Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: Df/92GL1g2FPxAzUbrCgGZGS7osDxx2120EodzuBxNw=
Subject key identifier: 8F:C0:A7:D8:91:A9:B9:93:D3:F3:0C:51:A7:98:27:7E:89:44:F6:14
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 01A0C2FAEEFDA48CBFB46492E310FD50F7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 08:00:19 +0000
Manifest this update: Mon 21 Sep 2026 08:00:19 +0000
Manifest next update: Tue 22 Sep 2026 08:00:19 +0000
Files and hashes: 1: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: LVuA/QxUDXyD9yj0dABvxl55BOhM+lpVyMyOEXxyx7k=)
2: fRifEZefvRsk6jclv7pVpILB6hQ.roa (hash: XNNUYM/7petSjasXKNt7qFQhJMSQer6H9QEr1epnmY8=)
3: yDFjBcpO_rK8R2DYPm8fJ39oFdA.roa (hash: B955P2LGm+p4uxnj3O6YVa6b5/IJbwPos+qiuEjVJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:ee:fd:a4:8c:bf:b4:64:92:e3:10:fd:50:f7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Sep 21 08:00:19 2026 GMT
Not After : Sep 22 08:00:19 2026 GMT
Subject: CN=8fc0a7d891a9b993d3f30c51a798277e8944f614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:ff:51:b1:e0:96:ab:6f:61:46:e1:9a:11:
dc:e5:36:da:e7:6e:f1:65:5e:d4:55:96:37:82:68:
42:66:c4:77:0d:d6:fc:a1:c1:f6:ee:cb:e2:c4:e0:
5e:90:3e:e4:38:f7:b4:c2:24:67:34:e0:5b:47:c4:
cb:9d:fb:4c:22:f3:50:9f:3e:77:e2:28:6d:5d:90:
3c:17:c8:c7:ca:25:3f:86:13:c8:48:7d:bf:29:01:
64:c4:ab:ce:3f:0c:6c:8c:89:7f:18:5c:8d:c6:e7:
93:bb:5a:38:2f:3b:d6:81:2f:66:d3:ed:bc:a5:ce:
ce:b1:86:0d:43:90:3c:e8:f4:e0:a8:e8:e6:cd:93:
6e:cf:9e:e2:24:ec:46:8b:5d:17:c6:65:42:17:e7:
a9:ae:d4:fa:30:f5:c4:29:9b:70:6b:bb:b7:ef:25:
59:50:13:e0:ba:5e:93:5b:de:08:6e:51:06:6a:23:
05:42:94:07:02:43:d9:cc:e2:0c:84:c3:03:e3:a1:
65:37:08:45:2b:47:5a:38:9f:c7:79:ad:52:64:67:
ea:f4:8c:32:a2:aa:89:d2:5d:d0:ff:dd:a9:3a:7b:
ae:1e:24:a3:d0:60:13:86:7e:3b:03:4d:f8:b1:98:
55:84:c8:da:29:2b:0d:c1:90:1a:77:37:74:f4:f6:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:A7:D8:91:A9:B9:93:D3:F3:0C:51:A7:98:27:7E:89:44:F6:14
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:ea:ac:d0:35:b6:24:84:db:60:9e:29:c5:6e:26:2e:9f:
4d:bb:db:3b:2b:21:cc:45:20:9e:e1:46:a6:fc:8d:41:cb:79:
28:b6:fe:df:f4:b0:c3:37:e8:3b:9c:10:4a:41:b8:bc:17:0d:
68:06:f0:08:6e:b2:83:22:8d:f0:cf:02:37:a4:90:26:58:51:
51:11:7d:3f:fd:cd:8d:79:0f:a6:2c:ee:ef:0d:6e:00:89:8e:
94:b0:6d:fa:4e:25:39:97:81:e9:48:3d:40:03:aa:d1:06:35:
3b:a2:f2:3d:c7:01:37:aa:af:21:6f:64:2e:0a:08:81:fa:b0:
42:62:ae:90:e0:6e:be:dc:8b:0e:de:97:ad:a1:12:08:85:6a:
88:2e:ff:f0:7d:a9:41:55:ad:90:d0:c2:46:3b:64:bd:be:9b:
61:ff:34:af:0f:ed:3d:f4:7d:cb:f6:70:b2:69:9d:81:0c:6a:
9e:e5:1d:71:7f:5b:e7:a4:b4:6e:42:e2:d9:59:46:c0:b6:f7:
5f:2b:ef:09:34:ad:b2:3d:40:51:c6:39:8a:79:57:3c:67:1d:
e9:98:59:81:11:aa:fc:62:22:37:83:bc:0e:86:c4:01:4e:dc:
aa:92:78:fd:35:54:65:40:ce:1d:38:80:aa:a4:af:31:14:0b:
b9:a5:16:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:10 2026 by rpki-client