Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: c1YnBdS+AozQ8kd80H9WsDBp0X/pXv0Ixqe35/fkXig=
Subject key identifier: 9B:FE:1C:8E:9B:E4:3E:8A:5D:85:D9:D5:56:54:DE:03:94:D9:F9:58
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 01A1A55BA0A9D9593A6DBEFA48E78F736D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0F71
Signing time: Wed 04 Nov 2026 07:00:07 +0000
Manifest this update: Wed 04 Nov 2026 07:00:07 +0000
Manifest next update: Thu 05 Nov 2026 07:00:07 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: kZyRjWVtz/1r6cM5l4ZnoDLq/JbJQK/ZazkC5YFaHfE=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:5b:a0:a9:d9:59:3a:6d:be:fa:48:e7:8f:73:6d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Nov 4 07:00:07 2026 GMT
Not After : Nov 5 07:00:07 2026 GMT
Subject: CN=9bfe1c8e9be43e8a5d85d9d55654de0394d9f958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:12:a9:cc:d4:cf:3a:93:18:de:5c:f6:f9:
23:4b:79:95:1f:62:b8:9e:95:47:6a:c2:a7:1e:f5:
a2:dd:b9:62:56:b2:34:12:be:70:75:c6:ea:67:b3:
c5:3f:0e:61:70:1b:8d:df:af:d5:af:e9:c0:5a:5c:
18:78:cb:13:f8:a6:2d:e0:ea:47:4e:5a:c1:c1:fa:
54:b4:b8:de:d6:82:57:99:a7:30:ba:ed:a3:cc:e9:
32:6e:b5:d9:bc:59:08:6f:bb:6d:e7:65:c7:69:5a:
e3:c6:65:0d:49:99:0c:f1:9a:45:ae:20:95:2a:12:
9a:a0:97:92:be:9b:6e:dc:96:12:6d:5e:c5:0d:98:
47:f7:12:3b:fe:a6:d3:49:f1:7e:0a:0c:62:b2:cf:
75:45:9e:4d:5d:27:70:ba:82:0d:df:8d:5a:89:8c:
3f:b8:f3:1e:72:a7:2d:96:65:af:50:f2:94:be:60:
a9:b3:54:4a:ad:c5:4a:62:d2:26:ee:5e:3d:30:90:
ed:71:0c:7f:34:b3:7c:c4:56:88:48:fc:2f:0b:e4:
e7:2e:af:62:a7:71:be:9f:cf:e4:1f:07:7e:1e:6b:
72:0b:78:6a:70:f0:af:b7:8e:2b:13:92:b5:9a:7c:
1b:b0:fa:ca:38:f4:34:14:34:f9:60:ac:48:a1:77:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:1C:8E:9B:E4:3E:8A:5D:85:D9:D5:56:54:DE:03:94:D9:F9:58
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:b8:2d:12:b1:ad:5f:ed:4e:1b:73:8c:3f:1b:73:e6:76:
80:9f:2a:cd:e4:fd:39:34:a4:db:3d:01:fb:d1:04:88:09:bb:
a9:43:54:ce:71:e5:e9:cc:0c:03:73:1e:53:22:08:92:53:67:
6d:e5:0b:46:8c:cf:3d:1d:44:9b:35:86:5a:e1:84:59:34:6f:
c2:bd:07:aa:87:23:95:06:46:c4:ee:93:f9:03:02:01:27:5b:
a3:4a:26:5d:1b:51:e4:60:3d:fc:19:39:f2:f0:f9:67:5b:45:
44:97:cb:81:48:79:eb:20:f4:fe:8f:3e:ac:b3:d1:c5:a5:d9:
37:25:33:a9:33:f4:bd:fa:b8:83:7e:b7:4f:63:07:f1:67:7f:
05:cc:52:96:f7:08:98:fb:d3:5d:6e:48:78:1a:9e:bb:e4:d8:
6c:e8:2a:1d:c8:d5:cf:3e:02:9a:12:0b:da:79:10:71:ae:5a:
c3:d1:f4:eb:83:02:a0:ef:c2:a1:df:2d:8b:0d:f0:92:a1:67:
be:97:ef:b7:27:65:b0:a6:5f:a1:fd:c7:e6:7f:cb:d8:a4:e6:
f6:d5:b1:90:6d:b3:5a:7b:1c:16:49:75:76:5d:e2:de:39:70:
75:b8:45:cd:78:3f:65:ad:11:67:0b:b7:e7:00:a5:71:9f:95:
3d:57:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:21:56 2026 by rpki-client