Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
File: lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft (raw, json)
Hash identifier: G6j7kOHlzS/13Pixmvrw0PtQJbvs8LpS2o0FGTisvDs=
Subject key identifier: 78:FF:D2:DD:56:C4:4A:43:EF:DF:BF:19:B2:F6:CC:F2:56:A9:EC:47
Authority key identifier: 95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
Certificate issuer: /CN=95be849d9e7037cb502218a85b2c997eb21ad498
Certificate serial: 01A0DBA90EC4CA7E7231D07CEFD0DB9FC95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:24 +0000
Manifest this update: Sat 26 Sep 2026 03:01:24 +0000
Manifest next update: Sun 27 Sep 2026 03:01:24 +0000
Files and hashes: 1: H7lQoACnsFlHoo9HQV1IBRHtwoo.roa (hash: NNgGcddEdzA3iYBWngh1e1ZZud+h+6ZZttNj6RYZ3PU=)
2: lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl (hash: hWSyYjAUMK2pp+Mf2u8cPKeNT1fkhIiCPALyXk1b88A=)
3: vQWV1pYlCU0FXSj9NR7lSullj30.roa (hash: sy51u7zGghYJOBSf65dALTT087zsPExFgtS4V/w0WrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:0e:c4:ca:7e:72:31:d0:7c:ef:d0:db:9f:c9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95be849d9e7037cb502218a85b2c997eb21ad498
Validity
Not Before: Sep 26 03:01:24 2026 GMT
Not After : Sep 27 03:01:24 2026 GMT
Subject: CN=78ffd2dd56c44a43efdfbf19b2f6ccf256a9ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:f1:4f:81:b1:8d:41:fb:fa:6c:54:bf:4d:
db:dd:50:e0:ad:f0:4c:29:d8:ed:41:f5:4f:84:d8:
bb:20:79:c0:df:b1:96:43:c4:85:cb:37:98:82:c6:
2b:c8:82:16:66:58:fc:f4:92:f8:f7:9d:0d:2f:a9:
90:53:dd:74:66:36:fa:03:48:03:62:06:d4:07:fe:
e1:c1:3a:16:b1:fd:c8:90:55:74:2f:68:35:ce:d3:
e3:70:a0:9d:bb:c6:2c:bd:e3:a1:55:3f:7d:b8:dd:
a0:5d:5a:17:b1:f6:bf:96:fc:db:c1:fc:45:70:39:
88:dc:cf:c9:2c:d1:7c:02:b9:d2:81:c7:b4:b1:37:
13:73:e6:9c:cf:b9:12:de:22:4a:e7:30:08:f9:7f:
1b:43:55:be:1f:eb:4e:82:53:26:73:28:fa:1a:8b:
92:06:05:83:a5:71:54:53:0d:a3:cb:56:ab:ea:d5:
c6:a8:4d:71:ca:8b:5a:ca:d3:40:60:d2:40:da:58:
12:c6:a0:20:68:c6:12:f8:92:b2:35:e6:ad:ba:53:
02:3c:f0:87:c2:34:c4:40:23:a8:3e:ec:6f:30:c6:
46:de:6b:33:11:81:fe:37:27:89:7c:86:9a:ba:8b:
30:72:91:dd:b7:11:cb:e7:4a:06:5c:13:d6:c8:2c:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:D2:DD:56:C4:4A:43:EF:DF:BF:19:B2:F6:CC:F2:56:A9:EC:47
X509v3 Authority Key Identifier:
keyid:95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b7:6a:6d:98:18:78:9d:d4:fe:94:65:56:ea:e3:48:0d:f0:
0e:4b:70:81:71:0b:19:3a:a6:a8:0f:ca:1a:65:2c:b3:ea:02:
46:99:6f:b8:04:ff:21:1f:ee:d4:59:05:89:4f:96:1b:6d:52:
7f:5f:ad:3a:f7:87:9f:ba:12:55:0e:f8:d7:e7:6d:50:a2:b8:
58:33:77:bb:3a:2c:cc:94:9b:84:3f:22:98:9e:1d:d7:03:81:
04:db:b5:74:8b:5e:44:5b:26:fb:9a:fb:da:05:ba:e0:ed:bc:
62:70:2f:8d:13:7b:35:82:9d:9c:70:13:ba:ae:f4:4a:d0:04:
6d:83:a9:b3:43:c9:0a:a1:a9:6d:04:3e:d3:5c:e9:e9:d7:d9:
c8:f1:6b:20:03:ea:0f:52:62:b7:29:c1:6e:66:5a:80:3a:40:
cd:0b:d5:3b:57:e3:3c:00:09:52:7c:55:b4:e5:33:e7:5e:48:
9d:4d:fa:61:c6:c0:4c:1b:66:dc:70:5e:aa:86:0b:60:2b:82:
d8:7c:1f:6b:55:33:6c:2b:31:33:f2:f8:1e:cf:7b:d3:6e:e4:
3d:31:ed:f7:3c:00:8c:2f:11:e3:b7:7b:f7:9a:20:cf:e0:13:
16:12:b5:1d:c2:63:3b:98:36:d7:41:71:97:7c:83:31:12:15:
ca:3d:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:55 2026 by rpki-client