Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: SkJ5OzJZBCpz2GqE+cdBOXh1sqAV3PvHOo5fEFP7IXY=
Subject key identifier: 8E:41:5E:89:2A:E2:D5:D8:84:94:82:4B:D8:56:38:BD:9B:F5:F8:DF
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 019F935C2A6290C75CE02B2E4720ED4D144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: kpsFBeDZkuBAunIw90q5y3ONEFgQiJ+ZroIgx+v2/iU=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2a:62:90:c7:5c:e0:2b:2e:47:20:ed:4d:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=8e415e892ae2d5d88494824bd85638bd9bf5f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:a4:4d:fe:aa:54:ad:db:78:c3:2d:cf:f2:
53:50:58:54:a1:26:b4:ee:b8:a8:af:30:0d:df:33:
57:a3:2d:94:da:7b:d0:dc:e0:7b:c7:87:03:4c:2c:
ea:fd:85:e8:59:f2:b5:c5:b6:9c:bb:ee:ee:c0:d3:
d4:76:48:3c:0e:30:76:9a:c2:25:ed:87:ff:78:7d:
92:c4:6f:9a:4a:32:01:ee:90:07:ca:de:c0:f8:b4:
2b:5a:24:9a:55:8e:88:45:01:a9:12:b7:35:ad:44:
a1:59:0d:f6:71:36:22:40:5e:fa:68:ef:64:d3:b8:
4c:1d:cd:7a:b7:42:6c:24:f7:85:33:fc:18:7c:d7:
d2:1f:26:4a:5b:6d:7c:a1:ed:bf:f9:3d:1f:07:d0:
d0:06:06:a9:b8:a7:f2:6f:36:86:7e:fe:13:88:7e:
a2:dd:f8:b2:2f:ab:b1:a8:31:f0:0b:5e:ba:08:45:
6e:37:5e:75:1a:68:cb:1b:42:9e:9b:fc:40:0d:6b:
b2:5d:31:e3:44:ee:8b:e2:83:1f:b5:f6:94:40:7e:
78:5c:cf:5a:12:01:36:38:ab:c0:0a:58:f8:7e:4a:
e6:6a:b1:36:75:43:81:97:8b:4c:37:05:25:33:31:
a7:79:e8:cd:37:76:d2:8c:91:6d:11:9d:2c:36:46:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:5E:89:2A:E2:D5:D8:84:94:82:4B:D8:56:38:BD:9B:F5:F8:DF
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:91:13:4f:b5:5b:9b:60:9c:c8:1a:4e:1f:32:f4:e4:34:46:
5d:e5:d4:94:a6:c2:87:99:9f:ab:f7:64:a9:f2:ef:df:7a:15:
03:10:b5:be:ed:11:4d:fb:2c:9a:e8:78:b7:13:a7:1a:2f:9b:
73:19:86:d3:27:eb:66:c1:18:dc:9e:b6:2b:1c:af:7b:f5:57:
2d:b7:6b:6e:bb:b3:a0:4c:2d:87:82:f5:11:60:c2:ea:b2:10:
11:19:6f:e3:5f:1c:20:f8:af:91:00:46:14:49:7b:7c:35:fb:
ca:ff:2e:91:44:56:31:50:3a:5c:26:14:ed:b6:9e:5a:07:bd:
e8:b6:36:69:ab:26:21:e4:00:61:ce:10:a0:43:b9:7c:e9:c3:
09:0e:40:05:c1:75:ef:51:e8:80:f1:d5:7b:b0:09:3d:e5:f3:
07:48:2c:13:ca:0b:90:85:47:c2:29:a3:25:9a:75:ad:50:97:
e8:2a:da:3f:b4:bc:c2:2c:a5:1a:38:bf:d6:73:c6:14:03:5f:
fe:03:6b:ef:f3:ae:27:19:ed:46:31:4e:ae:26:36:29:e4:b8:
0a:69:f4:4a:42:d9:da:82:6c:9c:7f:bf:ed:25:96:96:84:2f:
ab:2e:f9:0e:76:3b:c5:bc:0f:2f:60:18:44:ad:80:fe:b2:db:
44:d7:ea:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXCpikMdc4CsuRyDtTRRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGYxMjVlM2YxMDMyZWQ5YjlkZjU2NmU0YzExMDAwNjky
YTNmMzEwHhcNMjYwNzI0MDkwMTU4WhcNMjYwNzI1MDkwMTU4WjAzMTEwLwYDVQQD
Eyg4ZTQxNWU4OTJhZTJkNWQ4ODQ5NDgyNGJkODU2MzhiZDliZjVmOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe6kTf6qVK3beMMtz/JTUFhUoSa0
7riorzAN3zNXoy2U2nvQ3OB7x4cDTCzq/YXoWfK1xbacu+7uwNPUdkg8DjB2msIl
7Yf/eH2SxG+aSjIB7pAHyt7A+LQrWiSaVY6IRQGpErc1rUShWQ32cTYiQF76aO9k
07hMHc16t0JsJPeFM/wYfNfSHyZKW218oe2/+T0fB9DQBgapuKfybzaGfv4TiH6i
3fiyL6uxqDHwC166CEVuN151GmjLG0Kem/xADWuyXTHjRO6L4oMftfaUQH54XM9a
EgE2OKvAClj4fkrmarE2dUOBl4tMNwUlMzGneejNN3bSjJFtEZ0sNkbKAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5BXokq4tXYhJSCS9hWOL2b9fjfMB8GA1UdIwQY
MBaAFC4PEl4/EDLtm531ZuTBEABpKj8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGc4U1hqOFFNdTJibmZWbTVNRVFBR2txUHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUt
MGQ4ZWJjZTg2Y2FjLzEvTGc4U1hqOFFNdTJibmZWbTVNRVFBR2txUHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUtMGQ4ZWJjZTg2Y2Fj
LzEvTGc4U1hqOFFNdTJibmZWbTVNRVFBR2txUHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZETT7Vb
m2CcyBpOHzL05DRGXeXUlKbCh5mfq/dkqfLv33oVAxC1vu0RTfssmuh4txOnGi+b
cxmG0yfrZsEY3J62Kxyve/VXLbdrbruzoEwth4L1EWDC6rIQERlv418cIPivkQBG
FEl7fDX7yv8ukURWMVA6XCYU7baeWge96LY2aasmIeQAYc4QoEO5fOnDCQ5ABcF1
71HogPHVe7AJPeXzB0gsE8oLkIVHwimjJZp1rVCX6CraP7S8wiylGji/1nPGFANf
/gNr7/OuJxntRjFOriY2KeS4Cmn0SkLZ2oJsnH+/7SWWloQvqy75DnY7xbwPL2AY
RK2A/rLbRNfq9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:29 2026 by rpki-client