Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: G5MvxSgb26RwDjBD58061p5Vm4Rniy7++0HplXKf6L4=
Subject key identifier: 51:74:18:98:82:14:45:FD:C4:E4:4C:69:6C:FC:00:EC:9E:19:E2:83
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 01A1DEA769493110FCBB4A0615D474CD0C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 0818
Signing time: Sun 15 Nov 2026 10:01:15 +0000
Manifest this update: Sun 15 Nov 2026 10:01:15 +0000
Manifest next update: Mon 16 Nov 2026 10:01:15 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: 5UH9//xrUPLUGQuyRf8LYdA4Zrp/AdpyAaeunUR6msw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:69:49:31:10:fc:bb:4a:06:15:d4:74:cd:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Nov 15 10:01:15 2026 GMT
Not After : Nov 16 10:01:15 2026 GMT
Subject: CN=51741898821445fdc4e44c696cfc00ec9e19e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:74:c8:a1:e3:3f:3c:88:e6:2f:b1:0d:ae:
b5:75:da:c9:a4:83:6c:70:af:e4:71:8b:2a:c2:07:
7b:64:60:06:99:98:9b:94:e0:0d:a0:45:bd:37:80:
a9:5b:f8:41:0e:a5:c2:64:42:7b:07:af:41:9f:dd:
cb:f1:ef:dc:46:6d:14:4c:e3:d4:fc:60:12:c4:36:
1e:58:71:eb:6d:3e:79:43:dc:25:54:bb:9d:c3:78:
5e:9c:94:9c:fc:76:b8:3c:05:d3:60:9e:ca:7c:ca:
c6:27:ff:34:1d:69:7b:32:d6:df:9c:82:b6:ed:0e:
e0:d3:12:4a:01:2e:dd:47:d3:3f:3f:cb:49:46:2d:
c9:9b:37:19:26:5e:87:3c:ee:a8:ac:a4:e2:95:e1:
98:9c:27:6a:47:cc:ca:9e:bf:1b:9c:da:ff:93:ab:
ce:12:2a:cc:72:e4:06:2a:a8:cb:8a:82:a7:59:ea:
90:ff:76:a1:ef:25:51:ed:41:d8:f2:7a:d1:09:41:
e8:39:f3:28:8b:fc:dc:bf:09:bb:00:c8:56:08:4e:
f7:97:53:14:05:73:e1:7c:a1:50:3f:c0:d3:81:1a:
43:4c:c6:67:41:7a:44:33:20:32:33:da:eb:91:a5:
64:41:c5:81:93:81:ba:07:50:76:97:56:4a:18:1f:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:18:98:82:14:45:FD:C4:E4:4C:69:6C:FC:00:EC:9E:19:E2:83
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:55:b1:cf:6e:bc:52:ee:53:e2:f9:14:6c:71:54:16:36:f2:
db:7a:ce:43:e5:57:83:87:7d:64:1a:e5:88:7d:fc:41:98:bd:
f5:bb:17:fd:b5:8b:42:60:6b:31:d0:83:f7:3e:79:be:bf:25:
90:39:72:5c:44:ea:c1:5d:ef:14:d4:72:e9:2b:6e:e3:f7:fb:
61:84:49:95:41:38:d3:8e:91:b7:9f:87:62:c1:86:53:57:66:
5b:05:30:f9:2f:38:cb:9c:03:66:56:2f:b0:de:b4:5c:e8:aa:
35:6a:e0:ec:66:0b:37:93:72:b7:65:30:c0:bd:4f:3c:65:6a:
1a:a0:3e:0b:c5:6f:03:ce:a3:a7:22:76:00:28:d9:bc:79:a9:
62:39:42:3e:c6:0e:a3:4a:b8:d1:4c:af:34:ac:97:08:7a:99:
7e:0b:30:34:b3:89:a4:17:d2:48:4a:d8:ed:8f:23:0a:80:db:
34:e5:09:36:7b:a9:6a:ae:ee:3c:f9:db:c3:71:46:cb:a7:3b:
d2:c0:22:36:74:bb:2a:32:c5:63:74:32:53:5e:22:6d:73:50:
56:88:77:b4:92:59:32:38:a9:23:de:ce:b6:e6:94:d7:24:28:
10:35:49:60:43:ec:2a:d1:ea:9c:d7:17:bc:f2:27:69:d4:7e:
a0:89:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:05 2026 by rpki-client