Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: TCgHHcS9Awir6spAMHfoquSL6G2CYIzXkOfyF8llYLc=
Subject key identifier: 2E:F0:FD:1E:F2:F6:AE:5C:D3:63:2A:13:5A:D1:7E:2E:7B:5E:FF:80
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 01A1046E164ACB2D90086F800EF45BF6ED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 07A7
Signing time: Sun 04 Oct 2026 01:01:25 +0000
Manifest this update: Sun 04 Oct 2026 01:01:25 +0000
Manifest next update: Mon 05 Oct 2026 01:01:25 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: JcLT8XrkZp/sRuOB2IwNja2hFqzaShQjz/ozybZHGV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:16:4a:cb:2d:90:08:6f:80:0e:f4:5b:f6:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Oct 4 01:01:25 2026 GMT
Not After : Oct 5 01:01:25 2026 GMT
Subject: CN=2ef0fd1ef2f6ae5cd3632a135ad17e2e7b5eff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:ee:ab:39:7b:f7:ef:d6:14:b8:53:fc:6a:
2c:cc:7d:04:d6:e2:b4:a6:dd:94:f2:e1:d4:99:18:
7a:9b:e1:91:b7:84:59:74:d7:72:3b:e8:e3:80:a3:
ae:eb:c5:76:5e:1b:72:42:da:15:c8:a0:9e:87:1e:
59:a2:c9:96:06:74:01:a7:2b:6e:9c:8f:3b:6f:d3:
fe:a7:a9:93:13:ae:af:92:8c:4b:76:9d:f9:7d:95:
74:02:e7:4f:19:e8:c2:fa:2a:d0:15:66:a2:07:76:
d9:6e:16:10:36:77:bd:d8:ff:56:29:70:c0:3d:b3:
c7:c6:e2:34:8a:a3:1b:ef:af:2f:92:ef:3b:8f:30:
20:ce:e7:83:4d:5e:51:5c:fd:3b:a7:3e:b5:51:de:
6a:7e:ef:78:ce:48:81:df:36:5b:47:51:79:17:a3:
d1:44:f2:a7:db:16:b1:21:98:c4:99:a9:fc:c6:6d:
6e:4c:5e:2b:e3:c5:3a:49:bc:52:e2:7c:db:35:c1:
c1:e2:87:56:cb:b5:8f:80:b7:ef:c7:10:d2:3e:72:
67:ec:dc:ba:cb:83:ba:25:33:fd:d6:fb:20:49:55:
6c:0b:b3:82:c6:71:59:e5:40:7f:16:92:fa:9c:2c:
74:86:07:29:e3:f0:67:b8:5b:a5:94:59:69:b8:d0:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:FD:1E:F2:F6:AE:5C:D3:63:2A:13:5A:D1:7E:2E:7B:5E:FF:80
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:52:6d:8e:cd:28:8d:6f:a7:8c:fb:fa:38:ea:ec:67:89:
bd:02:38:0c:74:3e:b6:df:4c:15:2f:41:5b:b1:f4:5f:55:b1:
18:f7:48:87:2b:ca:b7:d0:87:c6:94:79:49:fb:00:6a:16:48:
0f:3a:7b:55:71:58:5f:7e:9f:8e:d0:b2:1d:3e:2e:80:75:2d:
ce:9d:ca:ce:01:f9:b5:8f:e6:dc:da:7f:00:6d:a4:35:3f:36:
17:59:5a:87:7e:d5:52:e0:ba:a5:e8:6a:85:cd:00:9c:d7:40:
21:f8:4d:32:55:de:8f:5a:60:c9:8b:b5:80:af:c2:49:8c:15:
44:b4:d1:d0:11:55:56:d0:90:54:ff:37:8a:cd:6c:71:6e:c4:
90:ff:e8:f1:56:9e:2b:cd:38:3d:7a:32:e5:86:94:bc:2d:3b:
0b:e1:17:eb:9e:bc:34:79:7e:ca:9c:dc:d7:81:c2:86:45:97:
ac:f6:7e:c2:68:c4:be:d2:bd:37:81:6a:a7:af:bb:c9:e0:9c:
1d:5b:cc:13:fa:11:b6:57:90:9a:a2:9b:a1:6d:fb:a5:c6:05:
74:1b:58:ad:07:29:02:dc:5b:f3:ac:22:a4:14:f9:7b:6e:1f:
fa:c5:6a:07:de:4e:8e:a5:9f:58:31:63:cb:c7:7a:02:e2:75:
8c:0b:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:00:32 2026 by rpki-client