Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: YsYDVVLbsvM2B6FsL6KNjLwnI5HLpUBlymjdEllbaxs=
Subject key identifier: E4:34:C4:AB:AD:6F:84:9E:70:0C:69:32:E4:2E:1A:D5:D8:42:92:29
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01A11ABE5820727F117732A05280440689CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 1A33
Signing time: Thu 08 Oct 2026 09:00:44 +0000
Manifest this update: Thu 08 Oct 2026 09:00:44 +0000
Manifest next update: Fri 09 Oct 2026 09:00:44 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: 1BIT1Ng1YneO2u4NYKM/u4XUFcP6lf7wgKkphMtZuHU=)
2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:58:20:72:7f:11:77:32:a0:52:80:44:06:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Oct 8 09:00:44 2026 GMT
Not After : Oct 9 09:00:44 2026 GMT
Subject: CN=e434c4abad6f849e700c6932e42e1ad5d8429229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:bf:82:91:11:6a:0b:30:53:59:8c:15:27:
05:97:bc:d0:e0:a5:8b:3f:4f:f0:5e:17:00:57:37:
ae:8f:ed:26:70:cb:6b:57:84:7e:cc:eb:1f:01:86:
98:eb:0f:4a:49:f4:d5:68:b4:29:35:78:31:4c:d2:
88:6b:57:d1:e9:7d:75:f6:72:29:5a:0c:f7:ca:57:
83:d9:5b:5b:13:05:b0:d4:23:66:7c:f2:c5:dd:22:
dc:32:dc:24:31:5f:4d:bd:37:9e:34:74:64:e2:4b:
80:20:6d:4a:cb:73:f4:c6:a0:53:84:90:3b:7d:0e:
3a:70:05:a5:ea:58:fe:ac:e0:72:51:b8:9f:0f:2c:
45:4a:a7:26:0d:ce:38:33:8c:e7:06:5f:d1:84:72:
15:19:e7:5b:4d:b1:99:69:72:ce:45:65:70:43:5e:
f0:ba:7a:43:5b:92:99:d7:16:5b:28:64:61:f7:b0:
46:26:6e:29:07:a1:3a:81:6b:1d:a7:45:6c:9e:b9:
6c:90:0c:2d:db:a7:9f:04:7c:ff:a4:dd:8e:8b:4d:
ef:8a:97:34:c4:ee:e5:fd:74:18:8a:16:53:70:f5:
5c:3a:94:82:2e:f0:4a:3b:f7:6c:c6:25:96:e8:c3:
64:c0:7c:e5:90:98:16:49:7e:1c:56:7a:f6:71:8f:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:C4:AB:AD:6F:84:9E:70:0C:69:32:E4:2E:1A:D5:D8:42:92:29
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9f:a7:f3:85:29:c6:fa:ce:59:0b:e9:1e:79:67:3f:68:be:
b9:c8:e7:0f:ca:07:dd:8f:e3:2a:cf:68:2e:42:e4:30:4c:99:
93:85:49:6a:ea:1c:66:d5:c4:f3:c4:99:17:8a:27:57:2a:7b:
21:8c:5d:0f:94:36:7f:ca:bc:e2:9f:be:96:e2:87:c0:90:5e:
f4:2d:db:2a:05:df:6f:d0:cd:72:39:c5:27:37:29:36:78:bc:
95:9f:eb:07:48:42:6f:e5:2c:ed:f0:b2:c1:2e:2c:a3:4c:56:
2b:59:a7:2a:5b:5c:20:e2:83:d6:52:df:1b:75:2b:f6:51:59:
bb:9d:b5:84:d9:a0:da:dd:37:fd:b2:45:11:45:b8:02:86:15:
17:35:99:d0:37:78:94:50:49:0d:cd:e5:47:d1:61:7f:4c:d6:
81:03:f1:a1:f7:f4:e5:9c:00:56:f1:e5:71:76:67:7d:7c:0a:
02:c1:47:f9:dd:c5:6c:fc:70:20:fb:17:56:5c:4d:6c:77:0d:
79:00:69:8c:2c:40:38:77:21:a6:26:6d:11:d3:64:5d:23:bd:
89:c3:cd:fb:bd:be:86:a9:ba:c0:3a:68:67:f3:b5:27:9e:37:
29:de:63:3e:d2:e2:73:60:25:0c:6a:09:1f:9d:59:d5:b2:d4:
7a:f5:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:54:03 2026 by rpki-client