Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: dIAGDpHbbB2PXRl+CXFwlB2yY0eXEcFwv8kIxVuf7R8=
Subject key identifier: 76:95:39:E0:5A:CF:57:55:4E:75:61:1B:8F:E2:5A:ED:5A:A1:5B:E7
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 01A0CC35D1437850A5E69CAAB185487F5C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 1829
Signing time: Wed 23 Sep 2026 03:01:14 +0000
Manifest this update: Wed 23 Sep 2026 03:01:14 +0000
Manifest next update: Thu 24 Sep 2026 03:01:14 +0000
Files and hashes: 1: 1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa (hash: 8052VqgxoQXtGMoT/9mInb/P+q/GQzoHQcwJ95n8TXs=)
2: Phjh0r_ad13WTH6l1p80FF4KGew.roa (hash: u3OCSo+Ax8+S8/eXW7W/E7Cm5GtFphsGlM/+L/E8D18=)
3: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: aKTpjKk/pnqb8yorAWN+jlp7WtIktscqwHKC6n7lzQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:d1:43:78:50:a5:e6:9c:aa:b1:85:48:7f:5c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Sep 23 03:01:14 2026 GMT
Not After : Sep 24 03:01:14 2026 GMT
Subject: CN=769539e05acf57554e75611b8fe25aed5aa15be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:fd:50:89:62:fd:7c:78:a6:49:0b:97:33:
3d:78:ca:ed:0c:ba:d9:8f:9a:86:ba:c4:c4:f6:58:
e4:c8:e0:f7:eb:a9:93:c6:b1:9f:95:79:8f:a5:63:
a0:c8:54:15:57:04:42:ca:0d:0f:f1:31:6b:a4:cc:
f6:85:b0:32:df:7a:1d:7c:24:de:c5:cf:a3:ba:71:
df:27:60:a0:de:e0:ef:fb:e2:ef:fb:bf:2a:1e:db:
69:df:c9:68:76:ed:fd:07:d6:cb:5a:1a:43:a2:88:
56:d2:27:a0:1b:6b:49:04:1a:14:20:ec:28:cf:03:
3e:e0:6b:9a:56:e0:c9:df:12:ed:ff:47:99:ca:de:
d4:64:6e:ab:13:78:8c:9b:99:6f:91:8d:4d:49:9d:
07:de:99:57:37:96:fc:19:8d:ae:4f:b2:13:fd:08:
aa:a8:b0:8a:bf:3c:ef:e3:b2:81:47:0d:1d:df:55:
09:91:a9:06:77:61:da:dd:23:c0:6f:6f:fa:9a:33:
42:77:ce:4b:64:24:fe:15:06:8b:8b:8d:02:84:55:
8d:56:57:e8:88:4d:89:56:13:6e:50:3f:21:42:7b:
1a:5a:2b:1d:bf:60:ad:4b:0c:2e:73:e0:ca:07:2e:
7d:7b:29:c1:9f:94:c4:3d:1e:dd:eb:c6:45:73:22:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:39:E0:5A:CF:57:55:4E:75:61:1B:8F:E2:5A:ED:5A:A1:5B:E7
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:15:e3:98:96:3d:6f:5a:2d:54:be:03:7b:5c:2d:04:0f:
79:11:5f:26:02:36:d9:02:b5:7d:01:69:2d:ba:d9:82:de:bf:
34:39:cf:46:27:0a:b3:26:0a:9a:70:64:f7:b2:3e:4d:23:f9:
7f:c3:d7:dc:26:b4:b6:25:3e:26:5a:98:9d:f7:35:e1:f3:28:
7d:1c:53:87:a7:21:75:ab:6a:7b:de:40:b0:7d:14:e5:17:ab:
38:fd:08:d8:ab:ba:e9:58:cc:6a:b2:b8:f5:1a:a1:39:85:2f:
15:b9:02:8c:7c:bc:4a:80:72:a7:62:44:c6:e0:55:bf:f8:94:
9c:00:5f:6d:01:15:3d:1b:af:f8:a9:50:c8:f9:eb:b5:b9:b8:
99:60:86:a1:99:98:1f:f4:d0:78:11:c2:ea:64:0a:1d:e8:fd:
f2:83:ff:1f:df:c0:5c:e8:0f:73:90:3a:a0:0e:35:75:f2:bc:
97:6a:00:d0:bf:06:e9:ec:3a:70:0a:26:b1:18:cf:07:1b:00:
35:b5:c3:15:1a:68:48:56:ed:f6:54:01:72:05:7b:df:14:12:
5e:b9:77:36:99:fe:fa:62:18:e8:bd:74:fe:73:b8:fa:5f:06:
e7:7b:7d:18:76:70:9b:e1:fd:be:7b:9b:33:51:f4:8d:aa:1b:
1d:99:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:46:38 2026 by rpki-client