Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: zR6WjBMyXwqlW83vUvpAVz2KNnHLAZT0fWcl6xFXOeM=
Subject key identifier: E0:BE:74:79:AB:95:F5:07:84:0E:D0:E3:72:5B:6F:4B:B5:8B:FC:A0
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01A0D793FA8A1CCCE593B585BA5E1CB4498A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 16A7
Signing time: Fri 25 Sep 2026 07:59:54 +0000
Manifest this update: Fri 25 Sep 2026 07:59:54 +0000
Manifest next update: Sat 26 Sep 2026 07:59:54 +0000
Files and hashes: 1: Fep6qr8rRobHKsNR16UZ8IogVaU.roa (hash: uZWJyhzdZhmIt386GPPzhnoAhK/Him80kP4WtX/gQ6o=)
2: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (hash: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs=)
3: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (hash: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw=)
4: jb81OuVJup1PLJeMNccOVNPoCJ8.roa (hash: deKoWNZnlpwFwiqew1tUzp1N8o/V+tWA//EpRC0uV3s=)
5: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: NN54ku+ypcPNmwGlcl9oJkwMO9yQl+FI6l078Ce26oc=)
6: n9K3STKP4f8c4ARAZitWz9huIsg.roa (hash: WzEo7pLvtUAIbTPZnzjZ4SmkBgOGdA5Kafu6H4ByG0w=)
7: zjv8SZhQ9gV8oRmS9YUAJhkKaT8.roa (hash: 9mmbxYMsoWHE5kxulUQxb1ol9WOyJhGIh77y7/oMRtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:93:fa:8a:1c:cc:e5:93:b5:85:ba:5e:1c:b4:49:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Sep 25 07:59:54 2026 GMT
Not After : Sep 26 07:59:54 2026 GMT
Subject: CN=e0be7479ab95f507840ed0e3725b6f4bb58bfca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:33:02:e9:67:6c:f5:ff:e4:71:75:d4:50:
e5:c4:14:56:06:96:bd:23:b6:fd:1e:0e:4f:fe:3d:
b1:d1:59:37:a3:02:f1:98:31:8e:28:be:7c:3d:e1:
77:94:44:fb:22:50:ca:bb:54:78:2d:8a:48:87:78:
cf:e6:82:85:74:4f:ce:06:28:52:df:56:e6:f7:29:
0f:59:7e:43:28:ec:29:39:27:85:44:23:6a:89:fa:
0b:23:de:12:f4:c7:89:83:ee:f0:0b:70:67:36:1f:
f0:0d:ee:b2:6c:fb:d3:57:b8:24:a3:10:40:01:6f:
42:39:2e:82:81:2d:7f:b6:75:5b:db:e6:09:bb:97:
1b:bb:f6:14:78:cf:b4:83:89:f7:e6:bf:81:72:54:
2a:b2:ba:86:66:aa:b1:d4:be:74:4d:a1:20:88:a4:
3e:b4:75:34:47:75:c1:b1:0a:cf:0c:77:a9:0a:66:
6c:72:e9:44:e9:67:2e:54:0e:cc:98:bf:0c:b9:e2:
d1:59:2b:36:e6:b6:30:51:a5:74:72:01:1f:6b:11:
85:7e:75:ca:b1:62:5f:8c:74:41:67:da:d0:7c:0a:
9a:99:0f:9f:4e:09:97:f8:a0:c8:67:6a:5e:28:10:
50:e4:c3:c7:d0:6f:78:62:f2:8a:d7:c1:0e:b2:ac:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:74:79:AB:95:F5:07:84:0E:D0:E3:72:5B:6F:4B:B5:8B:FC:A0
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:60:1f:2e:43:ca:8f:0b:81:fb:b5:45:3d:5e:a8:53:77:bb:
02:a7:0d:e2:97:ec:fb:39:79:08:c1:d2:00:8e:a1:fb:c8:38:
e7:4a:92:b9:fb:c6:3a:b5:c9:0e:6e:51:da:b5:29:6e:b4:a6:
22:a9:15:56:6c:1b:ab:2b:86:e2:df:c5:19:b3:26:de:a8:6a:
68:7e:98:8e:68:c2:16:da:a8:8d:e8:65:10:57:21:42:64:f7:
32:77:de:49:6b:9a:af:0b:4d:60:77:3a:0e:4a:df:c9:ed:84:
af:a9:8e:5c:7c:b4:a7:7c:b2:2f:ec:f8:7f:51:9e:6f:a7:8c:
cf:ad:d3:4f:21:eb:5e:93:d3:2c:de:b4:5a:da:fc:d1:27:53:
d3:d4:58:44:e4:64:f3:a9:70:40:42:44:27:71:67:bb:f3:dc:
2f:44:76:d4:cd:00:8f:42:a4:21:d5:50:a9:f7:5e:0c:49:1d:
48:1c:a9:d5:03:48:b4:3e:df:f5:6c:eb:b1:62:bd:d7:3e:53:
01:8d:47:af:00:32:56:4a:49:de:d1:7d:09:68:0b:ce:3d:70:
bd:11:06:2a:d8:5b:92:76:91:25:23:46:97:4c:4f:75:d4:32:
d3:29:e6:9e:46:2e:45:05:e0:24:8d:0c:6e:28:89:cb:7e:7b:
ad:f7:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:36:29 2026 by rpki-client