Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: NAZNeyxBsVH3KbPTZI450WU9yY1Bq3Q+Hl3ItdxelZk=
Subject key identifier: A2:B5:F6:E1:19:E4:0A:49:0D:0B:4C:98:CE:7D:36:5F:9D:D4:69:53
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01A139A49DC7D8B9280AE672CAE0EA6946C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 165D
Signing time: Wed 14 Oct 2026 09:00:51 +0000
Manifest this update: Wed 14 Oct 2026 09:00:51 +0000
Manifest next update: Thu 15 Oct 2026 09:00:51 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: mcmY8gddAiK9faSETtZoU+mj6e6MlnFy+KtA9Urs0yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:9d:c7:d8:b9:28:0a:e6:72:ca:e0:ea:69:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Oct 14 09:00:51 2026 GMT
Not After : Oct 15 09:00:51 2026 GMT
Subject: CN=a2b5f6e119e40a490d0b4c98ce7d365f9dd46953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:c7:92:23:df:d0:c1:23:45:0a:19:2c:c0:
3a:b4:49:06:89:0c:4e:1e:43:1b:ad:fc:94:29:79:
69:5d:47:cf:4f:90:ed:c7:cb:6b:42:ab:1f:11:78:
f5:77:b1:07:b0:ca:97:d5:ae:42:c7:58:49:a6:4d:
ff:23:a9:20:06:78:df:db:8a:34:f7:ca:d5:a3:8d:
3c:1b:c9:77:21:b1:3d:5b:1e:05:59:86:21:29:7b:
b3:1a:67:6a:02:11:be:fe:7d:bf:59:b1:19:3d:0c:
e2:77:4c:7f:4a:18:0a:61:ba:67:0e:8f:fe:8b:8b:
2e:84:a5:b0:d8:02:2c:e7:f0:33:2a:c4:98:fb:44:
50:62:ac:f4:e6:4f:96:81:2f:cc:8d:77:1c:fa:cb:
69:9d:b0:2c:0e:b6:83:d6:8f:67:5b:99:30:f1:95:
ca:05:16:65:b0:d3:55:c6:ef:e4:ce:5d:9e:5f:2a:
b6:73:f9:fb:70:6f:f2:91:41:d8:3f:cf:67:82:7d:
fe:c7:c7:ba:b0:ba:46:2f:75:63:1e:b8:fb:bb:08:
2d:96:20:5d:a0:6f:a0:37:41:cc:6b:e4:9e:f9:4d:
36:5c:a3:97:81:c1:dd:4f:9d:fa:32:e6:c9:57:73:
0c:a8:af:9c:5d:f2:30:56:00:b1:cb:10:60:1e:6a:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B5:F6:E1:19:E4:0A:49:0D:0B:4C:98:CE:7D:36:5F:9D:D4:69:53
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:b1:f5:ca:23:08:40:3c:5a:ed:44:05:fd:ae:5b:e3:72:
81:e0:8a:c4:bd:08:e1:5b:62:49:bb:22:39:45:ee:33:8f:fe:
4c:bb:b2:88:8b:64:c4:b3:aa:86:e2:d6:5d:12:8b:90:ee:1e:
dc:e1:19:7c:fa:1a:13:fa:14:ad:cd:d7:05:39:9b:47:01:d9:
91:53:32:34:c5:e3:ea:de:70:89:ee:c9:aa:30:2c:d8:88:b4:
4e:9d:e1:4b:c8:a3:7a:18:3e:73:2f:b8:cf:5d:53:e9:eb:36:
26:af:c1:a9:98:be:95:a9:c7:8c:d3:0d:26:4f:0f:8f:5f:eb:
e3:9b:a8:7d:1a:b5:4e:2d:3e:5a:a1:5c:41:ec:d6:f2:66:14:
07:26:b9:83:51:47:f2:e3:1b:33:fa:53:2c:d7:09:64:47:3d:
b8:1e:89:00:f1:f1:e7:1d:39:a3:0d:c1:53:6b:54:25:ef:90:
5f:c6:c8:d0:d7:49:95:d7:e7:fb:96:71:04:39:b2:e8:f4:33:
b2:dc:12:7b:f5:1f:6f:c4:da:1b:02:7c:60:5b:82:17:97:7f:
04:57:f1:16:a4:a0:81:24:ee:15:ac:98:ab:16:9d:ad:ca:a0:
3a:7f:36:2f:36:2d:d5:03:4d:7e:d9:79:a7:6c:34:a1:3b:9e:
6c:20:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:18:16 2026 by rpki-client