Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
File: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft (raw, json)
Hash identifier: gTxrOe+XJ/KV0v+oGjCkPyZ8msx5xNOJUlY7klBx6Tc=
Subject key identifier: 0C:25:B7:D8:A4:58:52:7D:60:31:D2:1D:0B:6F:20:41:72:45:1E:CD
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 01A0D3EF2DCC6582CD397563EE3C953BCBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:02 +0000
Manifest this update: Thu 24 Sep 2026 15:01:02 +0000
Manifest next update: Fri 25 Sep 2026 15:01:02 +0000
Files and hashes: 1: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (hash: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=)
2: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl (hash: M4x17LmGOP4WA5BeTMr8jjOHX4iHpQsm+itbeYYtOKU=)
3: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (hash: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:2d:cc:65:82:cd:39:75:63:ee:3c:95:3b:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Sep 24 15:01:02 2026 GMT
Not After : Sep 25 15:01:02 2026 GMT
Subject: CN=0c25b7d8a458527d6031d21d0b6f204172451ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:b8:19:0b:75:86:c5:86:a9:8a:7e:ca:1e:
ac:f9:13:c4:81:a0:9d:1b:e4:3b:13:c0:a0:17:9a:
c2:a3:04:aa:91:79:c1:1a:37:a4:06:3f:9d:42:f1:
4b:2f:ee:da:4a:1f:54:07:c0:18:fb:7f:e1:d6:a0:
96:2d:fd:28:76:7e:ed:f0:b6:2d:8c:50:32:b0:ce:
8f:f1:82:10:08:f8:63:b1:c8:c4:eb:c5:19:c8:a3:
b9:32:a4:73:53:dc:b9:69:85:80:0f:76:b6:68:ba:
0a:16:d4:76:41:2c:1f:20:cd:14:48:3f:05:80:5b:
11:54:95:28:55:27:90:9a:2d:11:70:29:ee:2a:45:
2b:4d:16:f0:26:c8:1d:07:8a:7b:26:82:fb:3c:f7:
9b:13:8a:45:4d:0a:de:72:db:b4:32:b7:54:fa:6c:
1f:d5:2d:02:3b:4b:e4:d3:19:50:99:c0:21:ba:3a:
ba:4e:39:98:a0:d7:eb:2c:e4:22:bf:4c:2b:b8:c0:
6c:51:27:13:b1:7c:78:3f:2d:74:94:e7:23:1e:48:
55:9f:36:cd:f4:9b:8b:77:be:e0:06:a7:78:e0:52:
c6:d8:f0:02:14:d3:a6:f5:b2:38:8f:ee:e0:4a:ca:
21:94:cd:45:95:2d:ca:ee:17:e7:80:35:7c:d2:08:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:B7:D8:A4:58:52:7D:60:31:D2:1D:0B:6F:20:41:72:45:1E:CD
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9e:6b:09:92:21:53:72:83:64:3b:82:d5:e9:68:90:e3:58:
0e:e7:84:cd:75:e7:59:83:49:ba:c8:80:65:12:fe:2a:1b:a1:
bb:3a:44:85:e6:a4:d1:6c:ad:7c:18:ed:fa:db:bd:a7:8f:93:
3e:22:de:2e:d0:f3:e6:3b:bb:c2:7c:d1:d2:91:0d:d4:19:ce:
9b:33:67:87:b8:a7:2e:22:6c:1d:e5:32:9d:fb:85:24:bf:a0:
2d:18:6b:4c:56:aa:8d:32:c6:0f:23:25:c0:e1:ff:14:b7:8b:
05:04:52:2a:61:6a:ea:0f:9f:86:23:c7:a2:a3:91:a3:65:1b:
78:83:64:ed:9f:94:30:1c:42:98:9f:cb:75:fe:40:a9:4c:34:
d1:03:6f:4a:4b:a8:0d:d7:6b:68:c0:bd:6c:a6:91:a7:46:d7:
9c:6b:a0:02:4e:69:0b:77:9a:34:1c:71:2e:43:f9:31:e4:a7:
9d:4f:23:b7:28:4c:bd:12:3e:41:3c:81:6f:cc:a3:39:25:dc:
00:06:15:53:63:06:6a:7d:17:b3:65:ba:95:f9:7f:88:b9:fb:
5a:c4:b8:6c:cf:8c:8d:e5:b7:cc:aa:63:b3:ff:cc:06:a0:7e:
a8:d5:b6:13:41:a8:a2:d6:86:6b:39:52:c3:fb:2f:bf:c8:b7:
60:ab:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:04 2026 by rpki-client