Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: 7NStRb8UIqsljIe5PHhqBCy+7fImOr6fFf+1FB1aDls=
Subject key identifier: 92:2D:E6:2C:21:33:AD:70:34:B6:6B:28:1D:EF:D1:BF:17:6F:C7:73
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 01A0BE42FE26BD9E7DE28D5DB817DAC2025C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 06D6
Signing time: Sun 20 Sep 2026 10:00:56 +0000
Manifest this update: Sun 20 Sep 2026 10:00:56 +0000
Manifest next update: Mon 21 Sep 2026 10:00:56 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: 9+lKCqHsNi6EwkDGArkYkx7uWgSNZud7sDu6ZIdyNwY=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:fe:26:bd:9e:7d:e2:8d:5d:b8:17:da:c2:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Sep 20 10:00:56 2026 GMT
Not After : Sep 21 10:00:56 2026 GMT
Subject: CN=922de62c2133ad7034b66b281defd1bf176fc773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:4b:f8:5a:2e:23:18:02:a0:50:6d:a6:14:
e6:07:f7:5a:99:81:7c:5f:f6:01:32:41:74:a5:5f:
0e:ba:9a:62:6d:47:39:1c:c5:67:23:2e:b6:3a:a0:
0b:e6:c6:ca:73:a1:92:87:87:3f:e3:38:d9:2f:64:
bc:db:0f:2a:c4:53:fe:31:6a:c7:e3:58:48:46:85:
44:4c:35:15:d4:ba:2a:39:4a:64:77:15:f0:ed:5b:
a8:4d:d1:9f:c4:f2:cc:35:a9:1a:83:bf:18:96:66:
56:9b:1c:3c:2a:31:05:b7:b6:d7:95:80:7b:9e:c6:
19:ec:61:f2:1a:92:70:e8:c0:7d:77:6c:4e:22:c2:
7f:5e:0f:e2:fe:f7:05:e8:40:1e:10:62:0f:2b:88:
03:30:05:52:af:1d:8d:38:53:d8:2c:8d:0f:4d:a7:
5a:ac:3e:89:6b:7f:c9:a4:14:9b:2a:f7:9e:75:dc:
7b:8c:d3:ba:e0:06:b4:92:54:b0:61:83:40:84:34:
2d:da:19:ac:7a:7d:98:2c:64:91:7e:ff:9e:13:54:
bf:26:21:ba:d3:c0:75:f0:ff:db:08:af:b6:ae:20:
ed:05:dd:6e:40:32:3d:f7:0b:f9:6c:1d:d8:59:f2:
a7:b1:ed:ae:10:62:e0:78:38:fe:6f:55:b4:13:10:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2D:E6:2C:21:33:AD:70:34:B6:6B:28:1D:EF:D1:BF:17:6F:C7:73
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0c:bf:94:89:30:0a:d1:e3:6c:e1:35:99:65:d2:93:3c:40:
83:52:3d:31:a3:d4:fe:55:42:71:a1:08:07:30:c7:7c:d5:86:
d9:ee:33:fa:fc:10:5b:34:52:79:f3:4f:8c:dd:fe:ca:28:e7:
84:f8:1d:31:80:c5:70:a9:a0:e9:9d:47:e1:b3:64:e1:d3:db:
fc:29:c3:74:ea:c4:08:0c:fa:43:e9:33:3d:74:07:05:04:fc:
e2:21:49:53:72:b9:5b:0c:8a:2a:14:b3:a2:a3:ff:31:07:85:
de:8f:b1:71:0b:b8:3a:b1:fd:1e:36:22:da:0f:57:7e:54:8a:
c4:01:f5:ca:ea:e4:c7:3a:74:6d:22:db:df:11:1d:ac:fc:46:
f5:d9:d1:0f:de:84:48:53:80:c8:d1:8e:b8:ea:41:bc:35:42:
ee:01:43:00:42:44:aa:13:20:d8:0d:46:62:6e:eb:e8:8c:aa:
e0:8e:f8:16:fa:c6:01:cc:96:f1:f0:00:79:6f:56:4a:7c:62:
93:4f:3b:65:c7:e5:de:52:d3:e1:7b:90:ef:eb:46:fe:6f:38:
84:a2:ff:a3:ef:63:bd:68:dd:0d:65:a4:10:45:ab:10:1e:bf:
cd:d1:29:c0:15:05:b4:e2:df:84:ef:8a:e9:07:31:95:6c:a5:
29:59:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:40 2026 by rpki-client