Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: GqZR+BqQzWcQcJMpdDFKqELTfXAgt4iWnwxItPOg1aI=
Subject key identifier: F7:8E:AA:09:DD:41:2D:7C:7D:78:49:BB:0D:B8:7A:F3:76:19:57:D7
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 01A134B501A656DB963267FAF0CB43833CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 0453
Signing time: Tue 13 Oct 2026 10:00:39 +0000
Manifest this update: Tue 13 Oct 2026 10:00:39 +0000
Manifest next update: Wed 14 Oct 2026 10:00:39 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: ffTjlax2L3_qkeVG4NxzMjhK28c.asa (hash: Qu/y5WIIF9VY4B8JNEet75dDX2mW7ndSyJhDDiWSFNA=)
3: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: sRv3XjMoCBnAnF4Fo+jZS50eRf/NYkL6dX7v+NXGSmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:01:a6:56:db:96:32:67:fa:f0:cb:43:83:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Oct 13 10:00:39 2026 GMT
Not After : Oct 14 10:00:39 2026 GMT
Subject: CN=f78eaa09dd412d7c7d7849bb0db87af3761957d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:8b:0f:16:c1:9e:85:60:7f:48:35:fd:13:
ae:da:88:53:b6:d5:ce:c1:60:1d:d7:c0:03:c0:88:
23:e2:c6:33:0c:50:a3:e7:05:7d:90:d9:f3:29:d9:
6e:c4:4e:24:b6:cf:bc:ec:4d:bf:e3:85:4d:0d:d2:
71:83:cc:dd:75:05:6b:45:20:57:af:83:93:17:e3:
7f:f8:b4:dd:d7:49:1a:18:98:00:c1:5d:fe:cc:31:
e0:c8:bb:57:85:28:92:33:b2:a0:75:e0:ea:a8:54:
97:4e:9b:8a:3b:e2:70:44:c2:05:b7:77:a1:ca:f0:
f0:78:18:91:35:e4:63:28:d3:bf:c1:3f:4d:f1:4e:
19:d2:48:fb:ca:22:3c:04:34:e8:ff:30:5b:3b:e4:
c3:93:cd:48:ce:c2:28:c0:a5:58:c0:2b:d8:31:78:
cd:88:a7:f9:f7:1e:9d:d5:a4:81:10:76:27:c1:5a:
a0:91:de:8a:a6:2a:d8:9e:9e:80:88:88:ce:8b:2f:
2e:4a:c7:87:6f:d6:f3:83:39:70:b0:f3:ce:d8:4f:
58:70:73:c5:7f:71:b1:ef:c1:6b:10:18:8b:01:a3:
b1:19:61:51:c7:74:9e:24:4f:fe:f7:4b:b3:a9:57:
9a:eb:5a:2c:96:08:03:e8:52:41:16:ca:d2:47:a7:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:AA:09:DD:41:2D:7C:7D:78:49:BB:0D:B8:7A:F3:76:19:57:D7
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:1f:8c:90:8c:5a:e2:58:1f:a8:6f:d9:90:78:49:39:d1:70:
6d:02:38:1d:f4:43:64:e8:83:42:8d:a9:82:c4:6c:68:04:16:
3a:fc:d7:e5:0b:38:65:5a:33:1a:8d:c3:fe:ee:e6:0b:aa:7e:
ad:92:52:b7:4c:70:fc:ca:65:bd:2f:38:c8:16:fa:5b:37:32:
ba:a9:25:b7:1d:e0:17:ad:23:d7:3c:da:be:b3:27:77:f8:1b:
aa:26:c7:9f:63:2f:b3:39:fb:80:c2:c4:d4:d9:15:31:2e:c2:
ca:c5:f7:ee:f0:4a:d3:ca:0c:19:82:dd:89:b1:a0:d9:86:ad:
ad:a2:4a:1a:0b:78:7d:04:54:e0:4a:e6:5f:f8:9a:a6:02:1d:
68:fb:6b:82:c7:ab:63:63:06:8f:54:7d:b3:cc:f1:4d:67:20:
00:3d:7c:f5:6d:5f:4d:23:1f:b2:0e:fe:60:91:5c:0c:2e:d7:
06:31:bd:76:f1:63:48:7f:a1:3a:8f:1b:3e:1f:69:59:27:3e:
3f:b2:43:cd:07:8f:eb:ba:e1:c0:39:69:51:56:2d:af:37:57:
66:e0:99:65:68:22:fc:b2:d2:45:9e:cb:6e:c9:91:91:6a:f0:
a9:b5:a7:fc:ab:fb:bc:26:31:37:7f:3c:bc:02:8b:2b:40:a9:
88:81:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:59:31 2026 by rpki-client