Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: aa42QL60tWXki4emvnyaN+Zc/RmRq4Irk/FAJKqp+uc=
Subject key identifier: 4C:D6:2A:E8:5C:58:C9:F9:C5:BD:4E:C6:EE:09:BD:D6:1A:3F:FE:20
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01A0CF6D07CA519A89EABFDA14D697A7D07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 131B
Signing time: Wed 23 Sep 2026 18:00:23 +0000
Manifest this update: Wed 23 Sep 2026 18:00:23 +0000
Manifest next update: Thu 24 Sep 2026 18:00:23 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: dpB4EEze4iV6/OvVjT8uxnu+EcrCYKZrGZiFCyTkAJE=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:07:ca:51:9a:89:ea:bf:da:14:d6:97:a7:d0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Sep 23 18:00:23 2026 GMT
Not After : Sep 24 18:00:23 2026 GMT
Subject: CN=4cd62ae85c58c9f9c5bd4ec6ee09bdd61a3ffe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:5f:3d:a2:21:67:0a:4e:9e:80:ea:fe:d8:
73:12:c8:6a:09:e8:44:7d:f0:17:71:df:bb:ae:a8:
d6:e0:b1:09:9c:6f:56:f2:e4:02:82:16:96:eb:e2:
e9:61:a1:2f:2a:24:6f:9a:0b:fa:24:8e:6c:fe:3d:
7f:b5:a0:a5:b2:ac:98:fd:4c:b3:49:0f:79:a5:07:
76:d4:17:1c:bd:62:e8:62:79:f7:7e:7e:fa:78:97:
48:df:08:8f:e1:18:08:a2:06:ae:3f:5c:6e:00:7c:
6a:c0:9d:eb:a6:fe:43:4e:6c:1e:5c:1a:92:d0:4f:
fb:6f:d5:e9:fe:69:d0:d9:8b:6a:51:1b:31:64:09:
3b:b5:ed:44:1e:02:fd:15:13:59:e2:bc:09:08:93:
54:d6:da:e6:3f:46:4d:c5:00:da:e2:57:b5:51:19:
54:73:45:25:54:c5:8d:c8:b4:00:49:a2:c0:70:04:
ae:cc:01:c1:00:68:13:fb:de:d2:a1:6d:7b:01:d5:
35:90:84:ae:e1:20:57:0d:5d:a4:5a:bc:12:5c:28:
fa:78:3b:34:2b:e6:60:b3:5a:a7:7c:6c:36:54:9c:
92:23:93:0c:6b:6f:e7:9a:5c:d5:a8:2a:df:79:4c:
52:e4:18:ab:9b:bd:e1:3f:f1:76:30:71:70:f1:ec:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:2A:E8:5C:58:C9:F9:C5:BD:4E:C6:EE:09:BD:D6:1A:3F:FE:20
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:93:4e:5b:5b:a2:97:7f:24:54:b6:8b:96:4e:49:89:e6:
b3:ff:60:32:8a:41:51:60:23:02:1a:9b:a5:fc:a3:94:0e:c8:
7f:e5:ed:19:35:0f:99:93:cd:87:bc:99:16:55:b1:2a:97:2c:
d3:90:1b:2a:68:08:69:42:85:17:65:46:29:e8:76:cb:a8:a8:
1d:44:b4:71:1e:0c:2a:1f:02:3b:2b:ae:a5:25:3d:7b:ef:ff:
7f:72:9c:71:d2:ba:4e:d0:67:a3:d5:48:33:93:e4:35:21:33:
ee:7f:ef:69:64:0b:34:eb:07:b3:ef:89:a2:0b:80:b1:4d:d3:
c8:0f:3a:ed:ec:fe:bf:07:42:6b:29:67:23:3b:de:41:8b:63:
d0:42:37:8d:b9:f5:71:fb:6e:b3:28:26:68:04:97:70:81:32:
c1:7c:88:32:92:0a:10:9a:21:b7:14:b1:5d:04:85:ea:6f:c2:
57:45:54:fd:f6:72:83:52:da:24:a9:09:d4:e3:6d:00:12:d7:
1a:d5:d0:6f:9b:db:ff:8d:5c:93:7a:43:93:c1:29:40:a1:a5:
07:81:22:d4:a2:65:ee:63:dd:d3:02:f6:97:dd:73:12:2a:1c:
2d:a2:84:f8:53:49:e1:29:b3:46:d4:44:12:88:6f:41:29:ee:
63:9b:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:36:38 2026 by rpki-client