Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: Ka3qHnjdc240Z/BkTHaLwGed88t0GAiQQdZst3IKEBY=
Subject key identifier: 63:AC:91:3C:1C:E2:4F:29:D3:00:40:A3:D4:95:5C:79:4D:D8:D6:F9
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 01A1502CA3451FB1048F26A21FA4333E9692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 0928
Signing time: Sun 18 Oct 2026 18:01:04 +0000
Manifest this update: Sun 18 Oct 2026 18:01:04 +0000
Manifest next update: Mon 19 Oct 2026 18:01:04 +0000
Files and hashes: 1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: hJ0AUNweUHnD3lsVzCzoSbyY71DvY52r9fkiqdMVbgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:2c:a3:45:1f:b1:04:8f:26:a2:1f:a4:33:3e:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Oct 18 18:01:04 2026 GMT
Not After : Oct 19 18:01:04 2026 GMT
Subject: CN=63ac913c1ce24f29d30040a3d4955c794dd8d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:19:77:b4:b1:41:5d:52:3a:d0:ae:8f:df:
dc:45:e2:0a:26:e8:c4:b2:b2:40:7c:03:87:6b:0e:
70:51:d9:15:d5:10:52:fa:0c:c0:83:db:3f:0d:77:
3c:75:8e:ee:bc:6b:19:ba:95:71:01:17:a1:65:5f:
28:78:75:7f:8d:77:5e:37:08:27:78:bc:88:f1:1f:
76:1c:e0:a7:9f:c0:7e:26:73:6f:15:20:fa:bd:98:
53:cc:8d:1d:fa:9e:de:4a:c5:2e:08:17:3e:c8:32:
d0:4f:33:88:0f:22:b3:a6:a6:c7:cb:d7:ae:f8:a4:
c3:8b:9b:f2:13:97:02:97:b8:bc:f9:10:f5:2d:8c:
f7:a2:d2:84:90:eb:78:2e:2e:2b:60:dc:19:08:27:
11:99:44:98:63:80:96:1e:13:2e:7f:92:f7:78:ff:
66:d0:cb:cc:d5:83:8a:2f:7c:12:68:08:95:93:38:
56:93:e1:d9:3b:c9:bc:69:02:e6:bd:19:a1:ee:c5:
43:c6:70:b3:7e:b2:a5:93:6d:6f:09:91:c7:53:ce:
cd:a4:a7:66:60:c4:34:74:7a:9c:52:90:b0:70:f5:
9a:e4:79:73:69:fb:7d:ba:91:d4:cd:ee:d9:30:10:
9f:b9:65:d2:56:17:c6:46:38:81:10:ff:18:be:50:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:91:3C:1C:E2:4F:29:D3:00:40:A3:D4:95:5C:79:4D:D8:D6:F9
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:22:6e:aa:7a:2c:f5:b3:5c:d3:e0:21:8b:e0:90:3b:3d:88:
7a:2c:52:9b:21:f1:b5:4d:6d:56:db:af:47:b0:ee:33:0e:f8:
85:98:15:4d:10:96:75:84:4d:74:d0:01:47:e6:55:77:89:52:
1b:7f:3b:ad:63:3d:53:06:0c:84:d4:27:d5:9b:63:0d:30:0f:
65:99:ec:9a:15:3c:b7:4b:55:c6:ce:69:96:45:d5:c3:8f:d5:
c3:75:ea:4a:54:d4:db:34:64:11:00:c4:c5:80:0a:de:e9:82:
9a:12:11:96:00:2b:71:5a:e7:99:c7:ad:84:0c:8a:d3:34:2a:
e5:c7:40:07:f9:a5:1f:34:ad:24:df:82:59:79:c6:ab:d8:8c:
26:2b:bf:71:a1:64:5e:fb:ef:ee:32:90:83:a6:09:ad:9e:69:
ac:67:30:b8:78:58:87:c6:82:10:28:cb:16:c0:e7:7f:35:c4:
14:9e:bf:34:cd:7b:bb:46:1f:d9:5d:3d:23:7f:b8:98:57:9a:
22:22:76:e8:3b:67:a1:d3:c1:18:19:15:46:0d:55:2d:9e:ba:
a0:0d:2e:f0:60:8f:f0:c9:47:d6:c5:4e:37:5b:1e:55:8b:13:
e3:f5:a6:44:24:8b:33:47:81:8f:5d:a4:5e:9f:e1:3f:76:01:
fb:d2:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:31:05 2026 by rpki-client