Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: q2Jx/2YVvkzZNpvHvOgZFLnXmLT6q4jasZ3lFhsLXxs=
Subject key identifier: 54:8B:A2:64:E6:F3:60:C0:48:94:6B:69:72:AF:AD:9C:93:F8:05:2C
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 019FAC75C0D17BDBDD7ABFFB43B7EA84D1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: qhSrN+cOkI0RhV5Pm8RQG+XmVKMf/hALTZSDke9iwTM=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:c0:d1:7b:db:dd:7a:bf:fb:43:b7:ea:84:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=548ba264e6f360c048946b6972afad9c93f8052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:9d:b9:4f:f8:03:ca:c7:9d:f3:82:5d:25:
24:6f:48:fa:67:f8:8e:35:86:15:c7:fe:4a:cf:35:
1a:9a:04:db:bc:11:c0:03:54:8d:5e:7e:12:4d:e8:
fd:5b:87:e8:ae:a7:d8:d4:36:cb:4b:f6:4b:ee:b7:
0d:0f:0c:1a:b7:59:23:68:c1:ef:b0:48:84:83:35:
4b:27:02:8c:83:00:73:85:e3:29:47:bd:02:c6:b6:
54:e3:7e:c5:13:a5:ad:72:95:bc:ad:35:fb:28:22:
2f:16:3c:81:73:86:4c:0c:fe:15:5f:ae:07:92:e7:
63:50:88:ab:85:ad:3b:63:ff:89:ac:42:0a:d6:d9:
43:13:29:fc:a7:55:ad:cb:a1:72:d5:c8:ce:3d:41:
18:88:d3:70:38:1d:df:83:53:8e:3f:b1:48:9c:c3:
8c:f2:79:80:62:bc:a2:6f:54:24:d0:0d:0d:4e:f5:
b6:56:8c:81:ec:68:6a:a7:65:ce:21:fb:36:c7:94:
8f:c5:f8:c4:00:66:5a:d7:f5:f5:e7:b3:7c:4a:b7:
68:ad:b3:35:e3:1f:9b:42:5f:94:5c:6b:c0:9d:6b:
dc:83:66:cc:1a:27:1f:2a:d0:e1:58:73:95:b7:8c:
6a:50:b4:fd:00:c7:70:48:3e:e6:c1:35:64:a1:b7:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:A2:64:E6:F3:60:C0:48:94:6B:69:72:AF:AD:9C:93:F8:05:2C
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ac:a9:89:ef:67:3b:a4:df:26:fa:47:c7:1d:c1:c0:f9:b6:
6a:86:2f:0c:1d:d8:25:ee:b1:5d:fe:01:b4:14:5f:ad:3e:72:
d4:51:46:68:80:6a:47:b0:c5:2c:72:62:23:a9:63:c6:85:98:
26:12:0a:b3:b4:68:2e:e1:e4:87:f0:bc:da:c2:e8:83:f9:49:
3b:8a:44:84:db:15:9d:2c:d4:d4:21:3c:b8:fd:ae:0f:e6:38:
49:cc:64:ce:82:53:43:22:f3:db:26:ec:82:74:ce:73:9a:ac:
91:5c:87:8a:ba:35:09:8b:6a:aa:ec:5d:d0:9e:dc:22:d4:c7:
4f:96:a9:67:1b:9b:eb:05:13:30:b9:40:ea:0c:5c:3e:99:ab:
70:3b:2b:fc:b9:c2:c7:d3:3c:9b:65:ea:df:a7:a4:2d:b8:c6:
14:13:b3:2b:4f:9c:e0:b8:97:40:22:30:1b:a6:d1:20:45:d7:
37:8b:c0:e1:75:c2:94:cc:2a:6d:2e:96:7a:b0:70:ed:8b:4b:
df:2a:bf:52:6a:1f:ed:c7:07:9a:a0:c7:4a:c7:c2:eb:cb:ca:
19:fe:24:85:05:d1:ed:c0:e7:7c:23:ec:3b:67:0f:96:35:a0:
52:f6:23:b5:c3:b4:b9:d5:2f:84:1b:e3:7e:c3:a0:07:ff:f7:
93:83:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:44 2026 by rpki-client