:29:1d:91:23:d3:b7:f2:e0:46:9f:ea:1a:b3:31:
3a:87:32:15:a8:23:87:c2:aa:65:d5:d3:fc:61:22:49:31:7b:
ac:1b:f6:bc:59:78:34:af:c6:9b:12:f4:40:1a:8d:4d:c7:e7:
80:45:b9:05:da:62:7d:f7:2d:89:17:f4:7f:0a:cc:51:1a:f6:
d2:77:4a:39:d0:fa:98:24:02:e5:fa:e7:ae:f7:d6:e6:2d:1e:
68:da:0f:f3:72:d5:5d:e8:c5:85:1f:fe:62:3f:7a:f6:23:26:
db:b6:cb:6e:dc:ec:d5:7f:50:fb:a6:59:8d:0b:07:3f:70:1c:
b7:5c:3a:84:24:f8:2d:df:85:e5:b5:98:91:1b:f3:08:c1:53:
5f:59:df:db:85:7c:8d:41:02:df:d3:84:6e:08:8c:5f:73:22:
0f:53:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:06:36 2026 by rpki-client