Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: 8e2Z5FMXj+rmjqfz1QK0WkXVDksdCfnx1VHc5zqP08U=
Subject key identifier: CB:75:9C:DF:4A:7D:B4:04:59:DF:22:A3:F1:4F:71:05:8C:48:BA:42
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 01A0C8580E969A821D84BF991ECB869A64BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:08 +0000
Manifest this update: Tue 22 Sep 2026 09:00:08 +0000
Manifest next update: Wed 23 Sep 2026 09:00:08 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: WroROakJLzLz1xiybtjy6Lcjz1x57hmZSMI/Po4eqiY=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:0e:96:9a:82:1d:84:bf:99:1e:cb:86:9a:64:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Sep 22 09:00:08 2026 GMT
Not After : Sep 23 09:00:08 2026 GMT
Subject: CN=cb759cdf4a7db40459df22a3f14f71058c48ba42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:89:e7:b3:9e:fb:77:aa:3b:be:22:5d:b1:
35:3f:61:1a:8b:eb:8e:76:fe:8f:11:5e:82:3c:62:
bd:2e:eb:40:17:c9:6b:85:e6:52:81:f6:1b:84:94:
96:b1:5c:d0:60:19:bd:73:20:b5:01:57:a6:dc:dd:
95:00:8a:52:b8:c8:06:ae:24:12:af:81:43:c2:60:
b7:f8:71:e3:db:1f:0a:79:0d:12:22:3f:2a:dc:76:
3a:2f:e4:e7:3e:0b:d1:02:c6:8b:1b:b7:33:be:9c:
8b:ad:41:64:de:e8:c3:52:d5:3f:5c:81:cf:4f:28:
a7:2c:98:5d:9f:5e:4b:62:0e:65:29:3f:8c:da:fd:
c7:76:8e:4a:0d:d4:69:5f:dc:b3:38:21:9f:05:81:
29:44:6f:19:5e:3b:ac:34:45:23:07:55:cf:3a:ce:
28:61:84:d7:ca:65:24:f3:2b:30:d7:c4:41:a7:83:
69:12:19:f2:42:f0:93:af:08:09:2f:4a:4c:27:3d:
ca:68:50:fa:a3:6b:9b:8a:d4:f8:9c:3c:3f:8c:88:
ee:22:28:4a:d6:1f:6b:22:48:58:20:4a:e9:dc:f9:
72:ab:95:62:88:1d:19:af:c4:20:99:93:51:a7:d9:
f8:fc:c9:94:b4:0a:93:23:9c:b5:e4:38:98:c6:63:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:9C:DF:4A:7D:B4:04:59:DF:22:A3:F1:4F:71:05:8C:48:BA:42
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:06:e1:75:45:63:91:03:59:e0:c1:1c:65:22:7f:6a:1b:bc:
86:0c:f9:16:dd:4f:a1:d5:26:27:29:64:7c:3a:3c:2b:95:0d:
3c:1a:32:cf:7c:3c:04:f6:6f:08:79:19:3c:36:82:1b:2a:54:
0f:a6:a7:10:38:95:35:33:0e:2f:c6:c4:90:bb:a7:fc:2a:74:
c1:08:65:e8:8a:27:6c:6c:6f:cf:f8:35:d3:ef:4c:39:a8:8a:
e1:53:94:26:7b:52:64:16:34:01:80:3e:cf:1c:fa:92:d7:d7:
27:66:c1:4c:37:c3:c5:9a:3c:4f:33:1d:5e:c4:4e:46:61:45:
a3:79:03:28:2c:50:d2:ee:f7:a6:6c:43:23:f2:74:e0:40:19:
4a:29:94:84:78:5d:66:6e:d2:af:de:70:0e:0c:d8:4d:6c:d0:
33:38:32:03:48:2b:cb:f1:84:1a:e8:d5:32:57:03:24:b9:0a:
52:ed:96:e2:7c:50:12:1a:6b:4a:d4:24:ee:c4:e4:cf:b6:ba:
64:b1:23:21:f3:9e:90:e4:a6:95:26:f1:dc:87:77:58:92:de:
e1:0e:b5:3d:82:4a:b8:45:1e:80:7e:2d:39:a2:e3:d3:5c:21:
3c:15:f0:a3:e8:5a:f9:a5:e4:39:d9:46:f5:2e:7b:90:79:e3:
aa:44:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:13:30 2026 by rpki-client