Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
File: lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft (raw, json)
Hash identifier: Jv+RRwWVJR03HPNq7salMK9nepvYC94mfQLxlCqawjg=
Subject key identifier: A5:01:2C:0E:98:7F:85:7F:46:DF:80:F4:EB:A8:A5:03:B8:EA:8A:9C
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Certificate issuer: /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial: 01A0205655229577E12EE10AA8D0C7F78437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:02:03 +0000
Manifest this update: Thu 20 Aug 2026 18:02:03 +0000
Manifest next update: Fri 21 Aug 2026 18:02:03 +0000
Files and hashes: 1: 8EFr4zmSfzqdm57D9xgzSL6HFtU.roa (hash: E2H7x7svspORsUyoZUb5Yy6dDt0MFzs6hrI962lU9pw=)
2: A20plLgDSbDYPkKsac_6bRMiLUY.roa (hash: z0V9AzxoQIFUzBV8fjyUMEhfk1VmSeC6U5leZPnjdgw=)
3: gR2LIMs8WBieOmDX2G87FSy4ukA.roa (hash: VVK3o6W1lujFw4qXvOpOtwOe6Lz78s4pIxVQ3DpiyXU=)
4: lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl (hash: bfi/kdAvpvwPCgejcw7Lmk52UercG1gVAp8hngYBs5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:55:22:95:77:e1:2e:e1:0a:a8:d0:c7:f7:84:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Validity
Not Before: Aug 20 18:02:03 2026 GMT
Not After : Aug 21 18:02:03 2026 GMT
Subject: CN=a5012c0e987f857f46df80f4eba8a503b8ea8a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:34:c9:ef:a8:c9:34:07:4f:68:e9:c0:29:
86:92:a4:17:c5:bd:ed:24:ff:7f:fa:18:60:5a:23:
49:1b:a0:28:19:9e:1f:b9:ac:bd:4e:da:5a:a8:73:
b2:be:67:04:5c:af:f8:b1:f2:af:2d:08:9d:1c:fe:
f6:be:59:85:64:fc:25:7e:e7:43:13:8f:ed:63:04:
b2:7d:76:6b:1f:db:1f:5a:01:5e:42:d7:72:2e:12:
d6:84:8a:39:47:ac:de:ab:84:e7:16:29:56:0c:51:
1c:00:eb:5e:2c:30:c3:9e:14:20:d9:ae:d9:be:bb:
57:b5:76:28:0b:03:1c:06:d1:18:91:88:9b:70:d6:
4f:e1:db:a1:b2:f3:87:42:05:d8:51:63:e8:12:9a:
66:77:be:24:ad:07:6f:db:c0:67:28:27:2c:21:3f:
ff:37:c6:14:f5:4f:f7:66:e8:88:ed:ac:30:13:fe:
92:4c:4b:6a:33:de:2d:5c:12:80:c1:45:85:fd:e1:
e0:84:96:ff:13:b2:df:2b:f0:92:3b:cd:6c:f2:09:
85:7e:d0:b8:0e:11:5f:38:1c:d6:e9:1b:5c:60:71:
60:b3:6e:e6:39:4d:d8:df:22:b8:c2:ab:05:1e:89:
63:82:a5:e1:67:7f:a3:36:15:eb:30:80:d0:81:6e:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:2C:0E:98:7F:85:7F:46:DF:80:F4:EB:A8:A5:03:B8:EA:8A:9C
X509v3 Authority Key Identifier:
keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:d4:8b:51:60:47:40:2d:4f:ee:b7:5c:79:42:73:9d:ed:
df:53:2c:22:d2:13:fd:c8:ff:51:c5:10:9e:44:be:f4:39:1f:
06:9a:1a:c8:0c:f9:d8:5f:3c:0b:62:e5:2a:f3:9c:c4:46:f8:
eb:ea:67:fe:ea:4d:20:cf:8b:3f:d5:ae:89:b1:6b:87:fa:f5:
13:b9:c9:b0:d9:f5:c7:8a:ef:c8:a3:39:2e:43:68:8c:a5:e0:
f0:b2:55:91:da:69:69:47:7a:9b:ae:12:1b:73:de:53:7d:39:
3b:4a:3d:0d:a8:ac:21:16:db:4b:31:cc:19:bb:87:9b:be:e1:
6a:6a:b6:50:5b:ab:19:0e:6e:c5:d3:56:e4:08:a2:17:25:06:
a7:1c:d3:98:98:21:6e:ed:35:c1:49:13:16:a1:14:fe:62:46:
fe:78:86:f4:ee:86:33:e3:bd:f6:29:82:e0:0f:5c:f8:a3:71:
3c:61:50:85:d9:69:e8:21:70:46:8f:f6:c6:d2:6f:fa:f8:f5:
44:df:20:1f:a0:ae:6d:44:f5:df:d5:c2:82:1b:d1:14:cb:74:
04:c8:19:6b:58:07:6f:e3:c5:e1:73:b2:3f:a6:8a:4e:ba:69:
d2:0e:96:08:20:43:2c:93:5f:bb:01:49:d7:1a:c3:97:c2:46:
a6:30:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:48 2026 by rpki-client