Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: wP9vJA7QKPJ9n7fqWNmrB8nhwAZgt73JhH82tUgg+8I=
Subject key identifier: BB:6B:CC:A4:78:4E:A4:0C:35:C9:F2:84:A4:BC:F8:6B:CC:E5:04:AD
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01A0BDD51F5067CE7A66BEFCA71D4FCF3601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1807
Signing time: Sun 20 Sep 2026 08:00:56 +0000
Manifest this update: Sun 20 Sep 2026 08:00:56 +0000
Manifest next update: Mon 21 Sep 2026 08:00:56 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: +8pC2Xwm6zFnZ2/ECcFR1+fpKIFXZ/tS7hh47/IXZ5Y=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:1f:50:67:ce:7a:66:be:fc:a7:1d:4f:cf:36:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Sep 20 08:00:56 2026 GMT
Not After : Sep 21 08:00:56 2026 GMT
Subject: CN=bb6bcca4784ea40c35c9f284a4bcf86bcce504ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:99:c4:eb:98:30:91:da:c5:19:46:5d:8b:
29:d2:b5:cf:0a:c9:9b:d9:0e:24:20:75:57:35:26:
6d:81:03:f4:88:48:fc:fd:e4:cd:bb:a2:df:f0:89:
76:9b:3e:78:db:2f:9e:a2:12:12:3a:35:36:2e:14:
93:6c:05:1e:44:cc:e7:0f:6b:71:ab:07:63:28:ff:
01:15:c2:38:fc:dc:a2:04:6d:9f:e2:2d:75:68:bb:
3f:73:1f:fe:8d:c4:01:60:0a:2b:56:ce:bb:53:41:
e0:7c:7f:38:e0:bc:31:88:f3:7e:88:2f:0d:1d:9f:
2b:52:9f:dc:8d:74:76:95:90:a7:9b:6f:53:b7:5c:
46:a2:f9:ff:16:8a:ce:c3:14:68:d6:30:06:95:94:
eb:c2:fc:66:42:eb:86:a1:3d:f4:3f:ca:a2:b8:b6:
d7:cb:5b:a9:03:ed:24:65:eb:77:61:80:44:0b:4b:
4f:96:ef:7c:25:3b:3f:44:37:ea:97:25:29:ea:dc:
e1:f0:8a:d0:1b:32:5d:15:ed:16:33:a5:68:ea:6f:
0c:70:d2:cb:1f:b3:81:a1:00:f0:d1:da:05:bb:1b:
3a:62:1c:0b:61:ee:dd:d2:ba:ea:00:1b:8e:55:3e:
3e:91:4e:23:2e:df:36:42:62:d6:bd:84:8b:39:fe:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6B:CC:A4:78:4E:A4:0C:35:C9:F2:84:A4:BC:F8:6B:CC:E5:04:AD
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a4:53:b1:c9:3b:1b:c0:1d:85:ed:f7:81:45:b8:c3:45:1b:
6c:43:47:27:d4:ad:ef:0a:1e:85:27:d2:0d:ec:e9:09:63:9d:
ab:f6:c3:8f:70:3d:e9:a9:f5:ea:23:5d:4a:d4:5b:50:57:3b:
f2:2d:d8:7b:5e:f5:50:0d:2a:90:d1:59:db:6a:44:10:44:e0:
f2:64:d2:a8:01:40:d8:bf:e1:96:fc:71:57:1f:46:fa:31:d9:
91:df:d3:0d:2e:99:e1:50:3a:ad:98:ca:66:6a:aa:66:36:c6:
79:cd:29:7c:4b:cb:9e:87:68:03:b6:9a:39:22:31:12:69:e1:
29:49:a1:14:d5:81:f3:2a:69:02:9e:83:13:1d:aa:18:7f:41:
dd:00:27:af:4a:09:40:36:a6:98:6a:93:48:62:3c:de:e0:8a:
73:d3:29:ca:43:30:93:33:fa:1c:cd:74:bd:f6:ed:63:3f:34:
a3:19:19:0a:5c:8b:59:df:44:ae:80:23:73:65:cd:db:78:6a:
6f:58:f0:1c:83:91:92:e4:46:f7:a4:03:d7:13:31:f9:07:1c:
f7:09:ef:ed:e4:41:62:b4:36:6f:b6:a9:0f:4c:3e:cc:6f:e7:
c9:0f:db:ea:ad:9e:e0:48:13:00:78:ea:0f:7b:2b:28:7d:52:
69:5e:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:44 2026 by rpki-client