Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: 6fFCVPVXW4Q2DgPOWfotIaiPmOGvqpnzrB4AcjohOn0=
Subject key identifier: 31:A9:72:2D:32:13:54:FB:D3:03:BA:F2:DD:5E:A0:F2:36:92:4C:8D
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01A0F1C3C44C508F791DF63F2537CE93C27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0509
Signing time: Wed 30 Sep 2026 10:02:13 +0000
Manifest this update: Wed 30 Sep 2026 10:02:13 +0000
Manifest next update: Thu 01 Oct 2026 10:02:13 +0000
Files and hashes: 1: MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa (hash: blK8+6tOSfWU/roFJ6xx5fVNBHhlL8RA+sVhQOK1Yz8=)
2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: JDGSfDgEwHMd/CZ38RJaG0kA1PCCULDyBm5SEj/MO2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:c4:4c:50:8f:79:1d:f6:3f:25:37:ce:93:c2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Sep 30 10:02:13 2026 GMT
Not After : Oct 1 10:02:13 2026 GMT
Subject: CN=31a9722d321354fbd303baf2dd5ea0f236924c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:54:e9:60:eb:ef:54:a5:80:1c:7c:f0:e1:
7f:ee:9a:89:9f:57:54:5e:1e:bb:f7:15:77:fe:e5:
60:8e:fe:ad:14:cd:ce:9d:78:a8:b4:40:da:00:d9:
13:0b:29:ca:29:76:90:01:28:57:a7:21:8b:e2:e3:
85:96:7e:12:07:75:ae:70:e2:10:72:05:73:b0:24:
5a:61:b9:45:16:a6:cb:d6:7b:34:7f:b1:c7:04:0f:
2a:e9:44:d8:60:f7:35:c7:ba:58:a0:d7:e3:57:3a:
0a:7a:d2:a5:0e:c0:7c:c1:fd:f8:77:7d:2c:63:6a:
35:ef:ae:37:af:aa:86:a8:4f:27:a1:35:62:d5:d7:
c4:b5:0b:62:54:fa:9d:35:ba:1f:8c:a6:8c:ee:23:
3b:6c:8a:c6:77:5a:5c:3c:78:ff:8e:c8:76:37:3a:
9e:9c:82:ec:9e:05:a3:76:ce:5d:be:a4:60:7a:da:
c9:43:57:3a:18:8b:66:71:b1:fe:c1:b5:67:ea:79:
cd:2d:23:f3:cd:c9:2c:e3:67:ac:da:b4:b0:bf:ee:
6e:c8:b4:d4:24:3f:68:49:cc:e7:c4:b4:34:c8:be:
0b:a6:10:ce:ba:2f:c6:8f:76:bd:c2:c8:43:dd:27:
55:fa:9f:a0:54:a2:d9:8e:70:18:e7:a6:44:2d:e7:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A9:72:2D:32:13:54:FB:D3:03:BA:F2:DD:5E:A0:F2:36:92:4C:8D
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:ae:07:31:e3:09:7d:01:27:bf:2d:ea:a4:ce:08:51:31:
ad:55:dd:19:77:54:2d:10:ed:8c:da:41:e9:83:fa:e6:66:7b:
15:72:7a:6a:c3:43:bc:a3:13:87:c0:0b:16:07:aa:6d:18:ba:
c7:c9:1b:b1:f6:68:e8:f3:40:1f:77:0d:d9:95:09:49:e3:56:
15:86:94:7d:12:1b:f7:63:70:06:f9:b3:a0:c4:3a:2a:02:7d:
35:8a:0b:58:0c:f8:ad:22:70:c3:07:fa:d9:da:dc:78:a9:4c:
f2:ff:d5:06:c0:a4:e4:1d:fc:e2:60:1d:b2:48:ea:81:95:d3:
91:4f:55:9f:ca:70:05:99:87:ec:c5:96:12:26:43:46:e3:b0:
c2:21:d3:6a:11:47:b5:71:b7:a3:f2:a3:54:c2:1e:07:5b:54:
d1:42:92:d3:51:76:42:90:78:0a:32:87:5b:f3:ab:b9:74:7f:
70:6f:90:7f:06:0a:b6:76:11:09:9b:d2:c7:97:fa:83:df:ab:
2e:45:53:bc:7b:8a:b3:5b:e4:7b:cf:cf:9e:d6:e0:e0:3e:dc:
a5:7a:33:29:4b:c7:e3:51:ec:7a:34:7d:4f:c8:16:82:52:4a:
a6:54:df:b0:ed:59:03:72:a2:5b:41:41:80:cb:e8:ab:1c:4e:
3d:6f:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:51 2026 by rpki-client