Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: mLudQ7tSzvqWQWx1wtAw9M9HTwYEeDeHS/WLUAQGDoI=
Subject key identifier: 7D:4D:DA:C0:F0:AB:BC:44:65:0E:83:AC:B1:2E:8A:80:E1:EA:43:05
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 01A11A1982B873427F4B0AEFE1E43193ABC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 090C
Signing time: Thu 08 Oct 2026 06:00:41 +0000
Manifest this update: Thu 08 Oct 2026 06:00:41 +0000
Manifest next update: Fri 09 Oct 2026 06:00:41 +0000
Files and hashes: 1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: mxKJmhu7wlxFR5kUeDw2I6ifZiLCvhuCFi119Uekmt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:82:b8:73:42:7f:4b:0a:ef:e1:e4:31:93:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Oct 8 06:00:41 2026 GMT
Not After : Oct 9 06:00:41 2026 GMT
Subject: CN=7d4ddac0f0abbc44650e83acb12e8a80e1ea4305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:8a:d1:82:e8:a5:98:97:a5:ea:fa:2c:0f:
67:37:9f:a6:f7:a7:66:e3:78:3d:01:d4:98:b6:7b:
19:a8:1f:a9:08:4c:1b:2c:8b:22:19:f2:c6:85:15:
fe:07:5f:54:1a:ea:ab:c9:26:8e:69:92:67:c7:cd:
38:fc:13:0a:8f:2b:f9:44:6d:d5:f3:ea:59:39:4a:
c8:a1:1e:2a:cd:65:14:20:fa:e4:5e:a2:33:36:17:
52:8a:01:81:05:a6:5a:43:28:6b:95:93:bb:29:62:
53:ce:07:0e:1c:6c:fe:ef:05:de:f1:0c:34:9b:97:
07:ca:bd:09:ee:53:2b:5f:9f:9c:09:db:68:ad:55:
e0:00:23:8b:63:79:b4:b3:d8:3e:ac:80:e0:a8:a0:
57:78:6d:8a:cd:87:cd:69:fb:e5:ca:ce:3e:77:66:
55:28:da:b1:ea:bf:28:8b:9a:6d:8c:88:b1:1f:de:
0d:ed:37:75:27:6f:aa:8e:1e:70:62:9f:e5:d1:30:
a9:ba:1f:df:ce:af:34:2b:52:a6:6c:f7:86:0c:b2:
41:99:7a:66:f7:71:2d:eb:2f:1c:d5:70:1b:38:f4:
7a:f9:79:85:d5:da:d9:2a:c1:86:a0:98:de:21:b7:
35:44:37:85:e6:ed:4c:d1:53:0e:b7:b0:87:61:8c:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:DA:C0:F0:AB:BC:44:65:0E:83:AC:B1:2E:8A:80:E1:EA:43:05
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:37:c6:42:55:00:93:c1:6d:72:10:64:b8:a9:cb:b1:2e:53:
4c:a7:d8:62:1c:3e:54:16:8e:a4:42:0d:92:ef:0f:82:e5:fa:
80:7b:90:3b:b9:74:2d:16:32:58:90:27:db:57:31:03:48:ad:
b7:f4:16:cc:1d:47:b6:08:58:32:29:c9:d8:19:d6:45:e1:a9:
af:08:e8:90:f9:c4:55:28:ef:72:95:b5:84:0d:a5:ab:52:f6:
bc:1b:ef:e5:00:64:0f:d2:33:79:3f:af:a7:82:92:1b:19:18:
44:c6:75:01:40:ed:f3:e3:67:f3:e6:44:b9:fa:26:7a:a8:38:
1d:9c:2a:65:4f:d1:72:05:7f:11:a6:58:2c:a7:f7:4c:73:4c:
aa:61:ba:2e:f1:e4:a5:37:69:fa:72:3a:af:d5:29:2e:72:f0:
92:ac:37:14:a0:20:ae:e8:3c:38:52:54:a0:e1:f0:c8:01:44:
d4:77:2d:aa:28:49:81:86:70:a0:15:3f:ce:a0:1b:12:8c:4e:
7e:df:42:6c:8d:54:6f:ff:56:04:38:df:c1:f5:a7:b2:6f:87:
b4:87:42:a5:4f:ba:cb:3a:2a:7d:29:e3:c7:26:d4:54:04:74:
d3:d6:d3:bb:a7:f7:9c:eb:d7:13:3d:87:1f:98:71:33:e7:9f:
34:e2:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:25:58 2026 by rpki-client