Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: X/WA0GA0ZbO2Of1T3TyvBDa0vyPyuRDSPOzxOPRY+to=
Subject key identifier: C0:48:E3:D5:11:CD:5B:CF:9E:76:2A:13:3A:E8:8B:7D:9F:BA:B4:AA
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 01A138FFCD79167D62B824D417211E680066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 091C
Signing time: Wed 14 Oct 2026 06:00:50 +0000
Manifest this update: Wed 14 Oct 2026 06:00:50 +0000
Manifest next update: Thu 15 Oct 2026 06:00:50 +0000
Files and hashes: 1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: VLOj/V/H2Smry1KikxzeB4eTZ0O+Uf8N/f2O2gAEZDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:cd:79:16:7d:62:b8:24:d4:17:21:1e:68:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Oct 14 06:00:50 2026 GMT
Not After : Oct 15 06:00:50 2026 GMT
Subject: CN=c048e3d511cd5bcf9e762a133ae88b7d9fbab4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:55:13:67:49:4b:a7:86:10:cf:9f:fb:51:
a8:7c:17:aa:f9:f8:d9:5c:fe:8e:a2:ad:23:11:38:
d5:cc:af:59:2c:68:6a:16:a0:ce:18:e5:30:18:f7:
31:34:e4:a3:d2:2e:03:6a:21:4b:bd:8f:1b:01:64:
72:11:31:4a:03:8a:7b:63:22:b5:99:61:1a:3b:70:
9a:35:6b:e9:3a:b8:60:d5:cd:01:c3:14:0f:2b:68:
1a:b5:b6:c4:86:a4:7e:ac:45:a5:6b:a0:b5:28:31:
e0:a4:22:9d:88:bf:96:e0:0d:6d:ff:74:91:59:71:
87:2b:03:0b:ce:a0:5a:f6:d9:83:2f:6b:3f:63:84:
45:78:54:c5:b7:e0:cd:2d:ef:c9:48:41:51:13:d2:
6a:be:c0:53:c7:8c:38:54:3e:a9:38:38:b7:a3:c1:
57:7e:13:5b:27:93:94:66:9a:6a:30:80:0b:33:a7:
f0:20:6a:e5:4b:a2:1b:ff:40:47:51:57:f9:ba:2a:
30:c4:c2:34:d8:7a:f8:66:22:ab:bb:37:94:ca:fd:
4a:9d:85:9f:fd:e0:20:ef:47:f3:01:1d:36:4a:d7:
27:17:db:e5:4c:9d:53:41:92:f1:eb:e9:77:ab:51:
a5:86:0f:c1:04:c2:2d:4e:e0:e4:68:5e:37:24:8d:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:48:E3:D5:11:CD:5B:CF:9E:76:2A:13:3A:E8:8B:7D:9F:BA:B4:AA
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c4:02:6a:ce:f2:06:ee:ba:4d:32:6b:fa:58:ee:b7:cc:e7:
e5:53:34:b2:e1:9c:eb:3a:cc:29:64:74:66:ac:a8:01:75:a7:
28:63:39:1e:ff:d2:c9:72:b6:b6:ef:ea:47:f4:46:f2:f5:c1:
ed:c4:76:0f:90:75:43:73:e0:e8:82:15:62:da:91:34:a0:38:
9b:50:78:e2:33:a5:5e:9c:9c:7c:25:a1:c0:52:c2:e1:fd:29:
26:90:05:5f:59:a5:e2:80:fe:f2:8c:4e:bc:f8:d9:d2:36:e2:
9c:7e:02:da:f8:36:c2:62:fe:06:97:23:75:e3:df:0b:ce:9f:
78:f4:db:d9:2a:a8:75:e4:7e:05:10:36:5d:0d:8b:42:1f:fc:
bd:7e:ac:76:49:45:7a:e1:12:c1:cc:5f:77:7c:3a:b7:85:f3:
2d:33:3e:4e:bc:d1:ef:65:b5:9b:d9:df:5a:e0:c6:9b:50:da:
61:00:6f:c5:a3:34:70:10:19:ae:e7:c4:6d:a3:65:f6:25:d9:
69:a5:e6:37:b6:bd:5a:74:74:8f:1f:d1:b5:0b:3c:f8:32:06:
09:3f:d7:c3:5d:62:7e:0a:87:6e:9e:1c:af:16:99:ca:22:6a:
c0:46:0b:fe:da:7e:59:7b:39:83:d4:9a:01:3e:c3:dc:00:ae:
7c:65:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:48 2026 by rpki-client