Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: cg2OxIMY0JvGCCKr9hZgoTBflyVkD7A8I64RJDLsfPI=
Subject key identifier: 55:63:56:60:22:28:C9:8C:40:D7:48:FB:94:42:F4:35:BB:B6:14:2F
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01A08D572DAEA535B3656FEC864F56955C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 04D5
Signing time: Thu 10 Sep 2026 22:01:35 +0000
Manifest this update: Thu 10 Sep 2026 22:01:35 +0000
Manifest next update: Fri 11 Sep 2026 22:01:35 +0000
Files and hashes: 1: MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa (hash: blK8+6tOSfWU/roFJ6xx5fVNBHhlL8RA+sVhQOK1Yz8=)
2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: iytU8ht9vjW48K37y8+AAM3JJOmglgXojIDrpYtbhUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:2d:ae:a5:35:b3:65:6f:ec:86:4f:56:95:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Sep 10 22:01:35 2026 GMT
Not After : Sep 11 22:01:35 2026 GMT
Subject: CN=556356602228c98c40d748fb9442f435bbb6142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:f5:cc:bb:ac:63:1c:f4:1d:c4:81:83:79:
c6:cb:f0:9e:d6:6f:63:12:e6:55:06:e8:c6:4a:06:
e0:13:e4:ac:50:21:50:d8:51:27:e2:7d:50:fb:7b:
c5:cf:10:bd:37:6d:a6:ef:3b:5b:94:54:93:eb:55:
95:d0:a5:60:53:c6:28:ba:e2:8b:75:bd:0d:5e:48:
76:db:e9:cf:ca:8f:1d:bb:43:e1:59:2a:ef:25:33:
62:c8:f5:d3:f6:89:14:25:5b:f4:fe:5a:d6:f0:ca:
57:3b:1f:2e:75:c0:0d:b0:ab:f1:ba:fc:38:b3:cc:
3d:db:fe:53:08:3a:6a:79:79:df:f0:4c:81:01:72:
ca:6c:bb:7d:22:fb:7a:e2:4c:df:e6:e2:cb:9a:2d:
36:85:24:e0:ae:39:91:90:3f:1a:a0:78:7a:58:f4:
42:d0:e7:de:64:da:51:f6:ef:b9:2a:f5:0f:e5:9a:
4f:ed:5c:86:21:12:1e:e3:75:df:5e:80:c9:b6:91:
b4:86:ce:dc:60:7b:41:2c:7f:6c:78:1e:c1:75:27:
73:d9:19:3e:3a:df:7a:39:d8:94:00:8e:75:a6:c0:
6b:77:f0:7e:bf:90:d9:a8:05:66:4e:e7:8f:5f:31:
c5:be:a0:10:05:5b:6c:77:a4:26:d8:e7:a8:70:ce:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:56:60:22:28:C9:8C:40:D7:48:FB:94:42:F4:35:BB:B6:14:2F
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5b:bb:6d:79:0c:aa:33:f0:4d:fe:bb:48:ff:ca:c6:bf:26:
b6:10:68:f1:7d:d9:01:7e:e7:57:48:c9:a5:54:34:bf:f2:bb:
e3:e3:10:a2:bb:2a:bd:80:cc:82:84:dd:96:c1:d9:9f:0b:cb:
ef:fb:f9:ff:81:d0:61:cc:c6:99:64:cd:db:95:0d:42:86:76:
c2:da:8e:88:25:56:ee:5d:ee:20:88:b1:4e:f9:e3:13:eb:87:
20:eb:44:fd:72:41:66:e8:ab:e7:66:45:fe:83:20:b6:75:21:
61:b9:6e:9e:00:de:f5:40:c3:2f:d6:33:aa:21:e6:52:6d:8b:
8c:82:ef:5e:d4:5e:f8:06:fd:a5:7e:54:99:f0:40:de:41:12:
3d:92:98:8f:8b:0e:cf:91:81:b0:49:08:3d:8e:bc:31:1f:1b:
62:e3:55:db:60:52:29:ce:88:57:cf:18:32:7f:62:83:80:4c:
ef:86:70:95:a3:44:f1:2c:83:f1:d9:97:c3:e8:22:ad:1b:66:
4e:18:33:fc:a2:06:8d:e3:df:37:34:8e:62:d3:c5:84:f4:ae:
f7:5f:2f:59:ab:8d:19:60:ad:45:cb:5f:23:75:58:78:c8:e3:
31:f0:83:96:7a:83:b6:0d:94:33:a7:27:55:7b:3a:31:d7:5d:
07:74:1e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNVy2upTWzZW/shk9WlVwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh
MTg0NTQwHhcNMjYwOTEwMjIwMTM1WhcNMjYwOTExMjIwMTM1WjAzMTEwLwYDVQQD
Eyg1NTYzNTY2MDIyMjhjOThjNDBkNzQ4ZmI5NDQyZjQzNWJiYjYxNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf/1zLusYxz0HcSBg3nGy/Ce1m9j
EuZVBujGSgbgE+SsUCFQ2FEn4n1Q+3vFzxC9N22m7ztblFST61WV0KVgU8YouuKL
db0NXkh22+nPyo8du0PhWSrvJTNiyPXT9okUJVv0/lrW8MpXOx8udcANsKvxuvw4
s8w92/5TCDpqeXnf8EyBAXLKbLt9Ivt64kzf5uLLmi02hSTgrjmRkD8aoHh6WPRC
0OfeZNpR9u+5KvUP5ZpP7VyGIRIe43XfXoDJtpG0hs7cYHtBLH9seB7BdSdz2Rk+
Ot96OdiUAI51psBrd/B+v5DZqAVmTuePXzHFvqAQBVtsd6Qm2OeocM7dqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVjVmAiKMmMQNdI+5RC9DW7thQvMB8GA1UdIwQY
MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt
YTdiODU0NjBmMzY2LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2
LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlu7bXkM
qjPwTf67SP/Kxr8mthBo8X3ZAX7nV0jJpVQ0v/K74+MQorsqvYDMgoTdlsHZnwvL
7/v5/4HQYczGmWTN25UNQoZ2wtqOiCVW7l3uIIixTvnjE+uHIOtE/XJBZuir52ZF
/oMgtnUhYblungDe9UDDL9YzqiHmUm2LjILvXtRe+Ab9pX5UmfBA3kESPZKYj4sO
z5GBsEkIPY68MR8bYuNV22BSKc6IV88YMn9ig4BM74ZwlaNE8SyD8dmXw+girRtm
Thgz/KIGjePfNzSOYtPFhPSu918vWauNGWCtRctfI3VYeMjjMfCDlnqDtg2UM6cn
VXs6MdddB3Qerw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:02 2026 by rpki-client