Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
File: lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft (raw, json)
Hash identifier: uHj4TNf9ABjHZk7A/KaebrKCi6X/wkIEp1BysRqqCv8=
Subject key identifier: 25:A8:DE:18:74:48:D5:8C:5A:C2:FE:7D:DF:A6:69:70:4B:39:E7:76
Authority key identifier: 94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
Certificate issuer: /CN=94bd5921933292a2f93e049f8b81fb7650301c67
Certificate serial: 01A0CD4830136CB16CD13DD6DE4E40FB89F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
Manifest number: 0144
Signing time: Wed 23 Sep 2026 08:00:55 +0000
Manifest this update: Wed 23 Sep 2026 08:00:55 +0000
Manifest next update: Thu 24 Sep 2026 08:00:55 +0000
Files and hashes: 1: lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl (hash: +yC6OglAWX9V3mimZuUQZvkZWKdcMoX8YMUGs10MmYc=)
2: xITKiIhMJqr64QWowOp5Oos94Ts.roa (hash: 0jGjhsogZ02DOgH0lYdyo4DGk9IGywTmUiv2U/qvPr4=)
3: zzQCv-E1bq6Vad6HBjZl3qZJnBs.roa (hash: GpwoA2VX03zH2zUpZrOb1rRxnrDXnBgehj8lNRuizXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:30:13:6c:b1:6c:d1:3d:d6:de:4e:40:fb:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bd5921933292a2f93e049f8b81fb7650301c67
Validity
Not Before: Sep 23 08:00:55 2026 GMT
Not After : Sep 24 08:00:55 2026 GMT
Subject: CN=25a8de187448d58c5ac2fe7ddfa669704b39e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:1e:7d:4f:c8:78:68:8a:3f:8e:df:88:d2:
a7:95:2f:e0:b2:5d:02:86:f3:8e:3d:ea:c6:73:53:
ed:f6:6b:7d:85:33:9e:c1:68:26:bf:8d:3b:90:92:
18:f2:a8:e6:ff:29:6e:9f:94:ff:8c:88:4f:7a:29:
ce:34:21:b7:34:9c:29:f2:34:3f:69:b6:cd:20:e1:
01:cc:a9:02:17:18:10:db:5c:58:81:b2:dd:ca:38:
96:14:0c:e0:dd:e9:c4:c2:f2:41:a1:02:02:b9:0b:
c7:20:23:f3:14:7f:36:58:e8:e1:3b:be:77:47:ce:
ad:eb:6f:6e:6c:f6:e8:f9:e5:fb:15:20:ad:e8:3e:
9e:91:13:0c:23:e5:03:55:f2:a4:6b:cb:13:4d:2f:
ac:b5:b0:9b:e0:e7:47:dc:4f:37:e8:ae:6d:87:87:
eb:d6:ca:5e:4c:6a:e0:91:60:8d:b4:b7:9a:67:16:
38:76:44:92:72:2e:cd:b1:0e:ce:2f:ba:2f:5f:0c:
cc:49:35:21:d3:a5:53:11:e0:68:b5:01:4b:80:d0:
33:58:4c:61:c3:bf:41:1f:b1:f4:1c:3b:6b:ee:c8:
24:5c:63:b7:2b:05:22:c8:55:55:43:89:18:74:68:
05:48:fc:fb:2b:d5:d1:6e:57:c9:b5:f9:06:f8:5f:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:DE:18:74:48:D5:8C:5A:C2:FE:7D:DF:A6:69:70:4B:39:E7:76
X509v3 Authority Key Identifier:
keyid:94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ab:c5:55:43:17:75:b9:fb:a4:a0:57:b6:b4:03:eb:5d:c6:
4c:1c:f8:bc:88:94:5e:5e:a2:9b:65:16:1b:44:83:2c:27:6e:
fc:08:d4:86:35:ee:6b:bb:44:a6:8e:87:de:20:63:28:c1:fa:
86:33:c5:f7:d8:f2:bb:8a:35:93:30:1e:a0:23:e4:1e:5a:fa:
46:4b:ff:f0:c0:c2:b2:92:9b:46:32:68:da:1d:2e:25:05:ff:
51:da:e2:d0:5c:e1:91:1d:26:b7:a6:8b:e9:e8:55:f8:c9:d5:
a1:5b:e1:b7:cf:65:48:41:da:c8:58:2a:1f:aa:08:e2:52:eb:
b8:c0:3a:52:7c:c5:35:3d:77:62:80:b1:c9:e4:90:51:dd:30:
28:ed:e5:dc:6f:e3:0b:c0:6c:02:20:b4:7d:04:61:69:c2:06:
30:73:9b:c3:ed:09:91:97:ec:04:96:3d:b5:0f:7b:70:a8:55:
22:02:ed:2d:0d:fc:19:d8:b1:c2:3d:78:a3:35:dc:26:5b:ec:
ae:f6:bc:64:03:6f:67:cf:09:19:e6:3a:0f:2e:79:14:c7:22:
77:31:75:82:2c:e0:df:20:63:41:aa:fa:75:a4:8e:19:5f:fd:
d4:d7:cb:3a:46:9d:c4:3d:ac:77:21:cb:e3:f0:10:6f:52:5e:
78:a3:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:47:59 2026 by rpki-client