Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: m7kE27DmABcVUVieFrquqz9Vdg5p3uQDc1/WWCpgvTw=
Subject key identifier: 91:45:7D:82:CE:57:FB:42:43:B5:11:21:20:A1:92:34:72:DA:52:43
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 01A1DC8297125710E33DD0489B279A1514DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 00:01:48 +0000
Manifest this update: Sun 15 Nov 2026 00:01:48 +0000
Manifest next update: Mon 16 Nov 2026 00:01:48 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: jtFB3x8kS71K3vnAK3hlJIwK03AxeFvFTfIxYaxKLAY=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:97:12:57:10:e3:3d:d0:48:9b:27:9a:15:14:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Nov 15 00:01:48 2026 GMT
Not After : Nov 16 00:01:48 2026 GMT
Subject: CN=91457d82ce57fb4243b5112120a1923472da5243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:6d:19:16:15:50:99:34:08:bc:98:dc:e0:
8d:cd:79:20:5b:6b:d1:81:fb:12:c7:72:43:a0:e9:
3e:62:dc:7b:2e:bf:24:ef:a3:92:1c:4c:06:c9:b1:
81:10:36:0f:23:01:06:bf:b3:7e:68:f8:3f:78:33:
4e:e9:cb:4e:d7:6f:1f:94:6e:20:89:d1:8a:80:fe:
a8:a1:ae:7d:b6:ef:78:9f:c1:fa:5a:57:de:85:e1:
e8:89:2f:38:f9:34:f6:c6:da:53:8b:1d:d2:27:bc:
f4:fc:ea:a5:77:69:12:de:ee:ef:41:8a:54:55:8b:
be:a3:b1:46:41:ae:38:8e:df:d1:38:cf:f3:d7:05:
2e:13:4a:9c:76:04:e4:08:3d:85:43:b4:da:88:e8:
81:80:63:ff:e4:67:cd:a3:91:00:5b:4e:09:55:17:
32:e9:6a:9c:3f:eb:9e:d2:05:33:8b:c0:2e:e9:a4:
a3:1d:4d:fa:41:61:80:bf:61:f4:f1:64:16:ab:a9:
89:04:27:a3:ed:1d:7b:38:ef:9c:20:df:c2:db:b3:
a6:83:55:85:c1:6b:1e:f3:c1:48:9d:75:fe:e1:3d:
0a:2c:22:38:58:ab:b7:cd:bc:02:34:3b:2f:6b:e7:
a8:13:d6:d0:57:72:d2:07:9a:81:0b:8e:a4:28:55:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:7D:82:CE:57:FB:42:43:B5:11:21:20:A1:92:34:72:DA:52:43
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ed:3f:17:46:b1:8d:00:5a:1c:71:d9:8e:d3:18:28:7e:05:
57:b7:80:e0:4f:f5:9b:14:03:5d:df:3e:0b:8a:bb:82:d0:1f:
0b:8d:cf:74:3e:9f:94:7a:c1:08:2f:ee:86:d9:68:2f:0e:5d:
ec:af:89:7c:7c:c1:f8:ec:c3:3f:f4:90:56:b6:c7:7c:4f:eb:
bc:57:77:2a:07:0d:be:cd:1d:4a:a5:3d:83:c6:ea:54:5e:f4:
3e:d6:4d:a3:20:f8:ea:e0:34:07:29:79:c0:ed:1b:c1:5b:16:
70:4c:71:18:06:75:e0:f6:e6:e6:ce:39:17:73:31:94:ee:01:
6a:36:44:ec:7a:95:ac:34:9d:05:59:1a:d3:e5:c3:be:4a:e0:
2b:b1:5e:be:03:2d:37:89:4a:e1:4b:40:96:c3:fd:5f:e6:82:
96:53:b4:37:45:ba:4f:f2:27:d6:3f:09:e7:63:2c:47:d1:ee:
57:cb:4c:7b:78:7d:04:e8:d3:95:74:94:c7:dd:d0:70:4e:62:
9d:bb:24:43:a1:46:74:b0:ea:78:04:39:13:ac:6c:e2:df:d8:
76:9c:ea:46:0b:b4:20:d6:bd:f9:69:16:6b:59:21:28:eb:6a:
16:72:91:11:5f:57:15:48:74:4f:95:01:dd:94:cc:57:0b:f3:
04:6c:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:58 2026 by rpki-client