Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: 2aYLMwWE02mgnqJZe/S90tnVjtpZPLs5dUqBBnfjTxI=
Subject key identifier: E9:BF:BD:F0:00:FD:85:FE:18:FA:4D:C9:C9:2F:C8:D4:39:57:71:9D
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01A0C633624D26ECB4EDBDCD738189C1E5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 095E
Signing time: Mon 21 Sep 2026 23:00:51 +0000
Manifest this update: Mon 21 Sep 2026 23:00:51 +0000
Manifest next update: Tue 22 Sep 2026 23:00:51 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa (hash: eTI4gnLg2t5AMJXWsqRgOPsBhukLdQ0XY5+wofN0AgI=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: e64c64A4REHiufkxPkibJpd6HwUaeEQBhZqKX9PFdy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:62:4d:26:ec:b4:ed:bd:cd:73:81:89:c1:e5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Sep 21 23:00:51 2026 GMT
Not After : Sep 22 23:00:51 2026 GMT
Subject: CN=e9bfbdf000fd85fe18fa4dc9c92fc8d43957719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:b3:6f:77:d5:39:ec:e5:7c:02:ba:8f:8a:
47:03:a1:05:c2:49:6f:38:ea:80:55:7b:b3:86:4b:
9a:b9:1d:e4:0c:b5:e1:49:87:46:21:d1:df:ba:cc:
20:f0:dc:8f:8b:3e:7d:b4:54:e9:48:65:6d:ab:b9:
57:13:2a:36:6f:e8:4e:70:8c:46:61:91:7b:4b:da:
c6:77:31:ae:68:3a:40:71:86:89:8d:c7:23:65:b8:
df:e6:cf:34:f1:f4:f2:9b:2e:99:f6:eb:5e:e1:d7:
e9:85:78:9e:b0:11:a6:fc:02:de:20:62:d0:99:c7:
bf:33:30:b1:6d:56:4e:28:13:d8:53:8b:54:c4:e5:
a3:19:43:89:0a:79:04:58:e9:f9:85:9b:27:ea:1c:
47:74:63:e8:b0:ab:9e:08:26:20:4d:2b:72:bc:04:
19:19:bd:07:c7:25:fe:26:04:71:64:ac:f4:be:fd:
87:1d:b1:3e:0d:78:5d:26:4f:15:4a:49:28:e4:e8:
19:be:e9:14:17:76:d1:63:9c:1e:48:b0:84:c8:41:
4a:af:6f:2d:a1:7d:14:7f:bf:e5:27:60:4f:b1:34:
7c:24:e0:a3:24:f6:59:8b:b0:e5:ce:17:4c:0b:5a:
18:4b:4c:81:88:eb:bd:4f:ce:9b:1e:39:a3:b8:31:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:BD:F0:00:FD:85:FE:18:FA:4D:C9:C9:2F:C8:D4:39:57:71:9D
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:16:84:a7:12:29:9e:24:2e:7b:a0:cc:82:38:20:85:06:c6:
4a:f4:9b:a3:b2:ef:e3:9d:3d:bb:8d:fd:97:1c:a0:9b:cb:c2:
c8:6c:5d:ad:ee:51:b1:ce:52:4b:0b:80:10:40:1b:4a:ff:5a:
77:5c:88:bc:65:27:af:f4:79:a6:e9:e4:fb:3c:4f:a2:2c:e0:
6b:8a:72:58:c5:84:d5:71:4d:22:11:5c:4b:4f:97:52:6c:03:
72:f8:ed:4e:9f:42:c7:68:c9:e9:cc:e2:bc:b8:2f:17:31:68:
1b:23:58:14:44:9f:a6:eb:91:94:1b:36:1e:a8:6f:cf:c9:97:
7c:c5:78:25:57:50:34:1e:69:4f:00:e7:97:37:7d:58:3e:3c:
5e:9c:5b:2e:db:7a:bc:60:a2:df:02:3c:cd:e8:28:91:e4:30:
71:12:0f:73:6c:ac:02:41:a5:ea:57:de:f1:8f:a4:73:eb:74:
f7:63:83:59:05:f9:3c:70:9a:10:7f:fd:81:fd:61:53:6f:02:
e5:1e:a0:6f:2c:f8:42:81:a2:c0:95:6e:e9:95:fc:6c:21:3d:
89:37:a0:e7:ee:3b:3c:65:bb:23:91:db:63:d4:e6:1f:9b:56:
d4:1d:66:d5:0c:08:43:a7:b3:2b:28:54:ed:47:77:be:9a:a0:
7b:28:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:55:55 2026 by rpki-client