Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: eo21XsOGA8/i0vmfUL+PhisjVwljeW8k76Fusi5Lp0c=
Subject key identifier: C9:4C:49:D3:FF:C8:99:BF:F2:44:93:EA:F8:0C:95:55:B2:11:14:49
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01A0C1B1EEF9952C9836244A67EE044DAA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 0784
Signing time: Mon 21 Sep 2026 02:00:58 +0000
Manifest this update: Mon 21 Sep 2026 02:00:58 +0000
Manifest next update: Tue 22 Sep 2026 02:00:58 +0000
Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
4: RArElwhZ2L2Zlj0l8O2N8bOSric.roa (hash: 4r5JtsLOAT3pIVx8q/4/irh2e8gGrH4iwTU+5S/pCGo=)
5: kcCZM38l6ytFTSCCRGE4xZmb_5M.roa (hash: vdyTwvLkPGrGBvR3sd98RK3Nag8A+19y2RgUseY1tS8=)
6: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: nEvDyLTghcxYt9bYoFaptRDhxNZnheqs3pEjyXcoq6k=)
7: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:ee:f9:95:2c:98:36:24:4a:67:ee:04:4d:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Sep 21 02:00:58 2026 GMT
Not After : Sep 22 02:00:58 2026 GMT
Subject: CN=c94c49d3ffc899bff24493eaf80c9555b2111449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:19:27:cc:78:83:6f:1f:52:5f:0a:1d:4a:05:
56:6e:94:68:0f:0d:59:7a:5f:47:4d:d6:60:43:ed:
c0:96:5f:2d:6c:d8:10:8d:25:b4:13:16:e1:43:17:
12:35:f8:30:79:d6:48:c0:91:5c:d7:aa:5f:e4:a9:
ad:2a:39:4d:d0:64:9d:10:ec:53:a2:6d:90:b7:37:
30:cc:73:e9:9b:2f:58:08:f4:68:a3:35:9c:dc:69:
f8:b2:45:00:fe:fa:dd:03:36:a5:f1:ec:08:3f:94:
b1:22:0a:56:5a:c0:93:8d:ed:91:06:14:8f:ad:a8:
c5:1d:a6:51:87:4b:c7:37:9d:33:e1:f3:17:83:d1:
cc:af:d3:58:2e:90:8e:a7:51:85:02:c3:01:2d:8e:
09:98:29:c9:1f:69:a7:ee:60:25:01:a9:8c:12:4a:
9d:fd:d7:9c:a0:50:7f:29:ae:4d:49:61:c3:44:be:
e1:01:a5:60:61:7f:0b:c3:8a:5a:ac:00:48:e8:4e:
be:ad:1f:7d:0b:c3:73:3f:ca:12:6d:ce:c4:35:78:
d4:2a:76:c7:c6:92:05:c9:6c:a6:c2:9e:fa:f8:36:
36:01:b0:07:c7:e9:14:e1:6f:38:17:4c:8f:81:0b:
2b:e1:3b:5d:af:c0:a2:01:c7:05:fe:a6:99:4b:db:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:49:D3:FF:C8:99:BF:F2:44:93:EA:F8:0C:95:55:B2:11:14:49
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:34:e8:d5:e6:f2:34:6b:50:ad:aa:45:05:e2:cc:8f:d2:
93:56:e3:5d:ea:b8:fa:b9:30:df:de:a7:17:b3:1e:8b:35:01:
0e:5d:65:52:95:73:f1:7b:6c:28:fa:09:f2:94:12:6c:9f:38:
12:6e:c3:c0:72:87:0e:ea:ae:40:e2:7f:bc:24:59:08:09:5b:
e2:91:81:df:86:46:5e:2d:66:00:44:e7:ee:0a:d9:ca:c0:31:
17:01:57:64:7b:45:3a:ef:b5:5d:a2:9e:46:45:70:95:54:54:
70:2f:bf:20:b7:ac:82:85:0f:71:6e:d5:bc:7e:74:9c:9f:ea:
76:9d:f9:9c:a0:82:b6:b8:87:2b:71:14:e6:78:0b:45:16:b5:
66:a9:6f:53:30:07:12:91:7f:35:fb:fa:3d:45:a2:2f:8f:1b:
e0:76:24:be:6b:32:79:dc:9e:a8:31:e8:2b:ee:9a:0e:96:e3:
a6:1e:ae:18:9e:df:55:70:54:94:b5:cc:c2:ff:12:02:b5:e8:
16:01:10:3b:d9:99:fd:9b:77:16:91:6f:7c:54:bf:2f:a3:15:
60:6a:58:46:e6:bf:cf:8a:6d:4b:d7:47:72:53:6a:b5:f4:00:
29:54:1e:61:9c:ab:7f:83:12:ff:a4:df:38:f0:9a:15:c0:ae:
ff:eb:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:40 2026 by rpki-client