Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
File: lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft (raw, json)
Hash identifier: Kv1IevRc6hUuqPUHdUHBd8lW86SoeK5wdOvmK24kGtw=
Subject key identifier: 33:EC:D4:A9:0F:EE:23:24:9B:BD:CD:36:DA:33:F6:2D:07:EA:81:3E
Authority key identifier: 95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
Certificate issuer: /CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Certificate serial: 01A0DB0496704EF6CE9BB7264F819127497C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
Manifest number: F2
Signing time: Sat 26 Sep 2026 00:01:45 +0000
Manifest this update: Sat 26 Sep 2026 00:01:45 +0000
Manifest next update: Sun 27 Sep 2026 00:01:45 +0000
Files and hashes: 1: _wGyv0k8XO18ySIo4NGtQz8fi-Y.roa (hash: 4PptUYYXksAvbEf1d4Az+k3sicfatEKpk4yuXrS/xKQ=)
2: lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl (hash: hHIRYBY7Xvw7Pdtj380TNc9fySecjVxsECArAOC7bic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:96:70:4e:f6:ce:9b:b7:26:4f:81:91:27:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Validity
Not Before: Sep 26 00:01:45 2026 GMT
Not After : Sep 27 00:01:45 2026 GMT
Subject: CN=33ecd4a90fee23249bbdcd36da33f62d07ea813e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:83:c9:3e:4c:03:b9:ef:68:2b:dd:c6:71:
66:ed:7e:72:37:83:88:cc:e9:19:e4:9d:bd:b9:5f:
1c:16:52:44:be:38:de:b6:b3:29:bc:8a:29:28:52:
11:66:16:87:be:1e:46:09:db:62:76:3b:4c:1d:d0:
a6:ff:61:cd:41:03:7c:7b:90:2d:4a:cf:ea:22:86:
a9:e5:b5:d1:a4:64:6c:43:9b:79:97:d6:98:41:40:
9c:27:79:35:93:0d:f8:bd:63:d9:2f:fa:dd:f9:88:
fa:0b:be:81:22:57:2f:70:5d:55:57:aa:1f:9e:40:
ab:75:64:51:20:b5:e5:c7:b1:49:4e:4e:67:b7:92:
e1:d8:4c:d4:5d:95:cd:ed:99:95:80:1c:37:e8:41:
e3:5d:01:20:49:7a:4d:15:54:6a:28:a5:d5:21:4d:
4a:70:8c:88:63:dc:62:79:49:1a:80:95:54:03:d8:
f5:02:bc:3d:08:63:0e:ba:33:11:3a:f8:c5:4c:6b:
be:bb:6f:43:f0:62:15:3e:9a:42:e2:4b:d7:3e:6a:
2d:3c:b9:f8:a5:ca:c4:45:e4:0d:16:ae:a0:85:b0:
92:26:b5:ff:cf:f2:d7:8c:76:c8:f1:89:67:ea:82:
9f:61:91:42:7c:ef:9e:ff:2a:92:ed:79:f9:fc:8f:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:D4:A9:0F:EE:23:24:9B:BD:CD:36:DA:33:F6:2D:07:EA:81:3E
X509v3 Authority Key Identifier:
keyid:95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:35:a5:10:58:cc:70:1f:18:27:73:ad:06:be:6e:73:03:
e8:79:7d:de:df:51:73:78:d3:05:f8:ea:19:93:8d:b9:27:0f:
50:0e:cc:81:f7:a1:97:62:fe:28:2a:3d:41:6b:99:25:2e:e8:
a1:4c:3d:7e:6b:17:62:d5:ba:22:0b:f6:fe:7c:5a:93:41:55:
7b:ef:9c:1c:04:ca:62:a8:47:b0:88:88:ec:c6:9c:50:63:2d:
d4:8e:06:64:25:09:69:8e:e7:49:c5:bb:78:93:8c:47:d7:17:
68:7b:a9:0a:d4:02:7d:1f:dd:d8:69:48:91:6b:8d:b9:2e:a9:
31:3b:25:75:f5:c6:c7:c3:8d:66:5c:89:27:e8:16:65:19:e7:
8d:a8:03:f1:c2:9c:e3:7f:c7:17:cb:5b:09:83:1c:7f:df:d4:
f8:12:49:c5:1e:2d:54:be:1f:0c:21:9e:62:c6:3d:62:1b:35:
be:f1:a1:f5:59:6b:d3:e9:bf:1c:14:b5:e9:74:6c:d5:38:a5:
af:89:96:e9:3e:5f:12:b0:05:d2:cd:5d:e9:c7:17:75:4d:44:
74:e7:41:0e:8e:da:02:ae:cb:ca:00:dd:e5:58:74:83:12:01:
46:51:a9:88:ba:82:be:74:e2:b3:6f:04:29:9e:86:ed:b0:b2:
46:53:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:20:30 2026 by rpki-client