Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: bhC05CrmYCdpOAazMY7ZR/3spU8m2X+0gyFAAkXqZ0Y=
Subject key identifier: 6A:6F:AA:A9:C0:00:7F:0F:72:8E:EF:8E:89:E4:18:38:8A:CF:0B:6D
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 01A0D7CC8BBE0CD1C2C180E492CA1E16CEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:41 +0000
Manifest this update: Fri 25 Sep 2026 09:01:41 +0000
Manifest next update: Sat 26 Sep 2026 09:01:41 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: gZLhYZYegYXiTrl6KO5f75Q0ztRkU4tEOF8YdoruP0M=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:8b:be:0c:d1:c2:c1:80:e4:92:ca:1e:16:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Sep 25 09:01:41 2026 GMT
Not After : Sep 26 09:01:41 2026 GMT
Subject: CN=6a6faaa9c0007f0f728eef8e89e418388acf0b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:e2:af:1e:5a:a3:da:6a:1d:33:49:92:9c:
5f:fb:81:5a:f3:8c:06:63:01:52:d4:bf:14:07:ed:
9d:d0:62:3f:d9:a1:bc:e7:66:76:37:05:dc:da:db:
b3:49:5d:d4:ce:11:9f:ce:eb:49:67:0c:cd:bd:6e:
b5:36:57:03:b2:bc:38:01:90:58:e2:32:13:24:b0:
61:b1:ad:6a:c5:2b:1e:5b:d2:68:4d:ce:ed:99:55:
b1:30:3c:a4:5d:8b:0f:b0:c9:ab:fe:1f:2d:08:2a:
17:4b:77:64:f2:47:66:39:2b:ba:5c:5f:89:9c:68:
49:f5:99:fb:3c:c5:0f:ed:69:10:1f:7d:ec:d3:23:
52:5a:7a:8a:28:c6:73:11:bb:04:c4:0d:b9:cb:58:
08:10:39:cd:27:2d:8e:bc:44:d3:99:96:39:16:4d:
9d:ac:56:03:a7:d7:50:f5:cf:8d:0c:3c:71:a5:8a:
19:af:fc:a8:af:44:ef:bb:54:78:af:b0:22:1b:a3:
00:df:7b:54:0f:80:c4:25:a0:9e:64:7a:a0:5b:e6:
b4:39:19:59:26:6a:17:82:36:6e:17:7d:90:27:d6:
97:71:a9:f3:71:ae:06:30:69:09:04:e1:8d:a9:e1:
e8:e1:e3:19:e2:e5:e3:ce:42:75:dd:18:19:6f:7f:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:AA:A9:C0:00:7F:0F:72:8E:EF:8E:89:E4:18:38:8A:CF:0B:6D
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:5b:9c:ed:23:43:4d:8c:a4:5a:fc:d4:a2:10:44:2e:e1:
19:8e:9e:dd:51:ce:c8:12:e6:59:30:9e:29:7d:5c:40:92:4f:
5c:c1:bf:c9:7b:52:f3:e0:45:ea:61:51:4a:86:82:f4:91:ca:
06:b0:f3:b8:7d:6c:ae:8c:49:fd:6f:50:9f:3c:bb:94:6a:34:
07:7f:80:06:e6:f1:c2:c9:ea:3c:70:c9:a5:26:99:30:d7:91:
e1:3a:63:0b:cd:cd:11:65:18:c9:02:90:b1:90:76:d7:74:7f:
ef:8c:5a:d5:ca:42:3e:68:22:3b:83:e4:2f:af:95:58:36:66:
a4:7b:a1:cb:30:1f:39:7e:b1:5b:1b:b3:37:ea:e0:17:a0:fb:
f1:6c:0b:79:9a:ac:d3:e8:a0:48:84:a5:2a:16:df:a6:4c:e4:
76:0d:10:d4:c1:d9:4c:ee:2b:0f:03:90:b7:b9:1f:be:9b:76:
22:2d:ad:e5:c8:53:4f:a0:6e:b3:98:c5:f0:a8:73:e7:65:a6:
aa:13:04:cb:9d:fa:49:0c:35:fb:53:d0:fc:55:5e:0c:e3:42:
55:51:ad:94:e2:41:0e:64:a2:31:22:4e:f6:29:56:bf:0b:5d:
bf:05:1f:23:48:ce:40:3e:48:fa:13:98:fe:f2:89:8a:86:82:
4c:d1:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:06:25 2026 by rpki-client