Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: pcUgZxpTarwqqS9fZ0r4aGQjYs4Pwrdb9eTvWh/Akt0=
Subject key identifier: 09:A6:7A:F8:ED:50:4B:E9:DD:5C:C9:B4:9F:9C:1A:BB:78:63:CD:80
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01A0D538F67252C77E50FFDB800684D83824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 131E
Signing time: Thu 24 Sep 2026 21:01:15 +0000
Manifest this update: Thu 24 Sep 2026 21:01:15 +0000
Manifest next update: Fri 25 Sep 2026 21:01:15 +0000
Files and hashes: 1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: Jx7dFeAGNm7wpFtCa34zljpPlzrq0fIj7KnCNUzyiyo=)
2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:f6:72:52:c7:7e:50:ff:db:80:06:84:d8:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Sep 24 21:01:15 2026 GMT
Not After : Sep 25 21:01:15 2026 GMT
Subject: CN=09a67af8ed504be9dd5cc9b49f9c1abb7863cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:a5:f4:8f:1a:ea:58:ea:6a:63:b2:28:92:
ee:af:e9:bf:95:d9:c4:e8:8a:64:07:dc:fc:07:0f:
a1:a2:56:87:11:24:8f:fd:46:0b:d9:4c:ae:71:ee:
47:6c:90:99:4e:1a:8a:20:94:c7:78:80:e0:d7:38:
92:30:48:9c:51:95:c2:ab:4f:1a:93:3a:5f:3b:3e:
da:11:2d:32:4d:a6:00:e0:bf:72:b0:a1:38:fd:bb:
b0:c1:93:07:b3:b0:2b:17:bf:37:86:47:9f:8e:ef:
f4:f6:a4:f4:4a:be:bd:4f:d0:ab:48:18:61:56:1d:
a0:49:4c:a2:a1:29:f3:cc:f6:10:9e:9d:94:e0:c9:
32:a2:83:1c:87:b0:dc:cd:17:06:72:b3:e3:ad:6d:
24:b3:77:b2:9d:d7:54:0e:8c:83:d3:80:fc:da:1c:
bd:3a:0d:7d:1a:90:31:e9:9b:f8:7a:9f:cc:a4:c2:
fc:24:5e:5a:a3:c1:d5:3d:b3:b6:e0:e5:e8:50:f4:
6c:d4:09:1e:36:96:95:79:d7:c6:64:51:f0:9e:34:
5b:de:b8:84:89:28:04:32:f6:c9:c0:f9:0d:67:db:
10:7b:46:35:44:87:1a:29:2d:b1:ea:10:b3:ec:bb:
b5:89:17:02:30:66:66:22:f8:e9:4b:34:0b:1c:64:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:7A:F8:ED:50:4B:E9:DD:5C:C9:B4:9F:9C:1A:BB:78:63:CD:80
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:fa:15:fc:e8:6d:fa:11:c3:16:f8:4e:98:b9:da:40:3d:
f6:3e:45:63:80:73:2f:27:87:e8:31:7d:4f:bf:0c:73:2d:2a:
3b:34:16:9f:14:bb:4e:3f:8f:c6:d1:6b:7c:bc:9b:22:f7:38:
ce:71:29:f5:b0:86:13:c9:ec:b3:2a:51:09:85:62:eb:d8:e1:
82:7f:e4:35:c1:22:64:74:6f:b9:4d:e3:aa:42:8c:1f:3b:60:
55:01:62:2d:db:21:cb:d0:0d:a6:c9:0d:e4:2d:c1:cb:5c:df:
8c:21:e1:f1:49:69:6b:c2:37:c9:4b:fd:5e:24:67:92:c4:75:
fc:39:27:ab:c5:87:92:a7:a4:0b:77:72:e3:79:68:3d:f3:0a:
83:0d:3c:23:01:2c:52:ab:41:7c:2f:a6:45:b7:ec:0a:87:20:
ac:60:05:d3:a3:d2:10:18:a1:98:1c:66:87:36:19:85:ad:2c:
ad:bb:1c:b1:bf:62:7c:14:c6:79:e1:ef:58:74:78:c8:ae:01:
ce:19:ae:89:d5:a2:ff:d9:ad:38:0a:9f:65:99:d4:5f:1e:d9:
dc:24:4e:49:5a:87:6b:e8:ae:d9:69:a3:fe:b2:0c:86:86:75:
cb:a6:cd:88:a4:36:95:e3:ad:85:52:ee:f2:bc:e3:f1:da:d2:
da:c9:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:37:43 2026 by rpki-client