Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: OFj5yz+qZcdhw1/bY2DLM/RFrabRIQxAVKSWqPiZ2Oc=
Subject key identifier: 52:96:87:0F:76:94:90:2C:B9:EB:02:26:2A:70:E0:F8:62:4A:C3:10
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 01A0CE91E548E0322D0D0E53FCCE39AE303E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 099F
Signing time: Wed 23 Sep 2026 14:01:02 +0000
Manifest this update: Wed 23 Sep 2026 14:01:02 +0000
Manifest next update: Thu 24 Sep 2026 14:01:02 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: N61vNJqZpY6wIQ9lyoBBvsXNzkjjjVj1DE+327k/+1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:e5:48:e0:32:2d:0d:0e:53:fc:ce:39:ae:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Sep 23 14:01:02 2026 GMT
Not After : Sep 24 14:01:02 2026 GMT
Subject: CN=5296870f7694902cb9eb02262a70e0f8624ac310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:98:09:0e:3a:4c:43:30:53:7b:dc:ce:75:
e1:fd:55:4e:1f:21:2d:79:47:fb:47:00:ff:56:67:
1d:2e:fa:53:f6:33:48:41:6a:64:93:12:f9:00:2a:
fd:b3:86:bd:37:69:3e:b2:04:17:75:b3:6e:3e:e4:
f6:2d:6a:3d:cf:b0:f0:86:d9:db:84:68:79:e4:20:
6d:76:aa:88:03:e1:4c:3f:79:90:8b:7f:b5:e8:69:
87:0d:0f:76:e4:1d:22:a4:7b:64:64:17:0f:96:65:
2b:d1:d1:6a:97:57:db:8e:52:26:23:b3:62:5c:25:
ce:3f:9d:df:ee:25:13:cd:8c:b2:bd:3e:a7:0d:10:
b3:67:cc:a6:7e:fa:7a:3c:97:94:57:d1:98:31:99:
48:26:cf:ce:9e:fd:a7:af:d0:75:10:6c:e5:72:bc:
6d:67:6e:9c:04:a2:dc:66:46:d0:c6:6d:35:a8:9a:
45:42:79:0f:c9:c5:b8:e7:e6:21:4d:04:1f:e6:50:
f1:da:63:5e:80:48:5e:ff:ae:55:0c:4a:12:fa:d6:
dd:74:cd:e7:c6:74:15:47:6f:5c:03:14:c2:44:10:
f7:9f:74:fc:72:30:1e:49:a3:21:46:79:16:1e:77:
5b:43:ab:aa:ac:b6:91:0f:65:22:99:5c:02:eb:fd:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:87:0F:76:94:90:2C:B9:EB:02:26:2A:70:E0:F8:62:4A:C3:10
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:97:47:92:f3:51:2e:26:50:14:a6:ba:f6:ef:9a:13:10:
7f:ae:d2:f8:69:7a:3b:a7:f7:42:6c:31:0a:0b:9e:cf:b7:b2:
92:f5:5e:71:66:6a:95:5b:05:a5:54:4d:2c:56:fa:12:21:5a:
e1:a3:5b:45:c6:81:7b:0f:c7:8f:64:21:88:f0:50:a9:0f:74:
53:9b:1b:f0:0a:55:0c:aa:55:1c:b8:1e:16:6b:58:29:e9:2d:
7c:0a:98:0b:72:39:31:0d:3f:bf:02:b5:ab:d4:a3:65:c4:c8:
ef:03:ae:18:48:f4:ee:69:86:27:8c:85:37:12:41:42:ed:cf:
63:8a:db:f7:77:03:22:1c:4b:1e:7b:4e:05:5e:c6:b0:12:7d:
57:d7:0f:8e:1c:47:f5:27:90:12:86:c6:66:0f:48:15:a5:ad:
c7:a1:ec:c7:fb:2a:00:6a:5e:58:e2:96:5f:12:06:21:97:7e:
84:79:3e:87:46:a4:bf:59:31:88:6b:85:85:a2:ad:54:ad:b9:
58:1f:be:99:09:b1:56:69:71:a4:2b:4b:e9:de:9c:9e:4e:56:
cd:fc:02:9b:e4:f0:97:36:50:7f:4c:47:55:dd:68:f8:2e:52:
09:f7:b5:5c:15:f3:9a:0d:9d:74:de:b8:5b:cb:11:ea:c9:c0:
cf:ed:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:06:17 2026 by rpki-client