Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
File: lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft (raw, json)
Hash identifier: 8w2pxPIBIsml0Mtn8nrM3mY7FsmCxr3LPKqpQLIVj3c=
Subject key identifier: B2:B8:30:37:33:4C:9B:41:9F:6A:27:54:E0:86:4E:E8:1F:72:01:5C
Authority key identifier: 95:32:B4:CF:27:DC:F9:90:3B:46:49:DE:88:C7:97:95:0F:61:A5:BA
Certificate issuer: /CN=9532b4cf27dcf9903b4649de88c797950f61a5ba
Certificate serial: 01A0D4267B1A4CE1B3378AC84211BFAA4258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
Manifest number: 42
Signing time: Thu 24 Sep 2026 16:01:26 +0000
Manifest this update: Thu 24 Sep 2026 16:01:26 +0000
Manifest next update: Fri 25 Sep 2026 16:01:26 +0000
Files and hashes: 1: 6fHpinoH-uoZ3MwtNrsGqXYFS0o.roa (hash: U5hGkOCpGyQ+BL1SZ21wNhsYkEGHFrmEmNNa81QceaQ=)
2: lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl (hash: 9WV00GAoS5vd9+vKryoeyHvKe2G+fvfSaCwX4Fmu2xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:7b:1a:4c:e1:b3:37:8a:c8:42:11:bf:aa:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4cf27dcf9903b4649de88c797950f61a5ba
Validity
Not Before: Sep 24 16:01:26 2026 GMT
Not After : Sep 25 16:01:26 2026 GMT
Subject: CN=b2b83037334c9b419f6a2754e0864ee81f72015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:2b:07:e9:ad:ca:42:3d:34:d9:cc:d2:7f:
ab:cf:93:e0:0a:d2:18:63:6d:b2:2d:70:6c:f9:9d:
85:5c:49:ef:17:b3:50:10:b5:1a:f4:7f:22:ee:0b:
99:e1:0f:b8:72:a4:8d:0b:9e:be:6b:cf:b7:f7:2e:
19:38:e6:7a:6f:02:98:bd:36:d8:f8:c5:76:4b:e9:
ab:bf:07:5a:d2:29:f9:5f:65:81:0d:22:96:cc:dc:
98:3e:9f:5d:5d:88:8b:db:e7:f5:64:a8:40:f3:6a:
7a:aa:ba:13:f2:99:8b:fc:e5:13:9d:d3:15:d5:35:
54:02:ee:18:ee:82:fb:88:4c:91:73:2a:6e:91:a1:
61:fb:ba:7c:c0:52:70:9a:c0:5d:d0:2b:59:92:82:
84:9b:6b:d7:60:ca:d0:96:9f:48:8e:c7:0f:70:f5:
2d:62:9f:a4:a7:2e:6c:69:ea:90:65:d9:61:bf:dc:
44:4a:dc:da:f5:b0:71:a9:7a:36:6d:77:e6:fa:ed:
cd:8f:6d:7d:b3:ef:f6:41:c1:66:c3:f0:60:ea:fc:
e0:83:26:b9:1a:02:9c:04:1d:7e:6c:ef:4b:0c:e0:
69:8a:61:e2:38:f0:0a:c8:98:3d:8a:ca:ac:b4:a2:
3b:aa:12:97:01:98:21:ee:7d:a2:6a:17:6b:93:21:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:30:37:33:4C:9B:41:9F:6A:27:54:E0:86:4E:E8:1F:72:01:5C
X509v3 Authority Key Identifier:
keyid:95:32:B4:CF:27:DC:F9:90:3B:46:49:DE:88:C7:97:95:0F:61:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8cfd50-6658-4bfe-9c88-b3dc955d74ac/1/lTK0zyfc-ZA7RkneiMeXlQ9hpbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:1f:26:80:7b:16:1f:12:8c:32:25:9c:81:c4:24:ad:6b:
82:3c:d0:c7:6d:91:f5:8b:3b:b9:dd:33:5e:a0:02:59:3c:b5:
9c:a4:3b:35:57:c6:e3:f3:24:34:f9:b9:9c:89:a7:d3:c5:dc:
14:1e:18:97:8d:83:ea:58:19:d2:4a:28:91:03:7b:f1:c3:b9:
4e:ae:9f:a4:c3:4a:b4:da:e9:d8:7c:9d:97:54:34:be:0d:c6:
35:2c:e0:41:b8:3c:f3:0c:c2:a3:b5:d4:da:22:3a:4b:4b:f4:
1c:c6:26:ec:29:95:b1:09:12:eb:b0:e5:e0:63:35:b9:be:30:
da:6a:7f:02:87:ca:76:44:a5:b2:f9:a5:64:43:fd:36:fd:9e:
0f:c5:96:09:56:12:f0:eb:23:b6:72:10:27:56:b6:92:c2:71:
e5:67:c2:93:a4:de:f9:7e:ff:f9:7c:16:16:8a:1e:d2:54:f9:
5c:e8:97:9e:33:4a:f9:a0:76:90:27:c4:95:dd:d4:3a:37:ae:
fd:42:fb:45:ec:8c:c5:e0:96:93:8e:5d:b2:52:24:eb:50:db:
3a:c9:85:1a:3a:46:7d:b6:f7:56:8f:5e:a4:83:3e:c7:a2:6f:
16:9b:fe:a0:92:47:fb:63:4d:0c:11:11:ac:42:0f:8c:83:5a:
3a:b3:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:15:48 2026 by rpki-client