Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: GKEvbknMdOllDdOPO5CtyMWmVSZ477z0+1/hBVNNGEk=
Subject key identifier: 32:00:4D:B2:D1:67:55:30:9C:80:0B:67:97:25:F1:B7:9A:10:FE:46
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 01A0D5DECF59404D837EA58296CB7E259990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 182E
Signing time: Fri 25 Sep 2026 00:02:23 +0000
Manifest this update: Fri 25 Sep 2026 00:02:23 +0000
Manifest next update: Sat 26 Sep 2026 00:02:23 +0000
Files and hashes: 1: 1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa (hash: 8052VqgxoQXtGMoT/9mInb/P+q/GQzoHQcwJ95n8TXs=)
2: Phjh0r_ad13WTH6l1p80FF4KGew.roa (hash: u3OCSo+Ax8+S8/eXW7W/E7Cm5GtFphsGlM/+L/E8D18=)
3: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: gsNI39xqXkaozhjyWimAuCbK63jlb5XzJGRlbhPEimE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:cf:59:40:4d:83:7e:a5:82:96:cb:7e:25:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Sep 25 00:02:23 2026 GMT
Not After : Sep 26 00:02:23 2026 GMT
Subject: CN=32004db2d16755309c800b679725f1b79a10fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:bf:a7:6b:9f:bf:b8:70:9e:84:b1:6c:a3:
47:1b:f5:f8:52:c6:58:42:0f:4d:b6:ea:36:67:00:
9c:a7:4c:1f:22:68:ad:b2:73:c8:6b:f4:7f:a6:b1:
de:60:c8:1e:33:d6:fb:6b:b0:28:ad:b6:fa:33:4e:
91:af:4c:58:2f:35:37:96:b0:3d:93:aa:43:24:d5:
62:0d:1b:41:39:02:90:ea:48:a7:70:87:fa:fa:02:
2f:b4:70:a9:be:11:5c:9c:23:fa:88:4a:d0:0d:fc:
8f:d1:85:29:3e:08:6f:f2:ec:9a:1c:64:e1:c1:7b:
bc:9f:46:c3:53:44:7e:16:eb:40:78:93:0b:da:f6:
52:28:5d:c0:dd:d5:53:5a:5e:2b:a1:07:48:bd:af:
07:a0:8d:a1:d4:15:18:12:05:b6:70:01:3d:80:04:
70:0a:1d:92:1c:35:01:ee:04:cc:07:a3:77:ce:92:
74:75:93:70:a1:84:b5:b2:f0:65:cf:16:93:06:d4:
ed:e2:74:f5:b9:1f:fc:94:25:ee:f4:ba:2c:e4:8c:
81:d2:bf:3a:75:83:d2:b6:71:3f:24:bd:57:75:66:
4a:20:a8:85:b9:ab:ad:25:83:db:e7:05:4c:e2:b7:
1a:05:91:16:ab:a1:5e:a8:62:19:df:b9:e8:38:fc:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:4D:B2:D1:67:55:30:9C:80:0B:67:97:25:F1:B7:9A:10:FE:46
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:e0:e4:38:9a:63:f7:f5:b8:f0:2d:e4:c9:a3:1e:ce:2a:
e1:1e:ff:03:63:1c:06:a2:eb:84:66:6c:9c:e5:0e:6f:3e:92:
f5:ae:d1:71:42:66:c0:2e:52:8c:3e:9b:67:28:88:e6:a5:1d:
50:91:00:31:39:99:66:59:b9:57:e3:86:8f:31:07:7c:c4:2a:
98:be:d7:7d:a8:18:5d:ed:01:88:83:cb:0a:7d:18:44:c2:5e:
85:66:37:96:04:d3:cd:2f:11:ad:af:e3:f2:a3:f4:b2:be:3e:
9c:bc:7c:14:db:e7:c1:95:56:be:46:cf:cb:4c:ce:a7:80:5a:
c6:5d:33:eb:78:6b:f5:d8:7f:af:2a:22:db:cc:65:a3:c4:29:
9d:ae:a1:0b:1d:b2:c1:87:49:38:f4:1c:36:e3:34:6e:2a:e7:
06:8b:ad:92:21:ed:22:8d:63:6e:49:b9:72:00:71:6d:dd:2d:
59:2d:e6:c8:6c:67:40:47:d9:24:b5:92:f1:89:4a:38:e4:59:
dc:f6:63:45:04:2b:c5:5b:85:90:74:54:0e:81:89:98:ba:93:
9e:4d:c9:42:8a:ce:67:5c:17:7c:48:3b:12:dc:36:ef:e7:28:
14:c4:63:30:95:69:ae:d2:ec:74:92:1f:d4:4b:71:3c:0b:db:
15:48:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:38 2026 by rpki-client