Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: Pwp5S+MU0hS+Y09xmNw+ACdQQzbporwMgdQ1owVpMWo=
Subject key identifier: 23:DD:5C:DC:62:66:74:86:FC:DE:4C:52:72:CC:EF:72:F0:5E:69:91
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 01A0DC84E1AB7697F347D8F2183C9A0CED77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 11B7
Signing time: Sat 26 Sep 2026 07:01:31 +0000
Manifest this update: Sat 26 Sep 2026 07:01:31 +0000
Manifest next update: Sun 27 Sep 2026 07:01:31 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: QwINhcg78C47r7gH0J+9lAACUptgUN3qRvK+bP6JsYY=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:e1:ab:76:97:f3:47:d8:f2:18:3c:9a:0c:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Sep 26 07:01:31 2026 GMT
Not After : Sep 27 07:01:31 2026 GMT
Subject: CN=23dd5cdc62667486fcde4c5272ccef72f05e6991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:92:3c:c9:13:e8:63:a6:df:fa:1b:14:93:
c3:4f:09:7b:2e:ad:98:78:12:42:18:85:09:a9:f0:
99:05:ab:54:65:72:09:32:96:38:15:4b:17:ac:c9:
56:fb:74:3a:01:d2:10:b9:68:d9:23:0a:a1:e0:58:
ee:10:5d:e8:16:31:e4:99:15:2b:1e:a2:48:79:08:
14:7f:39:5f:a9:7e:37:44:64:7f:58:49:27:61:31:
17:bf:5b:b0:af:26:12:c1:db:93:29:e0:15:69:26:
ba:40:ad:2e:a5:59:71:e5:b2:74:77:ae:df:ab:f5:
20:b3:5a:67:b7:55:ae:21:83:b9:7f:c6:b7:8b:ab:
91:e8:db:70:bc:55:5f:c6:f9:29:81:37:ab:89:8d:
50:5c:47:c9:52:73:c3:ed:d3:e2:80:1b:a8:e8:43:
86:a8:2f:c6:11:3a:bc:96:3f:07:3c:b3:3d:da:7b:
e5:1e:15:10:0a:38:f6:d2:e6:80:58:83:2a:83:bf:
42:28:4f:a7:07:a9:82:4f:88:fb:64:c5:47:d3:e6:
7a:2a:ba:2c:14:8a:a0:58:8b:be:8d:42:ae:05:67:
3f:f4:aa:67:31:81:77:b5:66:46:21:21:6d:5e:bd:
e6:ce:54:4a:c7:51:05:ac:b4:6c:4e:87:ca:ff:8f:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:5C:DC:62:66:74:86:FC:DE:4C:52:72:CC:EF:72:F0:5E:69:91
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:32:87:01:b8:8d:48:40:e9:ad:49:85:4e:00:68:8c:7d:bf:
5e:46:e5:ce:f7:aa:96:92:df:e1:43:a4:6d:22:b3:8b:96:1b:
a7:79:1b:08:fe:39:ba:2b:ae:4e:07:c8:d4:8c:e0:bc:9c:c3:
96:5d:63:94:48:03:5c:d5:dd:b4:a2:3d:22:22:50:06:8a:fa:
e4:7e:dc:4b:1a:b6:b0:3b:70:67:27:b7:f0:e2:36:5f:cc:00:
3a:3e:fb:96:3f:de:c7:7d:e0:05:d0:39:5c:79:4a:c9:8f:33:
63:17:21:03:10:16:e7:ca:79:50:b5:92:ab:71:ff:44:f9:77:
df:cd:fc:bc:4b:01:74:55:e9:fd:0d:55:91:88:7a:39:18:8c:
28:a4:80:8f:d3:a3:93:50:b1:00:6a:21:6c:f4:1e:e7:9a:52:
f3:cf:9a:b9:e5:ce:5c:54:13:06:5b:48:a3:6c:ba:97:44:78:
0c:dd:64:f3:fd:34:e1:02:38:a3:ab:39:03:33:26:cf:05:92:
aa:9a:4a:6d:47:a5:4d:9a:d9:9c:dd:97:86:9f:4c:df:4b:6f:
7b:f5:cc:55:3d:09:09:b8:6f:d0:18:45:9c:62:85:b2:1e:67:
45:14:cb:e9:3a:f4:ea:39:4c:0e:d4:d6:36:15:d4:9e:ca:b1:
70:3f:0c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:16:34 2026 by rpki-client