Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: 7/JaQXoDtbPv0gJuUoBRUjDTdMVROmXs/HAie+MD+ug=
Subject key identifier: B5:44:8B:67:FC:07:BA:FC:8D:FF:AB:CA:21:05:7B:A8:18:78:3B:17
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 01A171DCC3174223403CBA853BC0DB773380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 0733
Signing time: Sun 25 Oct 2026 07:00:55 +0000
Manifest this update: Sun 25 Oct 2026 07:00:55 +0000
Manifest next update: Mon 26 Oct 2026 07:00:55 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: qP13+JhwHCk+ClcFkpQMVY9IgufTvNLgirteouvYGS8=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:dc:c3:17:42:23:40:3c:ba:85:3b:c0:db:77:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Oct 25 07:00:55 2026 GMT
Not After : Oct 26 07:00:55 2026 GMT
Subject: CN=b5448b67fc07bafc8dffabca21057ba818783b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:6e:e0:62:18:6c:43:b6:2d:11:c7:83:f0:
a4:72:6c:95:b0:e9:71:a8:6e:f5:4f:ad:99:f7:a7:
3b:b4:df:7c:ab:2b:e9:a0:c3:cf:99:31:67:2c:c9:
b1:f4:96:07:d5:09:a9:78:2f:e5:06:23:cb:2a:7c:
49:86:3b:d3:2f:d9:38:dd:e6:0b:5d:79:5a:6d:6c:
d6:0a:95:f6:8d:89:52:1e:3f:17:92:15:14:e2:bf:
a8:6e:4d:8a:d4:6a:ab:d8:4b:5e:2a:7f:a8:66:ab:
33:80:1d:24:8e:fa:7d:80:3e:96:b0:9a:1b:28:a0:
f4:94:54:51:da:37:66:14:e1:7f:e5:91:16:42:4e:
9c:8e:04:65:18:ec:71:7e:1a:a1:22:ec:c9:44:14:
ec:a4:a1:01:cb:01:68:95:a8:a6:42:a6:ac:16:74:
ee:09:d8:27:73:1b:75:9d:c4:f8:f5:82:4d:f9:13:
e1:f2:4a:aa:01:04:b7:aa:ca:e2:ea:b7:94:c7:0f:
d1:41:09:b9:f0:5c:23:fc:30:4a:a0:f0:99:93:d9:
09:9d:90:6b:57:35:16:e0:5a:b1:da:67:17:d2:92:
78:30:a1:f6:97:3d:d8:c9:b3:d1:ec:16:39:26:9e:
b8:7e:01:b7:d3:3c:c8:a1:97:48:28:15:80:e9:87:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:8B:67:FC:07:BA:FC:8D:FF:AB:CA:21:05:7B:A8:18:78:3B:17
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ea:99:72:91:ab:55:fb:d5:ce:8b:9e:ba:05:8d:ff:6c:d0:
a2:d5:63:63:e3:2e:77:88:37:00:e2:b7:bc:a4:ed:95:53:8e:
f5:51:d5:c2:ff:37:bd:bb:31:78:5a:90:75:dc:71:9a:e7:04:
87:d0:a1:7e:39:04:f7:55:a8:fe:10:6f:a3:9d:30:b4:47:2f:
8d:0f:15:d2:99:a7:33:d4:41:36:16:a1:36:18:03:d7:94:86:
9d:90:18:1a:ee:c9:2f:bf:0e:7e:55:55:f2:71:e9:c2:24:41:
3f:47:b6:f5:60:66:be:41:67:e1:29:4c:08:e2:9e:58:b9:7a:
89:05:0c:e5:21:b0:78:a7:f4:2b:e2:16:9d:8a:4e:b7:4b:94:
70:73:5b:31:56:1a:c2:aa:bc:5d:27:82:53:ef:32:9a:8c:59:
cd:19:03:6b:3e:4b:3d:63:5f:5d:38:fc:5d:53:ed:99:16:bc:
e8:21:3c:67:17:25:59:f0:b5:01:6f:0b:40:02:43:ef:87:e2:
ba:5c:d8:12:8d:de:9e:4a:af:55:c4:40:76:17:c3:ae:76:71:
13:d8:03:78:bb:84:92:d9:52:b6:0a:07:10:f4:53:60:2f:f6:
a8:2e:6e:8e:a4:04:db:54:8f:16:b0:f7:33:e7:30:ef:db:3f:
8a:b8:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:41 2026 by rpki-client