Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: FLTTZSCXYxsiWoOSC3f/FuGlmqOXp9tdU7tsNgESvt4=
Subject key identifier: 7F:A1:A2:25:E0:4F:35:75:FE:B2:0A:FA:2D:1B:6F:0A:CB:DA:11:1B
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 01A0C6A0CEC4BBC94208A06F7409A9C78DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 0787
Signing time: Tue 22 Sep 2026 01:00:22 +0000
Manifest this update: Tue 22 Sep 2026 01:00:22 +0000
Manifest next update: Wed 23 Sep 2026 01:00:22 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: JmtZNr3mQVmn8xUQZb4EV4HuW/cCGCGMCzfZdb9h5JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ce:c4:bb:c9:42:08:a0:6f:74:09:a9:c7:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Sep 22 01:00:22 2026 GMT
Not After : Sep 23 01:00:22 2026 GMT
Subject: CN=7fa1a225e04f3575feb20afa2d1b6f0acbda111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:de:a6:b7:f3:eb:bb:28:7a:41:2f:88:48:
0b:b2:65:92:68:55:87:4a:b3:91:ef:09:75:e7:0f:
26:40:d8:97:fd:1b:2c:09:e7:32:c3:e8:85:f3:83:
98:26:26:87:c0:77:49:ef:78:8e:b7:46:10:8f:48:
fe:6a:d9:94:68:be:73:18:fb:3d:68:3c:03:54:0b:
42:db:d2:3b:c4:74:f5:1d:01:a5:90:96:c2:ce:26:
65:a8:91:e4:fd:d5:a9:2c:be:aa:69:88:d2:ca:d0:
88:e0:2f:5a:07:35:c4:52:59:0d:c4:e0:62:f9:dd:
84:57:01:fe:b7:24:35:4d:d1:af:49:56:37:48:00:
56:85:67:6b:0d:69:45:19:82:02:8b:f8:f5:00:71:
ef:09:39:14:8c:46:94:0a:2b:23:e5:85:22:66:99:
dd:70:02:cb:cf:07:1f:e5:d9:f1:27:a4:79:b4:2f:
4c:a7:3c:62:37:54:38:44:30:23:e7:92:f4:0f:64:
74:56:7c:99:34:17:62:3f:0f:13:41:08:76:dc:c0:
0c:8c:45:fc:26:83:f3:23:2d:8d:6d:66:6f:3f:d1:
78:2a:a9:c1:67:3a:4c:c0:a4:f6:5a:ec:8b:0a:f4:
2c:53:99:75:a8:84:53:f8:76:e7:9f:66:9f:fb:04:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:A2:25:E0:4F:35:75:FE:B2:0A:FA:2D:1B:6F:0A:CB:DA:11:1B
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e2:59:eb:1a:10:e1:c0:41:00:10:8b:43:83:a1:42:9a:0c:
52:92:97:e5:4f:a8:a6:24:34:05:e3:16:5d:01:29:33:09:53:
a5:b8:c3:a1:3d:39:5a:b1:81:96:15:d1:b1:9f:bc:9a:d9:0d:
4e:db:7e:0e:fe:3e:79:aa:0a:eb:8d:06:43:e3:c0:54:e2:c1:
df:8d:34:46:4c:17:a0:cf:f0:b3:bd:1e:d1:46:07:44:23:b5:
7f:81:39:bc:a8:c1:c8:30:fd:50:10:af:63:96:b1:26:ca:a6:
91:e1:f7:da:46:6a:d2:32:d2:41:4d:8f:9d:82:c2:0a:00:82:
b2:1a:36:80:fe:af:c2:f6:a0:ec:23:cf:a9:68:79:d8:18:4f:
c9:53:a1:0f:19:9f:54:bf:d1:ae:79:67:ca:32:63:72:66:3c:
fb:bf:8f:9c:47:e3:3a:e3:a1:75:b0:07:a0:ee:7d:72:83:14:
db:53:c3:45:97:91:6e:83:2d:2c:af:72:31:c6:e5:ff:20:35:
fd:12:fc:fc:65:83:1b:19:3f:79:53:5c:c8:79:59:7e:5e:10:
db:9d:46:f3:64:a4:0c:ab:80:64:43:12:75:1d:d6:45:6b:7a:
c7:c9:a9:98:20:46:f9:1b:ec:2b:2a:c3:c4:cf:80:a2:2f:cf:
e0:42:fa:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoM7Eu8lCCKBvdAmpx434MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4
OGExZTQwHhcNMjYwOTIyMDEwMDIyWhcNMjYwOTIzMDEwMDIyWjAzMTEwLwYDVQQD
Eyg3ZmExYTIyNWUwNGYzNTc1ZmViMjBhZmEyZDFiNmYwYWNiZGExMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNneprfz67soekEviEgLsmWSaFWH
SrOR7wl15w8mQNiX/RssCecyw+iF84OYJiaHwHdJ73iOt0YQj0j+atmUaL5zGPs9
aDwDVAtC29I7xHT1HQGlkJbCziZlqJHk/dWpLL6qaYjSytCI4C9aBzXEUlkNxOBi
+d2EVwH+tyQ1TdGvSVY3SABWhWdrDWlFGYICi/j1AHHvCTkUjEaUCisj5YUiZpnd
cALLzwcf5dnxJ6R5tC9MpzxiN1Q4RDAj55L0D2R0VnyZNBdiPw8TQQh23MAMjEX8
JoPzIy2NbWZvP9F4KqnBZzpMwKT2WuyLCvQsU5l1qIRT+Hbnn2af+wTRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+hoiXgTzV1/rIK+i0bbwrL2hEbMB8GA1UdIwQY
MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt
YWQzNjI5YjIwMmMwLzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw
LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreJZ6xoQ
4cBBABCLQ4OhQpoMUpKX5U+opiQ0BeMWXQEpMwlTpbjDoT05WrGBlhXRsZ+8mtkN
Ttt+Dv4+eaoK640GQ+PAVOLB3400RkwXoM/ws70e0UYHRCO1f4E5vKjByDD9UBCv
Y5axJsqmkeH32kZq0jLSQU2PnYLCCgCCsho2gP6vwvag7CPPqWh52BhPyVOhDxmf
VL/RrnlnyjJjcmY8+7+PnEfjOuOhdbAHoO59coMU21PDRZeRboMtLK9yMcbl/yA1
/RL8/GWDGxk/eVNcyHlZfl4Q251G82SkDKuAZEMSdR3WRWt6x8mpmCBG+RvsKyrD
xM+Aoi/P4EL6qA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:33:11 2026 by rpki-client