Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: 6Ea3WK4gFAA+6gHTuELl8+Ol1i0jOOyCMN336Ny4TG4=
Subject key identifier: 5C:A6:05:B4:6D:C9:09:9E:12:4B:88:DA:53:B5:AE:F6:9F:D5:15:A7
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01A0D796A9F295C4CD64007133E5C1CE1AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0967
Signing time: Fri 25 Sep 2026 08:02:50 +0000
Manifest this update: Fri 25 Sep 2026 08:02:50 +0000
Manifest next update: Sat 26 Sep 2026 08:02:50 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa (hash: eTI4gnLg2t5AMJXWsqRgOPsBhukLdQ0XY5+wofN0AgI=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: bmXIyboPTqZZqC0QYSddKgTps7nn8Gp5tTu8SRlJFvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:a9:f2:95:c4:cd:64:00:71:33:e5:c1:ce:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Sep 25 08:02:50 2026 GMT
Not After : Sep 26 08:02:50 2026 GMT
Subject: CN=5ca605b46dc9099e124b88da53b5aef69fd515a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:98:5a:03:a0:0a:4d:4b:50:f6:57:3d:80:
67:f7:a0:cb:9c:c9:6e:f9:1e:cf:24:cf:c8:a9:ad:
80:45:33:86:19:73:5c:3b:fc:8b:61:2a:bf:2e:9f:
87:46:1e:26:a0:e7:c3:fb:21:b6:60:ff:56:83:73:
8b:24:c5:8b:1e:4f:0f:1d:f0:2a:78:a0:48:dc:3c:
2f:01:a1:57:b3:2c:a4:9c:61:04:4b:34:5f:f1:4a:
fd:c3:79:0b:d3:ae:43:49:0c:76:b1:f3:98:f3:49:
8f:a8:35:b8:36:48:50:8e:16:c2:a0:55:6c:31:44:
25:9c:de:d1:19:09:90:4f:f8:15:86:eb:40:5f:98:
64:8a:23:cc:a3:02:50:10:f8:e7:b8:54:38:e6:fd:
0d:69:e9:d4:ad:5a:3f:b7:95:d5:60:67:82:48:3d:
c6:29:79:63:7f:67:1b:36:67:f7:db:a1:78:e1:c6:
a7:fa:63:4e:00:01:6f:59:8f:5d:94:c3:c3:96:17:
b2:1d:91:ab:b4:0c:73:c8:4b:5b:a0:66:e0:9d:d1:
5c:ea:e1:2a:e8:c0:c9:9d:55:f4:20:7f:80:67:96:
bc:9b:99:ff:4f:91:65:ee:43:2d:68:72:95:3a:3a:
b2:9f:68:30:03:72:b5:f2:7c:e8:ad:43:d6:d6:45:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:05:B4:6D:C9:09:9E:12:4B:88:DA:53:B5:AE:F6:9F:D5:15:A7
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d4:70:d2:79:1f:6d:78:ee:7f:8d:51:08:ef:50:b3:74:f0:
d2:a7:e5:c2:6d:62:74:c8:b1:e3:02:eb:dc:e4:84:68:96:c4:
a1:d8:55:d8:7a:1e:fd:f5:c4:b9:be:c3:3e:5f:c9:48:2d:37:
c3:11:71:df:24:b6:99:1d:61:ed:4a:aa:4a:0c:cf:13:f8:2c:
e9:96:30:6d:e5:02:a4:71:08:72:81:87:b5:41:a3:6e:3d:5a:
1d:47:3f:18:c3:bc:65:9a:22:99:f7:73:8e:08:20:0e:2b:57:
26:57:3c:ce:6f:49:b3:ad:9e:1d:c9:26:ce:52:cd:75:98:14:
2c:68:61:66:65:e1:3c:8d:8b:3d:c6:c4:70:06:7b:1b:98:82:
c9:73:fe:b6:60:6e:b8:25:6e:ef:1c:2b:8b:c4:16:5e:60:a1:
11:7e:21:c6:4b:96:c0:46:40:a2:5a:c4:ca:e2:f1:fe:f9:23:
dd:1f:bc:ee:21:df:40:3f:f4:53:20:8e:bb:37:aa:20:11:a9:
03:8d:b6:93:8a:33:3f:93:00:d4:ab:dd:45:e6:ff:de:7b:79:
5c:55:40:49:5f:48:aa:bd:db:9a:d4:0f:5e:fe:5b:94:c8:22:
3a:6d:af:b7:a6:17:d9:cd:83:9c:26:fa:f2:72:eb:22:85:13:
87:dc:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:04:54 2026 by rpki-client