Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: m1sWpSGJxv7AhzeQjuBGkTNU66/YqMxjYpNM24PJBhU=
Subject key identifier: BF:1C:E4:AA:86:27:C9:1A:65:BA:CB:7F:01:F5:FE:E0:60:0F:B7:3A
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 01A0CCDA1B65B5335E0D865295E5E7D9FBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 19EB
Signing time: Wed 23 Sep 2026 06:00:40 +0000
Manifest this update: Wed 23 Sep 2026 06:00:40 +0000
Manifest next update: Thu 24 Sep 2026 06:00:40 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: kwbNkHe/KE432FEfLepbO2XGd3G9bEgPJfjpc1n3lq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:1b:65:b5:33:5e:0d:86:52:95:e5:e7:d9:fb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Sep 23 06:00:40 2026 GMT
Not After : Sep 24 06:00:40 2026 GMT
Subject: CN=bf1ce4aa8627c91a65bacb7f01f5fee0600fb73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:73:09:5c:3e:94:a5:51:0c:4e:25:29:3f:
84:08:0a:42:87:47:af:01:da:b0:6f:6e:a4:a9:a1:
85:97:c6:75:bb:6e:9a:c5:b7:aa:06:2c:0d:78:24:
e8:94:c8:8a:ec:2c:b8:8f:b2:12:47:d8:6d:e5:ce:
d0:98:59:21:2f:e0:f6:8b:0b:53:fe:43:26:51:1b:
45:15:32:26:b5:45:80:34:44:7f:fe:57:b1:0f:10:
56:e1:a9:5a:c9:89:ef:d0:21:cf:c5:5c:f5:2d:b7:
7b:ab:0a:5c:5a:7b:5e:7c:15:4d:04:9f:2e:18:5c:
d3:c4:0b:79:c5:a1:eb:20:d2:76:d5:7e:73:94:06:
53:f4:8f:7d:ec:68:94:40:73:a7:48:d2:4c:86:ec:
12:02:2a:f4:09:73:bf:c3:ca:14:c6:f2:7c:34:41:
3a:f1:63:32:ba:51:ef:0d:11:3e:9f:47:29:c4:b5:
b8:b1:3e:a6:05:eb:86:6d:cc:e2:fe:10:57:db:8e:
ef:2d:9b:0a:34:12:0d:8a:e6:69:27:3f:bf:35:69:
95:c5:e8:5d:e2:09:59:ce:e2:e4:11:40:23:55:9a:
5e:03:ed:92:32:98:c0:cc:cd:03:b7:b7:66:47:4f:
3c:fb:53:db:ca:4a:82:43:d0:ff:da:57:00:2c:9a:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:E4:AA:86:27:C9:1A:65:BA:CB:7F:01:F5:FE:E0:60:0F:B7:3A
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:67:67:6e:87:3b:e5:b9:43:f7:cb:40:cb:7c:31:e2:be:80:
81:b4:35:59:c4:85:f0:80:96:96:cb:a8:8b:7e:83:4f:70:d9:
70:1f:54:08:91:17:6e:c3:3a:06:50:8c:33:0d:8d:f7:35:bb:
c5:ca:9d:8b:63:3b:41:ed:fd:c5:ae:cf:47:90:4e:48:a2:6f:
de:28:99:39:53:78:b9:92:6e:e3:d7:1b:93:26:50:33:e5:af:
0a:80:a5:0b:b0:90:4d:1d:7f:f6:ec:b8:a6:77:fc:80:5b:4a:
f5:7c:ae:68:dd:f5:37:09:ef:be:b1:5f:11:d3:74:af:7d:fe:
ca:5c:dd:c2:b8:f6:bc:b4:84:39:94:a2:fc:41:a6:b2:31:50:
6a:d3:34:f8:5f:cc:3b:00:72:10:e7:2f:e9:03:a3:63:24:d5:
21:32:31:96:7c:da:b4:05:ac:90:66:db:e6:96:22:b1:0a:59:
bf:ba:8b:d8:6f:cc:fe:60:5c:b8:6f:bb:fc:58:16:ea:9c:d6:
10:2e:28:07:ce:2a:9a:10:50:7a:70:38:6e:59:23:90:a8:4b:
a6:a0:c4:14:e3:e2:0c:84:f7:bd:a8:41:44:67:2f:3c:0c:cb:
1d:86:3d:f3:0b:3d:9b:ba:35:54:27:3a:9f:c5:93:1a:b5:5e:
56:69:e5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:00:00 2026 by rpki-client