Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: cjuFrie3P94bJnqzbq2gicfwEJcCcxDkUiIyGwfZtJ0=
Subject key identifier: 8D:32:61:95:2C:89:C4:8B:E5:04:8E:6F:38:71:DB:AA:11:4D:DA:01
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 01A0C2C3CF549484E4162BF9EB2861465929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 0582
Signing time: Mon 21 Sep 2026 07:00:07 +0000
Manifest this update: Mon 21 Sep 2026 07:00:07 +0000
Manifest next update: Tue 22 Sep 2026 07:00:07 +0000
Files and hashes: 1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: mtWpFmpb6flJW6LNNo9tksHw6n5/3JJiQUU+sMD2nzY=)
5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:cf:54:94:84:e4:16:2b:f9:eb:28:61:46:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Sep 21 07:00:07 2026 GMT
Not After : Sep 22 07:00:07 2026 GMT
Subject: CN=8d3261952c89c48be5048e6f3871dbaa114dda01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:f1:39:11:98:94:b7:4c:03:73:4d:f5:2e:
c7:12:09:d6:81:11:e4:61:ca:ba:7b:be:8b:20:05:
07:3a:66:e9:fd:c6:1e:9c:a8:89:15:41:fe:52:eb:
4b:74:9a:16:ab:ab:d6:d1:e7:86:4c:62:93:7d:cd:
fc:c6:17:28:0f:33:a6:47:b2:05:af:57:89:17:40:
e3:6b:39:f8:17:0f:e3:09:72:e2:f1:49:f6:cd:09:
e0:f8:df:47:5a:60:85:c6:22:25:f5:fb:e1:22:b4:
8d:b5:65:d7:2f:56:95:9f:54:d2:69:51:2d:9c:54:
1c:3a:d5:ed:6f:64:20:27:07:13:e7:49:60:25:79:
ac:b2:9b:83:d4:35:69:10:f7:42:17:41:0a:06:2e:
f7:6f:f9:35:82:78:8e:37:14:2e:f6:a4:be:c0:d6:
1b:e6:34:d2:a5:4f:05:a9:39:5d:d7:58:ba:bd:ee:
1b:27:41:76:91:00:4d:b0:bb:1f:38:6f:54:2c:fa:
b3:54:fa:62:ef:d5:8a:89:45:b3:44:1b:3b:0f:48:
34:32:58:81:b2:cf:58:ef:3c:7b:7b:ba:76:55:de:
46:5b:8d:fb:7c:1e:0d:67:e9:a6:15:b3:11:23:2d:
88:1f:3f:9c:fd:ab:fe:c6:7c:31:ce:5e:3c:6f:47:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:61:95:2C:89:C4:8B:E5:04:8E:6F:38:71:DB:AA:11:4D:DA:01
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:90:65:c7:a8:65:f7:c3:89:4b:82:32:15:5b:84:a5:60:24:
22:f0:ed:85:36:78:e7:4c:78:f8:8a:01:93:d7:d9:4d:df:df:
5f:3f:a6:d2:4c:d1:86:25:e4:58:33:19:87:95:74:22:ba:78:
f1:bf:09:60:46:48:c1:38:b8:76:8a:19:d8:89:7f:19:c9:15:
ac:a9:ec:48:aa:90:bb:85:91:6a:33:f0:a2:05:91:cf:87:55:
30:75:83:ab:fa:83:19:4d:52:58:dd:46:c5:b0:ba:d0:9d:0f:
30:1c:e9:6a:0e:83:e1:e3:e5:3b:95:f5:82:cf:90:99:87:fc:
a4:4e:f7:0e:ed:fc:be:05:87:6f:d7:87:f6:77:f0:f8:a9:78:
3a:da:8f:2e:06:00:54:a7:e0:4c:37:56:60:72:2a:18:7b:93:
b4:6e:b3:6e:4c:d5:a2:d7:f1:fb:32:0d:1a:e8:41:66:b9:00:
37:f6:4f:2b:a8:ca:30:c0:72:c6:c4:a6:21:72:ac:99:1a:ed:
5c:15:88:df:a2:a8:7a:d2:32:c7:82:63:78:40:8b:43:21:de:
9e:36:67:85:5c:cf:0d:cd:01:c8:0c:25:4d:22:0d:c3:b2:93:
e6:14:53:70:9d:f6:1a:08:04:ba:ba:03:a6:0c:9f:d5:c2:dc:
04:49:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:03 2026 by rpki-client