Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: 1wPayrKTW1HINQDKWk6PK3/Dw1ebnGqQ+UIavD3p+aE=
Subject key identifier: 11:F1:75:00:B5:2F:40:14:BD:C4:FA:E9:2B:3E:AF:CF:8E:CB:D4:46
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 01A10437D7D53369EBFCB9A91B4641F6FB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:02:10 +0000
Manifest this update: Sun 04 Oct 2026 00:02:10 +0000
Manifest next update: Mon 05 Oct 2026 00:02:10 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: W4KCZM39iKr8gn6NBTfehmDsOYszX9zSeSXMkEH/oYc=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:d7:d5:33:69:eb:fc:b9:a9:1b:46:41:f6:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Oct 4 00:02:10 2026 GMT
Not After : Oct 5 00:02:10 2026 GMT
Subject: CN=11f17500b52f4014bdc4fae92b3eafcf8ecbd446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:94:d2:c9:14:37:16:4f:3a:06:62:56:93:
cc:5e:36:85:0c:83:07:e3:2f:c9:8d:4e:41:05:7e:
7f:4e:4e:47:85:bb:ae:1b:81:51:cc:a8:7c:e3:5a:
58:37:50:b8:44:82:d2:f1:93:5e:12:9e:9b:f4:ad:
4c:b7:1f:ab:c3:a0:d9:a9:bd:ba:83:26:4f:ab:d9:
39:f4:db:2a:f3:c2:d1:16:f0:82:17:10:97:7a:d3:
95:b2:1e:75:0a:08:77:1d:2b:66:15:da:2a:c6:1a:
98:e8:e3:45:03:56:ca:a0:d3:40:47:57:bb:95:8d:
93:ba:00:3e:60:b7:d5:8e:95:83:d2:3e:ea:9c:6f:
f0:26:0b:2a:dd:b4:72:9e:43:6f:f7:2e:b7:a2:97:
22:08:1f:43:ae:2e:36:0b:49:66:1a:8b:d5:ec:dd:
b4:92:e8:56:0c:6c:d0:a6:e6:5a:38:56:6b:44:20:
f4:28:70:d9:bf:2c:1f:62:63:d5:de:b9:e4:f5:0a:
2a:c0:70:37:05:82:f6:67:f0:f8:a3:6f:10:49:4e:
55:05:1f:4f:13:dc:8c:d2:dd:b9:47:73:6d:6e:f0:
d5:d1:08:cd:75:8a:e1:76:94:f0:a4:ae:ce:ac:97:
82:05:e0:8a:29:47:b4:53:c2:d3:9a:7a:c4:1f:b4:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:75:00:B5:2F:40:14:BD:C4:FA:E9:2B:3E:AF:CF:8E:CB:D4:46
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:74:65:66:1a:83:28:66:7f:cd:10:fe:51:10:e2:84:47:
64:04:f1:63:fe:61:b7:49:00:19:a3:e8:1e:7e:24:8f:18:43:
04:d4:2d:79:b7:bf:63:b1:97:24:1b:9f:89:55:af:f5:13:a2:
a1:dd:a1:82:1a:f6:7a:fc:81:8b:e8:97:c7:f6:c3:c4:e4:5c:
12:12:92:b4:8e:c3:69:40:3c:90:9a:6f:55:29:76:cf:9e:df:
02:d9:5e:1c:e7:d9:ff:08:5a:ac:e4:ea:ee:b5:e4:06:92:a6:
d5:25:f4:8e:8a:99:3c:3f:69:a3:78:dc:2f:ea:47:88:f0:b4:
1f:b7:83:20:95:b4:46:04:9e:68:14:f2:46:2e:ea:8f:7d:a8:
6b:73:e4:4b:5b:ed:a0:50:0c:0c:44:b0:94:d6:6e:31:e4:54:
2c:01:d7:2d:29:d5:9c:1e:e2:67:e0:88:ae:d5:e8:71:1d:60:
9e:80:dd:e4:4c:b8:86:4a:af:35:20:c3:52:bd:ed:23:cd:a0:
7d:e4:90:f5:e1:46:d6:8f:01:12:f1:bf:67:c0:dc:e5:01:bc:
c8:ee:75:82:ca:eb:9a:93:eb:e0:1f:8b:cf:53:51:89:85:d6:
6d:6f:c0:64:24:c6:30:8f:a3:0e:71:aa:e1:86:83:b4:f0:7b:
38:f2:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:36:58 2026 by rpki-client