Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
File: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft (raw, json)
Hash identifier: lUzyEkqb2VVgY2e5I0JzXOtUUSKLERzQI92lKOTRshc=
Subject key identifier: 2D:0B:0D:A4:18:C9:11:93:96:46:E7:9E:04:43:A5:51:91:24:45:C7
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 01A0C8590C479635F85A9322F44E51BE1CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:14 +0000
Manifest this update: Tue 22 Sep 2026 09:01:14 +0000
Manifest next update: Wed 23 Sep 2026 09:01:14 +0000
Files and hashes: 1: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (hash: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=)
2: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl (hash: iwKP1aTZvvbFHNSLMBvL8PzS7sQMOG5bpP0DjsCsryQ=)
3: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (hash: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:0c:47:96:35:f8:5a:93:22:f4:4e:51:be:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Sep 22 09:01:14 2026 GMT
Not After : Sep 23 09:01:14 2026 GMT
Subject: CN=2d0b0da418c911939646e79e0443a551912445c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:3b:66:cb:e2:ff:32:78:a5:02:8e:4d:ab:
00:5e:11:51:9b:9c:b1:73:51:01:03:5e:64:43:5a:
81:70:c8:79:55:c5:c6:98:43:07:83:b5:4c:dd:8c:
d5:ae:ab:e5:a6:68:ff:07:de:df:15:6f:61:c3:e9:
92:7f:03:fc:e0:28:db:b2:6a:56:e0:8f:f4:e5:b4:
5a:77:91:aa:37:c9:99:a8:ba:d4:71:49:3a:5c:c1:
e0:55:87:c6:1b:a4:bc:b7:77:72:d7:08:22:8a:ef:
1e:25:da:52:f8:ae:ce:57:69:09:3e:e0:95:db:99:
d3:51:60:60:7e:63:ba:8c:df:19:96:a7:b3:1f:95:
07:c0:25:5c:35:18:8b:38:f1:eb:e5:28:06:38:1d:
9b:44:8e:cb:21:05:07:0e:e2:4e:a0:66:34:3b:4a:
16:e5:e6:48:62:0a:f6:88:04:47:a5:bc:f3:38:d8:
b3:35:72:04:35:99:d0:71:ad:e8:39:6a:a9:0c:72:
22:ca:cc:a8:bc:aa:28:05:8a:d3:f3:35:21:a3:cc:
6a:ef:69:f9:8a:cb:78:e4:18:d0:fd:b5:9d:c1:6f:
31:3a:fa:ac:c7:33:cf:8b:9d:1b:ec:49:60:64:18:
3a:5f:ad:80:29:f1:bc:26:af:b6:a8:b1:bc:98:b1:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0B:0D:A4:18:C9:11:93:96:46:E7:9E:04:43:A5:51:91:24:45:C7
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:c3:69:10:9d:bc:a3:4d:13:86:59:93:da:06:8b:b5:43:
bc:3b:2b:fa:54:fe:8a:b8:cf:ec:6c:c2:01:8f:02:2b:74:3f:
d7:66:9f:e3:dd:34:04:f8:93:44:e3:dd:0d:67:41:73:44:84:
26:fc:42:34:92:3d:6c:97:5f:4f:3e:a9:6a:e5:64:cc:e2:7e:
e6:76:8c:f0:b8:8b:e0:f3:07:80:d8:4b:7c:5b:a7:c1:3f:56:
54:a2:b6:a9:80:d3:2a:0a:26:fc:e8:cc:b1:33:54:78:c3:a4:
a6:25:cf:35:6c:b3:27:15:73:9b:6a:a9:d3:bd:de:6b:b0:79:
78:13:56:37:bf:18:d6:08:7f:9d:18:1d:ff:fc:88:e9:b4:0f:
64:89:d5:68:55:b5:04:52:4f:f0:79:fd:df:e2:af:7b:8e:4c:
03:c2:1c:98:8e:4f:b1:b0:fb:ea:c1:43:0b:cf:19:8d:54:97:
11:a0:07:29:40:bf:d9:fa:f7:6d:8b:8a:2f:a5:12:4b:48:9f:
f3:ee:b1:c0:28:ba:49:47:76:4c:f2:ad:91:9e:ec:80:f7:e4:
3a:75:69:78:e9:f1:f8:a3:39:8a:94:25:4d:5d:06:89:6f:7a:
80:a2:80:3a:6e:4a:8d:a4:b4:55:d0:55:83:24:d7:2a:58:f1:
78:b2:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:01:01 2026 by rpki-client