Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
File: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft (raw, json)
Hash identifier: NuiG0dRrAu7Q11ct4l4Z19lsb84Vij3MQytJmRtBu3E=
Subject key identifier: A1:A4:10:B1:46:2F:CF:EB:38:EE:60:BF:9C:FA:B2:EC:D7:AE:5D:D9
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 01A10BF0EEED6EC00BA34D04FFA0A992B10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
Manifest number: 0104
Signing time: Mon 05 Oct 2026 12:01:41 +0000
Manifest this update: Mon 05 Oct 2026 12:01:41 +0000
Manifest next update: Tue 06 Oct 2026 12:01:41 +0000
Files and hashes: 1: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (hash: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=)
2: Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl (hash: aI/U+msDDlTaK3YsjfPwhFxpnE6oxlCLZUIzNbRqmOk=)
3: eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (hash: 1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:ee:ed:6e:c0:0b:a3:4d:04:ff:a0:a9:92:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Oct 5 12:01:41 2026 GMT
Not After : Oct 6 12:01:41 2026 GMT
Subject: CN=a1a410b1462fcfeb38ee60bf9cfab2ecd7ae5dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:c0:01:77:d8:57:ea:09:ac:74:55:ee:ce:
0d:d7:6a:69:da:87:4d:be:62:a3:db:99:50:7a:12:
8d:f2:0a:e2:9f:ce:5c:76:0d:4b:3c:10:da:ba:ae:
4d:1b:bf:5c:37:26:9f:2c:39:f2:6d:82:3c:48:3b:
cd:ea:7a:9d:58:51:e1:ec:14:e3:ea:f8:26:c0:99:
79:bb:d6:95:94:7a:2e:e9:5a:c0:4e:26:9f:95:be:
7e:a4:56:f8:1e:db:63:ea:fb:90:b0:f5:83:e3:59:
c5:0c:35:ee:d2:10:7f:94:60:31:88:a4:bd:cf:a4:
7f:2e:d6:4c:3b:ed:4f:02:e9:cd:3c:57:4c:a2:1e:
ef:12:94:51:0a:0a:7e:6c:1b:8d:1a:49:f4:26:0f:
94:46:fb:8d:b3:7b:54:c9:95:18:37:a6:ce:39:05:
bd:bb:5e:9b:ad:b0:e9:4b:c2:76:2e:68:76:69:93:
16:7a:95:9d:94:f7:ee:45:be:35:cc:62:9a:4f:b6:
9c:27:1d:2a:b3:d5:c5:16:b1:91:1a:6e:a3:db:0f:
b6:b3:80:8c:ab:b3:41:3d:2e:8b:f2:10:d8:9f:16:
34:80:c6:6a:72:7f:e5:7a:64:d1:3c:63:1e:15:60:
e3:4f:1e:92:21:51:eb:5c:2a:c5:49:67:80:1f:81:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:10:B1:46:2F:CF:EB:38:EE:60:BF:9C:FA:B2:EC:D7:AE:5D:D9
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:24:8f:31:7d:46:1e:d7:ec:ca:cc:29:c9:34:af:c1:ef:87:
b7:c5:02:1c:ce:c1:5e:43:e3:49:e5:6e:68:03:ca:2a:46:e4:
fd:05:8e:a7:c4:d6:0f:21:88:c4:9e:9d:5d:7d:e5:88:98:96:
27:14:c4:21:36:73:8e:aa:af:c7:21:57:df:15:4e:b2:d9:65:
1c:83:61:4e:6d:83:6f:ea:48:54:a7:0c:25:9a:ed:42:b4:88:
f0:4b:39:25:a4:43:90:ab:9e:10:f9:07:ff:2b:ea:a2:6a:28:
bf:7d:b4:a7:df:d9:58:49:e4:cf:56:52:c2:89:95:8e:cc:e5:
2f:c6:e4:c2:aa:cf:5d:c5:d9:5a:13:a9:3c:27:f7:8b:f4:11:
83:80:6f:aa:e2:74:bf:50:27:2d:ef:ef:83:1a:7d:b5:2b:aa:
20:8b:2e:b5:4d:2d:89:e8:3c:b4:60:13:1e:3b:f6:28:d0:de:
0a:8b:0a:00:34:c8:5b:b7:a4:cc:b4:d8:9e:c5:18:3a:4d:41:
2d:5d:c0:1f:f6:39:9e:12:fa:27:b8:d2:07:2c:c7:af:74:2c:
f9:f2:39:b6:7b:69:96:ba:9a:48:a2:9a:09:6f:d0:f1:ee:2d:
b2:4b:48:44:22:db:4c:70:4b:e9:bf:33:10:e0:a3:44:96:df:
02:39:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:59:07 2026 by rpki-client