Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.mft
File: Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.mft (raw, json)
Hash identifier: O8pHb67BOwpX+amzhTcx/PDYmoOpXUn6XRnKm/pwRzs=
Subject key identifier: E5:BD:36:DF:F3:3E:20:1A:39:93:C1:99:61:ED:44:13:05:00:05:DA
Authority key identifier: 2D:F8:E4:F4:DF:76:58:51:30:BE:C2:1F:F0:AC:BC:26:D7:7D:D0:AA
Certificate issuer: /CN=2df8e4f4df76585130bec21ff0acbc26d77dd0aa
Certificate serial: 01A1BD2DF8AE193E7E8924CDBCC5DC6DCC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.mft
Manifest number: 1D
Signing time: Sun 08 Nov 2026 22:01:08 +0000
Manifest this update: Sun 08 Nov 2026 22:01:08 +0000
Manifest next update: Mon 09 Nov 2026 22:01:08 +0000
Files and hashes: 1: 014SaU3DVf2xBCHtYh3_vzWaeAE.roa (hash: zD8MxGjYqDBSlLxMSSZZzoVx8V+QFVLFxa0Ij62DJw0=)
2: Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.crl (hash: T9jvUtMKQ0KMkZIJ/YNBDPOS1aR/DRyyNy6mO7RnNII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:2d:f8:ae:19:3e:7e:89:24:cd:bc:c5:dc:6d:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8e4f4df76585130bec21ff0acbc26d77dd0aa
Validity
Not Before: Nov 8 22:01:08 2026 GMT
Not After : Nov 9 22:01:08 2026 GMT
Subject: CN=e5bd36dff33e201a3993c19961ed4413050005da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:12:d6:98:c2:52:7a:36:8c:d8:2a:f1:4d:
77:fa:dc:1a:ca:e3:95:96:e4:32:3b:e6:cc:97:66:
7a:cc:aa:b8:e9:fd:f5:a3:e9:cc:d4:77:88:1e:0c:
37:2c:ee:ae:d7:65:b4:15:27:8e:14:12:06:c9:d2:
79:d2:94:0a:dc:bb:e7:60:c1:ca:8e:61:94:ec:08:
7a:50:28:48:c6:e7:63:af:ee:e5:38:69:8e:12:e2:
7b:de:69:8c:c3:ba:d5:58:64:52:ed:61:06:69:e6:
3f:9a:fd:2a:6a:6c:57:e1:e4:fc:f1:79:a6:17:0b:
25:be:83:0f:76:e9:2e:2a:15:c5:97:58:5f:ec:b2:
c7:df:9c:a2:aa:34:9e:03:e5:6f:27:02:dd:fe:12:
68:06:46:5d:ba:3f:4c:ec:52:3e:d4:7a:7a:9a:a9:
a3:a1:1a:d1:41:92:fa:6d:13:88:8b:ea:ee:ce:9d:
52:27:f0:21:b0:56:7f:c7:69:15:37:23:cb:5d:37:
de:59:85:6e:d1:7f:7e:30:77:ef:83:2b:5a:16:a9:
3c:73:8b:06:15:ab:f7:1f:7e:78:73:ff:98:a7:44:
68:2d:7e:88:3d:ab:b8:e7:8c:07:de:2b:26:94:36:
b5:06:a9:73:eb:ab:67:95:3a:44:56:a6:ea:6b:30:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:36:DF:F3:3E:20:1A:39:93:C1:99:61:ED:44:13:05:00:05:DA
X509v3 Authority Key Identifier:
keyid:2D:F8:E4:F4:DF:76:58:51:30:BE:C2:1F:F0:AC:BC:26:D7:7D:D0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3c92e9-cd03-4d8d-be8f-bbb17a49ebde/1/Lfjk9N92WFEwvsIf8Ky8Jtd90Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6c:d5:70:b5:9a:3a:89:89:4a:73:b8:2b:72:fa:1a:a7:43:
34:2a:af:6f:67:e0:a4:27:4f:b2:b4:b9:7c:1d:0e:8d:38:24:
4f:7b:60:2a:46:af:54:3b:7a:cc:5b:27:bf:2d:b6:64:99:2e:
44:f7:6a:28:a4:83:93:37:d0:7d:f2:e6:be:01:0f:be:5c:5a:
11:f9:db:fb:88:21:2e:3b:48:34:ff:a5:01:14:06:6b:1c:83:
7b:65:61:6f:65:08:22:43:96:75:17:1a:7f:c5:41:19:96:a6:
e7:32:46:e9:f7:15:0b:bc:4c:60:82:c4:d2:3f:c9:e7:9f:63:
a8:a4:04:cb:54:aa:73:9c:f6:0a:56:6d:06:9d:27:c4:e3:cb:
24:bf:77:a7:8a:ca:82:5e:1c:17:0a:94:ad:43:c2:a0:13:4e:
23:b9:5e:a5:2a:5c:45:53:4b:e8:66:ac:e2:91:dd:9a:28:31:
76:7e:af:1b:13:59:90:99:da:83:01:a9:57:61:fe:6a:04:e8:
f2:6c:52:2a:0f:d3:86:e7:e4:93:1b:36:8e:36:43:33:87:c9:
63:8f:f6:d0:24:a5:a8:17:26:31:ca:e6:f5:f6:fe:a9:27:7a:
51:72:25:a4:30:a2:7b:a1:5b:1e:b4:27:e5:a8:a9:cd:f8:69:
62:cc:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 08:55:47 2026 by rpki-client