Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: qzgXfolECJfuCV0auRQweLeRtELODGsB0WZwKZ8ji+8=
Subject key identifier: 0E:55:AD:D0:AD:73:9F:C9:23:D3:DD:3B:60:9D:80:E5:FE:CB:95:20
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 01A0E1071E7865BF6A1D406CC0D30CEC525A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 04:02:15 +0000
Manifest this update: Sun 27 Sep 2026 04:02:15 +0000
Manifest next update: Mon 28 Sep 2026 04:02:15 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: 1XWsIjleHcueZl99n+p/Z3ohP+2quCwsuC4VdLV3bKo=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:1e:78:65:bf:6a:1d:40:6c:c0:d3:0c:ec:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Sep 27 04:02:15 2026 GMT
Not After : Sep 28 04:02:15 2026 GMT
Subject: CN=0e55add0ad739fc923d3dd3b609d80e5fecb9520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:be:2a:10:c5:74:c0:75:a4:29:15:36:f5:
c0:7c:0c:94:82:93:07:bb:49:70:98:5e:e5:69:61:
8d:82:e2:02:40:e0:86:4b:8a:7b:e3:6b:ef:e4:aa:
aa:be:19:3a:d8:93:03:95:f3:58:2c:a1:90:82:8f:
50:bb:b2:4f:11:84:da:be:49:5f:fa:4f:9d:e4:40:
7a:75:d8:bb:3b:39:6b:27:3b:2c:d8:48:65:79:8a:
07:ce:3a:a8:36:fc:f6:e7:f9:a2:5e:64:23:ee:f3:
7c:a2:94:84:c7:fb:a1:8a:39:6f:b9:48:6e:c8:da:
7c:11:1a:10:ba:b7:c9:e5:70:02:67:6a:24:d1:09:
eb:8f:49:74:32:d9:12:76:10:45:ca:45:90:0f:f3:
ae:e7:c9:f8:ce:43:16:3b:94:b8:2d:e6:b0:ea:26:
ff:07:cf:20:04:b2:aa:4c:97:13:5e:c5:bc:1d:30:
9b:1b:2c:23:4f:86:ac:d8:7a:dc:15:a2:0d:b1:60:
24:96:b1:27:f0:66:3c:08:bc:5e:72:fa:0e:98:df:
0e:e3:f1:2f:e1:fb:14:7b:a1:0d:24:92:48:0b:41:
b2:6f:17:2b:f3:75:13:46:59:9c:6c:19:27:7b:3b:
3b:7e:f4:37:ad:9c:7c:13:27:2d:af:b2:14:0e:b6:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:55:AD:D0:AD:73:9F:C9:23:D3:DD:3B:60:9D:80:E5:FE:CB:95:20
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fb:fe:73:cf:48:52:26:9e:68:24:ef:36:9d:56:7e:ca:ce:
db:49:74:e8:bb:33:38:5d:e9:45:95:7c:94:4f:b2:c2:03:56:
f6:7f:95:40:20:c5:8a:49:46:a6:8a:f7:0b:4f:16:21:52:66:
45:b4:32:15:9b:46:3d:59:72:8b:66:51:17:c2:56:e4:c0:7b:
33:68:68:25:58:d7:fc:87:09:af:93:86:0f:eb:ab:5c:5b:94:
4f:46:35:58:ff:3b:8b:44:65:5f:a9:e8:55:f1:2e:68:c0:e6:
b1:c0:83:ed:b5:4b:72:2a:21:53:e9:f8:39:bc:ac:a8:db:cd:
06:ae:d5:c4:87:e7:cc:8d:95:05:ab:9f:4b:fd:cf:fd:8c:fa:
17:ae:d3:94:e8:6c:e9:64:71:d3:26:44:67:df:a0:6c:46:26:
4a:a6:36:20:58:49:b6:af:e2:8e:2b:13:7f:4a:29:4f:c3:06:
b5:96:5c:7c:d9:f2:9e:17:93:57:2f:2d:af:03:32:37:03:ff:
c6:81:92:72:e5:31:0c:10:b3:0d:76:3d:07:63:e1:c2:5c:ce:
ee:c0:f4:ea:7b:3e:1a:69:13:c7:04:f4:91:de:42:af:62:94:
e5:77:02:16:49:ba:3e:86:3a:96:be:1d:8a:80:f5:3e:69:d3:
fa:4f:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:53 2026 by rpki-client