Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: 9GJ4UA6acQisD9gvYW1S5nt4DS/D4vHXTDMAE4388KA=
Subject key identifier: 3C:97:D1:AC:53:CF:68:AE:D7:F0:35:7B:F1:BB:F3:6F:63:D4:18:16
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 01A0C17B08A2DF29D5F81B91D9F2413A7ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 0249
Signing time: Mon 21 Sep 2026 01:01:00 +0000
Manifest this update: Mon 21 Sep 2026 01:01:00 +0000
Manifest next update: Tue 22 Sep 2026 01:01:00 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: x2P5JMVNUwuwcABMWefI7AzZVlauAsAM6DE4Al3/ld4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:08:a2:df:29:d5:f8:1b:91:d9:f2:41:3a:7a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Sep 21 01:01:00 2026 GMT
Not After : Sep 22 01:01:00 2026 GMT
Subject: CN=3c97d1ac53cf68aed7f0357bf1bbf36f63d41816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:bf:76:67:0b:86:49:cc:c4:3a:fa:ab:50:
d9:b5:7c:5d:aa:29:8e:e6:98:a7:ea:a1:94:a4:ed:
2d:24:bf:e1:c0:57:85:dd:3f:d4:52:e7:cc:08:4c:
f2:fb:89:44:63:f8:10:54:18:ff:c0:ce:d2:0a:be:
c1:2a:b4:bd:16:4b:ed:1e:94:ba:a0:bc:32:0f:a3:
ce:a7:c2:87:f1:a9:a7:6c:6b:97:ba:b5:d4:5d:a6:
a7:24:8e:36:f4:ec:9c:d5:65:38:b6:60:38:f4:dd:
d6:a8:42:14:b7:01:1f:63:c2:ac:b5:7c:65:47:9b:
19:29:b1:9a:f5:88:6e:12:cb:5c:75:cf:88:5f:f8:
2a:ec:76:0e:62:b5:07:cb:e0:db:51:74:ab:06:f3:
9f:3e:9f:cb:99:68:5b:6d:49:cd:19:83:2b:f7:9f:
db:51:5d:88:13:7a:4d:ab:f6:d5:a7:ce:33:28:95:
47:60:3c:5f:5a:a0:ff:87:ce:35:dd:68:ce:08:4f:
59:3a:b6:8f:ca:ce:6e:ed:0f:b8:e1:48:9e:79:7e:
b0:2c:bf:81:9d:da:ea:31:9a:65:a4:55:f3:77:50:
10:a8:94:a3:18:d3:12:21:e4:6a:51:e3:92:f2:18:
6d:36:f9:c7:a0:5d:03:de:34:d9:c9:38:e7:50:8d:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:97:D1:AC:53:CF:68:AE:D7:F0:35:7B:F1:BB:F3:6F:63:D4:18:16
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:3f:c5:d5:18:bb:b3:be:cc:f4:a0:9a:94:8a:4d:d7:db:
34:4e:f2:4d:85:67:ee:76:a7:bc:de:1f:39:c6:28:4d:8b:98:
79:92:ba:f7:ec:d6:0b:49:79:68:d9:a4:c9:8c:31:a1:ce:96:
c2:fd:38:9e:13:32:8a:52:c2:8f:20:77:cb:7b:a6:fe:c2:57:
43:65:36:f5:28:18:d5:85:b1:9a:cf:18:02:76:d8:66:f4:4d:
f6:6a:71:75:df:bc:48:f7:a2:97:92:7e:cc:0d:39:6c:5d:44:
5e:b5:06:16:3c:cd:7e:d1:89:ac:f3:48:59:35:cf:09:09:a3:
a9:0b:1a:cf:cc:9c:61:da:6b:ee:82:49:b1:71:fc:a2:04:ae:
1f:4f:90:80:9b:2b:6f:a8:d6:bb:e5:ef:36:49:90:bf:28:5c:
af:9d:2e:6a:13:fa:f4:42:d8:2f:81:5e:d6:7e:25:d4:5b:40:
27:57:e6:47:f1:95:46:db:59:1d:38:99:c9:27:ec:5f:8c:12:
39:45:7f:98:37:bc:e1:99:10:7a:fe:5b:23:d1:f6:6c:97:02:
e9:51:34:2a:04:17:e1:a3:13:d0:ed:6f:a5:ef:fe:bf:af:88:
54:62:fb:20:68:e6:07:58:15:ae:6e:ef:21:87:76:1a:a3:ef:
49:56:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:08:44 2026 by rpki-client