Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: XK6sOkmj95yaFd+c4IuLzE8ePsiESE+lZSpp66bJPto=
Subject key identifier: F2:70:3D:9C:51:35:40:9E:64:E7:13:F6:7A:A4:02:58:75:A3:3E:E4
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 01A11975047BD728F5DE377B52B283C49B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 18DA
Signing time: Thu 08 Oct 2026 03:01:01 +0000
Manifest this update: Thu 08 Oct 2026 03:01:01 +0000
Manifest next update: Fri 09 Oct 2026 03:01:01 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: r9kLQcYx2oyEKwKjSoffsyPOiUd6uIs5pXXu8gReKFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:04:7b:d7:28:f5:de:37:7b:52:b2:83:c4:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Oct 8 03:01:01 2026 GMT
Not After : Oct 9 03:01:01 2026 GMT
Subject: CN=f2703d9c5135409e64e713f67aa4025875a33ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:a7:5d:89:29:95:ae:fe:98:a9:ed:f2:bd:
14:44:7f:55:39:5b:c6:51:f1:9f:a9:d3:67:89:5d:
97:e2:45:91:fb:a8:a8:2c:0d:41:16:aa:74:b7:fc:
c9:61:80:4d:5b:03:68:02:dd:90:f4:6e:38:8e:ab:
9d:37:83:a6:e5:95:3a:8d:59:3d:90:53:77:4e:09:
22:2d:e9:13:60:39:fd:da:bc:a3:68:8a:32:86:3a:
4c:16:a0:a0:2a:9c:62:33:9a:67:7a:c6:da:97:02:
2d:c6:05:42:04:c2:e6:af:80:e7:d3:33:91:4e:8f:
f6:5b:b4:9f:d3:cf:a6:9c:bf:00:c6:b1:98:04:ed:
b4:dd:56:e9:54:da:fc:5a:11:fe:45:50:52:88:92:
99:a8:7d:9a:63:9a:5c:10:de:34:06:55:6f:c9:13:
9e:6f:e4:23:6c:2c:32:4e:0d:70:98:48:97:2a:df:
02:12:f8:6a:0d:e8:f3:59:52:b5:8a:c9:ba:3f:ba:
17:e2:16:95:68:0c:80:15:09:38:d0:b9:71:7c:34:
c9:4f:e6:78:44:58:ad:bf:bd:a6:a7:34:fa:9f:2f:
47:7d:84:c8:38:e4:b6:76:48:b8:8f:96:d6:77:54:
7c:2e:c7:6a:72:cd:0e:27:ed:8b:4f:91:06:2c:4d:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:3D:9C:51:35:40:9E:64:E7:13:F6:7A:A4:02:58:75:A3:3E:E4
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:52:e5:25:d0:98:19:e7:7d:cf:cc:2d:fa:c4:29:c7:9d:
b4:01:5c:11:0f:fc:df:e0:c3:b6:1a:b9:c2:19:70:ef:63:41:
48:4d:27:aa:e3:3d:f6:4a:60:eb:d7:b1:ca:17:85:db:02:1c:
58:8e:35:5e:fb:96:12:38:2d:70:5c:24:85:11:1f:9b:b4:5b:
ef:4c:65:f8:43:65:07:69:66:e3:60:a8:9f:d3:60:00:93:bc:
5d:d1:cd:06:b9:2d:2f:a6:4d:3e:0a:c2:01:8e:22:33:a7:7f:
57:95:be:53:a6:cb:07:42:60:81:4b:8a:4d:95:a7:83:97:12:
ef:2d:80:11:54:07:a1:ec:1b:12:97:3d:b7:56:21:5e:2b:5e:
43:60:71:8d:22:a9:94:84:23:5f:b9:cc:c6:14:69:1e:90:be:
81:19:6a:e9:fb:29:4e:76:12:07:42:c2:bd:43:80:74:f5:1a:
af:4d:75:02:ce:f6:37:fb:79:3e:73:ca:22:56:09:09:87:e0:
7c:62:31:17:3f:95:c6:dd:9a:07:de:1f:98:0e:1d:ea:22:d1:
4a:42:89:74:45:95:a3:49:7c:4d:a0:01:64:37:8e:18:03:c6:
4c:7a:b4:e9:42:da:39:6f:f2:fe:d2:ef:44:b9:8a:68:6c:d1:
a1:d5:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:59:49 2026 by rpki-client