Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: NoRGqtuW3YEw6vfxq+pMxhTF6C/ag4hI3CXeGYUGr+8=
Subject key identifier: F1:DB:DE:FE:03:A2:E0:C3:B2:D3:12:D9:F6:61:85:6E:24:CA:E3:18
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01A0D0805D500FD4ABD5EE70A5236F74AA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 23:01:08 +0000
Manifest this update: Wed 23 Sep 2026 23:01:08 +0000
Manifest next update: Thu 24 Sep 2026 23:01:08 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: cReKYMAIEMnb4UO6jUqdLDhGA6D8eDPPofUtQAnbhjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:5d:50:0f:d4:ab:d5:ee:70:a5:23:6f:74:aa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Sep 23 23:01:08 2026 GMT
Not After : Sep 24 23:01:08 2026 GMT
Subject: CN=f1dbdefe03a2e0c3b2d312d9f661856e24cae318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:c0:6e:43:ee:20:11:94:d7:d9:94:4b:7c:
64:5b:a2:1a:67:9b:50:45:51:90:4b:09:ec:f7:88:
1a:1c:b4:8d:52:14:bd:56:5d:2d:da:de:ae:ed:d5:
5c:c0:e5:7b:96:c6:4d:ad:ac:0e:fc:ea:92:cf:f8:
24:6d:e6:cd:32:ed:b3:c5:44:f1:12:5f:ae:99:51:
19:0d:d5:fc:81:33:13:6b:b3:e3:5f:e1:29:9e:f2:
d2:4f:b9:10:a7:13:a2:f8:62:20:2a:f2:a6:2d:55:
8e:01:70:77:1f:fb:42:73:f1:3e:23:1c:34:32:78:
ca:d8:08:e8:fb:55:ce:80:b6:6c:c4:2a:2f:90:43:
52:a5:26:a3:98:fe:25:ab:6c:4e:a2:21:15:b6:11:
b8:f5:68:61:c4:ad:74:e2:0e:3a:db:3b:54:2b:df:
de:3b:38:b5:8d:53:20:20:0e:82:2c:5d:fe:99:b3:
36:3a:d7:24:ae:a5:5f:92:c6:b6:7d:de:0e:9d:41:
54:10:39:cb:35:9f:2e:fc:28:a4:5b:b9:08:1f:ba:
f1:93:97:19:73:26:20:5c:c5:00:db:7b:2e:2d:5e:
7e:86:ba:82:46:e0:4f:3d:6b:46:d5:a4:d5:e6:9e:
9e:c4:ea:6e:28:8d:ae:36:e5:52:b9:7b:fc:ba:29:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:DE:FE:03:A2:E0:C3:B2:D3:12:D9:F6:61:85:6E:24:CA:E3:18
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ad:22:76:86:f1:29:70:c1:14:e5:99:c2:bc:8b:cc:15:6c:
2d:0d:07:ee:27:7e:4e:04:cf:d9:e5:05:d7:52:e7:44:6d:58:
b7:71:86:ce:93:88:e4:72:1f:20:23:44:44:44:ba:f7:26:e8:
c4:42:58:c2:e6:e0:e7:75:92:21:84:db:c8:e4:4a:d4:45:50:
d9:e8:61:06:e4:8b:b3:56:54:ef:02:71:ee:7f:17:59:78:5b:
78:7d:53:29:fc:de:c6:3d:d3:fc:1e:15:33:8c:73:8d:7f:30:
f9:8f:98:4e:1e:12:d5:d6:e2:79:ba:69:8b:37:31:fe:f2:79:
da:3f:ab:b3:5d:ff:69:36:58:65:33:61:0a:93:71:3e:1d:c2:
88:56:fd:77:99:6d:44:93:e5:9d:5b:ed:a0:52:84:7b:da:58:
f8:e5:1e:18:73:5a:d9:30:4b:66:2e:3b:8e:e0:46:7f:23:df:
01:a0:da:43:01:6a:1c:dd:8e:3b:cc:2d:36:38:6f:40:4f:1e:
dd:3f:c7:4b:a4:9d:41:a8:c9:84:3c:4d:51:98:75:57:36:5d:
7f:7e:8a:3b:ed:72:75:6d:06:f2:0b:5e:0b:23:0d:cd:db:23:
bd:3f:e3:4e:e1:b9:23:0b:19:6a:ef:9d:10:fe:33:d9:d0:34:
21:6d:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:12:31 2026 by rpki-client