Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
File: lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft (raw, json)
Hash identifier: kSM0NKBxVKpjS8ha8u2rmfkC/xf1cNguurfhkkObcOY=
Subject key identifier: 78:59:E4:E7:CA:7A:50:36:43:04:61:BE:B3:1F:DA:9F:84:7B:11:19
Authority key identifier: 95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
Certificate issuer: /CN=95be849d9e7037cb502218a85b2c997eb21ad498
Certificate serial: 01A1E05EC1467D133F2A96BAECAFC8160B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:08 +0000
Manifest this update: Sun 15 Nov 2026 18:01:08 +0000
Manifest next update: Mon 16 Nov 2026 18:01:08 +0000
Files and hashes: 1: H7lQoACnsFlHoo9HQV1IBRHtwoo.roa (hash: NNgGcddEdzA3iYBWngh1e1ZZud+h+6ZZttNj6RYZ3PU=)
2: lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl (hash: 7Zwn0jR46urUbXRJdNdqX2ibQXM3/GUqQcV+GNQJm5E=)
3: vQWV1pYlCU0FXSj9NR7lSullj30.roa (hash: sy51u7zGghYJOBSf65dALTT087zsPExFgtS4V/w0WrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:c1:46:7d:13:3f:2a:96:ba:ec:af:c8:16:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95be849d9e7037cb502218a85b2c997eb21ad498
Validity
Not Before: Nov 15 18:01:08 2026 GMT
Not After : Nov 16 18:01:08 2026 GMT
Subject: CN=7859e4e7ca7a5036430461beb31fda9f847b1119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:70:82:3d:a0:ed:3e:8f:ea:64:ca:bc:6c:
bc:3c:27:ee:3c:43:5e:69:97:17:f0:fd:b2:fc:28:
63:7d:78:67:a0:3a:f5:67:69:74:60:76:cc:be:4a:
7b:a6:d3:2f:23:d5:de:38:3d:51:93:c7:39:34:97:
a5:fd:7b:0f:4d:f1:15:4e:61:92:f7:f8:b6:85:7d:
fb:47:f4:3e:81:74:2c:3a:ae:f3:f5:b7:e7:a6:c5:
77:88:7c:49:45:ff:52:54:3c:bb:49:d9:09:99:37:
17:d4:da:1d:1c:ce:cd:4f:b0:45:12:9c:3c:5c:0a:
54:63:be:4d:8a:f4:a3:96:a0:98:2d:97:a5:d1:e5:
1e:3d:af:7b:e0:30:d6:f0:ce:5f:50:a8:d1:3a:f8:
c5:65:9d:de:62:35:a7:e0:91:4f:1c:88:7e:eb:0d:
7b:38:81:bd:74:aa:3a:cf:f7:ea:ff:6f:f9:27:17:
9f:5f:9b:cb:a5:94:a4:e0:0b:53:84:1b:e4:e1:d2:
07:64:e8:f0:ff:64:f2:ca:a6:6c:8b:03:26:90:c9:
72:af:36:18:83:f9:9f:e3:53:e4:87:7c:79:c6:46:
97:d0:ff:9a:86:00:6e:b5:ea:29:f2:90:1f:65:f3:
8d:97:1a:7f:2b:ef:6d:cd:99:6a:17:4e:39:a6:a5:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:59:E4:E7:CA:7A:50:36:43:04:61:BE:B3:1F:DA:9F:84:7B:11:19
X509v3 Authority Key Identifier:
keyid:95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:b0:b2:78:f0:de:3b:35:59:18:3b:5e:3c:d1:be:c0:62:
3b:cc:0d:61:48:76:2a:00:da:98:3c:05:69:f9:63:ac:e7:f6:
21:9d:02:23:98:2a:73:8e:6a:d5:24:f2:76:f6:fd:03:34:1d:
d3:5d:f0:51:7e:a8:90:b5:35:f3:c5:28:2a:d1:d8:af:f1:1d:
47:c7:83:59:98:3a:c3:b6:97:d4:ab:a6:d0:e4:72:bb:b2:e9:
bf:61:50:92:5e:22:f8:12:de:06:98:a6:02:61:50:0b:7e:b9:
89:9b:65:b6:bd:ea:7a:f0:b2:21:c1:61:db:cf:47:34:98:0b:
f6:f1:3b:d6:cc:a4:6f:9f:24:67:40:8d:fb:e7:a3:9f:d3:c2:
f5:06:6a:9c:f5:4a:87:36:09:c9:3a:30:50:02:e0:69:d5:5d:
a5:65:e2:c5:ce:1b:90:92:fb:ae:09:9b:a6:a6:00:44:c7:a4:
46:0f:79:e8:3b:52:8e:a2:8e:9b:1c:9d:7c:1d:96:89:01:9c:
4c:c4:a6:38:84:cb:fa:67:6f:5e:42:4d:3a:19:a0:94:92:d8:
c0:2c:2b:cc:82:22:6a:bb:b9:55:6e:6c:a3:50:48:c4:30:b5:
17:c7:62:6c:80:20:be:24:b5:a2:56:bb:21:64:5d:b0:b0:68:
af:7c:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:00:53 2026 by rpki-client