Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: Yty0P4547SoIAlQfWid43ZWmRheaeJyqdPTcUI2anL0=
Subject key identifier: 05:2A:8C:3A:BE:26:B1:CF:A7:19:36:9D:5C:A8:A3:00:83:82:AC:A1
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 01A0D916D71CBC20B1F8B234215C26CB3EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0EF2
Signing time: Fri 25 Sep 2026 15:02:27 +0000
Manifest this update: Fri 25 Sep 2026 15:02:27 +0000
Manifest next update: Sat 26 Sep 2026 15:02:27 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: QuM3/nlv+syue64VnUzBFcjjD53UyXthXDJee5dS2YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:d7:1c:bc:20:b1:f8:b2:34:21:5c:26:cb:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Sep 25 15:02:27 2026 GMT
Not After : Sep 26 15:02:27 2026 GMT
Subject: CN=052a8c3abe26b1cfa719369d5ca8a3008382aca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:3c:33:f8:b3:4b:85:ac:30:37:95:24:98:
d3:fd:cb:5d:26:39:94:d2:f4:30:e0:ac:d0:5a:aa:
98:20:a0:d2:20:4d:27:c9:53:97:2f:07:d2:f9:35:
63:53:a5:01:c6:9e:29:85:54:53:6c:e9:8a:ea:f4:
24:87:1c:a7:6b:a5:dc:18:4e:99:3c:8d:4e:23:a6:
f6:00:ca:4f:28:12:78:ea:4f:98:95:09:d8:c9:2a:
3c:2d:9a:d0:43:cc:b4:a1:cc:29:1a:a0:50:bb:a1:
86:52:bf:26:ef:71:13:41:bb:13:50:d7:5a:cd:48:
ab:a0:8b:b4:52:34:98:17:8c:f6:8b:75:f6:c3:7e:
f8:17:1a:6f:a7:61:95:e3:23:79:21:eb:cb:5a:3b:
57:7f:ef:a0:22:d6:eb:e1:5c:59:b6:c6:5b:23:49:
1e:00:63:8e:9f:d3:de:84:69:15:57:84:c3:3d:b2:
84:54:6e:88:1d:cb:a1:b6:71:e7:90:f6:8d:b3:96:
ca:76:5d:ad:1e:c2:0d:d2:db:3f:9c:0f:fc:44:5e:
fb:fb:53:70:37:48:98:4a:73:67:ed:1a:97:29:d3:
3f:97:d6:d5:17:d4:57:91:40:0f:7b:81:29:40:2c:
d9:d8:13:c1:90:5b:fc:e8:7b:a6:f2:a3:88:5b:70:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:8C:3A:BE:26:B1:CF:A7:19:36:9D:5C:A8:A3:00:83:82:AC:A1
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5a:4e:62:72:a0:a9:74:aa:d5:57:3c:46:72:db:21:57:6e:
92:b3:b4:aa:e5:8d:5f:da:38:ca:b3:67:89:d0:6e:3a:6a:5b:
3d:4b:f9:33:aa:cb:81:35:85:3f:51:11:33:9d:3c:ca:dc:04:
54:1b:88:66:3e:f2:4b:70:eb:d1:32:ea:a0:22:9f:20:6c:ab:
41:b1:c8:c7:1a:31:68:f5:ac:f1:1b:03:bb:42:c2:43:24:99:
2a:c5:39:f6:00:73:d8:13:d1:12:c5:04:18:07:97:a4:a7:9f:
d8:0d:6b:82:c4:87:ba:7a:cd:00:4c:e6:13:71:b3:3d:c9:4d:
8d:44:cf:f2:bc:8c:03:29:b5:0a:3f:af:b4:80:91:0a:32:be:
6e:06:b1:02:bb:85:46:79:8b:d6:ca:7d:5d:78:46:9d:d8:bf:
f2:40:5e:e3:da:5b:89:9d:e1:43:b9:8b:4b:14:01:d2:d5:2c:
60:13:03:31:8b:4d:2f:da:02:e6:aa:65:81:97:8f:7b:4d:08:
52:15:85:7a:b5:d4:65:6e:9f:77:2f:a4:d3:c4:a3:7b:1b:5c:
2d:7d:ef:74:e6:64:03:4f:2e:f6:bf:fd:df:e9:fa:69:76:7c:
ac:7b:34:0e:cc:80:48:74:2d:12:75:c7:44:24:f3:b0:52:4d:
da:6f:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:33:19 2026 by rpki-client