Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
File: lKszmh2jvU9yxzAm71jQthrSdwU.mft (raw, json)
Hash identifier: G5Qm5ViFXJvyzKU3XOTjh5RJXKEakbwmywzk52xrJqE=
Subject key identifier: 07:1E:5E:3D:83:B8:C0:EE:93:C4:39:CC:EC:06:7C:73:58:9D:AC:EB
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 01A1724AC736DFC539C6567196771E7A895E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
Manifest number: 0139
Signing time: Sun 25 Oct 2026 09:01:05 +0000
Manifest this update: Sun 25 Oct 2026 09:01:05 +0000
Manifest next update: Mon 26 Oct 2026 09:01:05 +0000
Files and hashes: 1: lKszmh2jvU9yxzAm71jQthrSdwU.crl (hash: k27+aB9b12PQ1vFa1fn3/BS28HhgpscBwL+nws4WI04=)
2: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (hash: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:c7:36:df:c5:39:c6:56:71:96:77:1e:7a:89:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Oct 25 09:01:05 2026 GMT
Not After : Oct 26 09:01:05 2026 GMT
Subject: CN=071e5e3d83b8c0ee93c439ccec067c73589daceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:4e:e4:ed:b9:4c:dd:9b:92:93:f3:33:90:
f6:13:07:8d:ec:c5:fe:d2:50:6e:fb:5a:b1:19:ca:
88:bc:b7:22:1e:21:34:ce:95:13:72:28:67:af:37:
c0:ca:56:3c:ef:ad:47:da:cf:ce:ee:e8:20:b4:44:
39:12:23:b0:9d:47:c3:b1:70:19:3a:4b:5f:4b:3f:
a5:be:c2:80:49:b2:16:0c:8e:61:e4:fe:42:7e:e2:
6f:10:16:12:9d:7e:20:af:a2:e8:b9:4c:2b:e2:68:
16:53:22:8f:de:6f:dc:04:52:d6:68:81:d9:77:9d:
e5:47:36:8c:84:2f:43:6c:51:0c:58:48:9f:2d:2e:
a5:42:fa:78:a9:89:cf:77:98:9c:9c:c1:76:e5:d6:
d7:7d:de:a2:b2:fc:20:fa:f5:99:fc:8b:f7:c3:be:
e9:8a:71:06:5e:f3:6e:7b:f1:3a:5c:98:e6:fb:a8:
e9:38:8e:1e:21:13:54:50:95:56:bb:1c:58:85:54:
29:7e:07:4a:22:9a:53:b6:cc:ab:df:77:4a:b2:84:
b7:72:ab:f3:ca:19:ec:32:0e:6d:36:50:b6:55:ae:
a0:26:a7:e2:ac:95:75:c7:30:cd:e5:f2:73:a4:57:
4b:f1:42:77:82:11:33:a7:1a:d7:80:b5:0d:e5:a2:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:5E:3D:83:B8:C0:EE:93:C4:39:CC:EC:06:7C:73:58:9D:AC:EB
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:b9:09:75:76:d9:39:0f:dd:05:92:1c:f9:3c:54:de:ae:
f9:2b:08:35:d4:e8:01:24:75:1a:d8:e0:a6:69:a0:36:ba:bb:
8a:e9:dc:84:20:d5:25:71:12:6e:9c:69:96:89:23:a3:42:2f:
7a:a9:9a:d9:e7:e1:6a:05:01:f9:0a:99:3b:01:cb:91:99:d2:
4c:e3:50:8c:a6:9e:ab:1f:c5:77:69:63:eb:eb:da:9a:2c:a9:
9c:ec:d9:55:11:71:86:e3:f0:91:1d:51:06:0c:ae:45:28:b0:
ee:96:46:db:89:0c:bb:fc:31:07:87:75:a7:13:aa:b3:e7:46:
b4:8d:4d:fe:c9:b3:aa:36:0e:ab:4a:9c:f4:d3:c0:1c:44:6b:
e2:97:3f:7a:fa:c1:8a:90:5a:16:24:7f:04:db:29:a2:ab:e8:
c0:99:fc:26:e9:58:c7:ef:87:00:77:a7:74:06:f5:5e:62:49:
f3:e7:5f:f4:ac:07:5e:1f:3c:ff:78:6d:50:33:94:50:4a:cb:
1e:5b:aa:cb:ba:b7:9c:0c:ed:67:73:e4:51:36:02:bf:89:63:
bb:a6:85:ca:94:a7:98:80:9f:49:6e:5d:51:79:c9:fd:73:97:
75:09:1e:2b:1a:cc:60:99:3a:09:cd:f5:4e:d9:2d:42:c2:8e:
38:35:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 11:28:28 2026 by rpki-client