Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: S4Lc0FsOBMsrnaA+p8+VNda2rOwNlBy+joo7KGUn2ak=
Subject key identifier: F9:AE:6E:66:8F:8C:70:A6:7E:E4:5A:1A:91:68:22:1E:7E:8D:1B:74
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01A0EA09C74D5934E02538F26ABF827AC3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0505
Signing time: Mon 28 Sep 2026 22:01:44 +0000
Manifest this update: Mon 28 Sep 2026 22:01:44 +0000
Manifest next update: Tue 29 Sep 2026 22:01:44 +0000
Files and hashes: 1: MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa (hash: blK8+6tOSfWU/roFJ6xx5fVNBHhlL8RA+sVhQOK1Yz8=)
2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: SmC5jnfPAulztH4F6khMfQZxxzIUCSpbeazgShi0uww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:c7:4d:59:34:e0:25:38:f2:6a:bf:82:7a:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Sep 28 22:01:44 2026 GMT
Not After : Sep 29 22:01:44 2026 GMT
Subject: CN=f9ae6e668f8c70a67ee45a1a9168221e7e8d1b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:14:a5:9a:2d:4c:55:43:fd:a4:5c:ec:8b:
ca:88:20:85:48:bf:b8:5c:ec:35:38:25:ee:f8:e9:
ac:02:02:59:21:0e:72:bc:2e:fd:fe:47:c3:a5:60:
0a:08:6e:db:9d:d8:7b:3c:45:15:02:21:9a:2c:12:
f9:d5:9d:64:4f:c7:7c:ff:91:a6:27:76:e5:44:eb:
80:44:ff:b6:84:05:21:e6:1b:06:66:dc:c2:a1:81:
f8:cb:fe:ec:26:af:c7:8c:56:98:6a:71:b1:8d:26:
78:c4:f6:b6:fa:5f:ef:0c:23:2d:0b:db:98:45:a1:
11:59:be:ac:00:0a:73:cb:38:ce:92:8f:cb:03:35:
ce:f7:6b:03:98:98:7d:fa:4d:64:5d:8a:25:b9:58:
e9:98:b4:ec:68:f9:b5:34:b7:5d:55:ee:c8:ab:a7:
21:64:9a:a6:76:d4:40:ed:ed:76:1d:e7:e5:62:d5:
31:53:f1:1c:61:9f:68:49:ed:bb:1d:9b:bd:24:88:
65:93:09:b7:49:e7:8f:cf:64:cd:e5:10:f2:09:95:
35:fb:8a:1b:1e:20:0f:a9:a2:4a:cf:0a:99:05:99:
37:36:9b:8d:45:6c:85:6f:ff:ad:95:d6:a8:b6:a9:
5e:27:14:78:6b:19:41:34:23:b4:38:7e:43:ad:72:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:6E:66:8F:8C:70:A6:7E:E4:5A:1A:91:68:22:1E:7E:8D:1B:74
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bc:77:52:c8:df:2c:df:dd:86:4a:5e:27:1f:9e:a3:6d:bd:
89:0a:9f:aa:be:93:c1:0d:9e:e5:4e:1c:4a:4d:0d:a4:c5:0d:
59:82:10:5c:46:cb:0e:ff:15:08:0b:d9:98:c4:57:63:dc:f7:
77:ec:5b:29:f8:1d:92:e2:06:b8:24:ff:3f:15:2d:94:a6:ca:
d0:c7:46:a3:55:e6:a9:09:0a:06:44:e2:0d:b1:e5:b2:71:a5:
f6:7e:b4:a4:b5:88:74:d7:10:1e:1b:e3:28:8e:51:1d:16:44:
ca:58:5d:dd:fb:f5:0a:8a:23:02:01:26:47:97:c9:fd:d8:92:
7c:51:3d:12:51:4a:12:e9:34:b9:da:d8:2e:1a:b9:9b:73:65:
e8:c8:7b:d6:e1:32:5c:33:35:ad:8a:de:50:f4:89:b2:d3:11:
06:c2:90:2f:28:27:48:5f:9a:e1:7d:c5:93:7a:14:05:75:d0:
65:cc:b4:ab:89:4d:19:d6:88:88:3e:1d:02:e5:75:c6:10:44:
53:7e:b9:21:e2:53:f7:61:f9:6d:1d:b2:6c:ac:d3:68:46:9f:
61:dc:cb:05:cf:44:3e:a4:89:a0:7e:7e:46:76:fd:7f:e4:83:
5c:5a:f1:e1:6a:bd:c9:f2:6c:d7:54:b3:74:01:cb:e3:b2:47:
78:6b:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:52:08 2026 by rpki-client