Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: kCE+mRQ3lrydjs1TvLTyJDZ7Q/C8lE8mRp4BT2ECRdU=
Subject key identifier: F7:AD:EB:83:B6:72:6B:18:5E:B2:A0:3C:2A:A9:4B:8D:E3:2A:26:C8
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 01A15B557D17F6933068763BA87A9FFE5A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 07D4
Signing time: Tue 20 Oct 2026 22:01:31 +0000
Manifest this update: Tue 20 Oct 2026 22:01:31 +0000
Manifest next update: Wed 21 Oct 2026 22:01:31 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: n/9NhrRO27v3bUJoU5ytWO9vWlzuxvI+3r4jWLs5w8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:55:7d:17:f6:93:30:68:76:3b:a8:7a:9f:fe:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Oct 20 22:01:31 2026 GMT
Not After : Oct 21 22:01:31 2026 GMT
Subject: CN=f7adeb83b6726b185eb2a03c2aa94b8de32a26c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:86:99:65:aa:3a:ad:c8:4f:68:a9:ef:13:
3a:d2:fb:33:ae:a7:ef:ad:aa:20:6b:fc:4e:ba:b7:
eb:5a:29:f3:d0:28:75:97:cf:7a:7c:5e:03:90:6e:
c7:ab:e6:2d:fc:21:8a:7c:b7:31:bc:1e:27:0f:fb:
ad:37:29:3b:90:25:f4:13:42:be:58:aa:02:dd:4d:
a3:e7:41:98:eb:7f:f1:32:3a:34:c0:69:f1:b1:52:
0f:44:4e:c7:53:4c:17:54:5a:8e:08:c7:20:a9:2b:
9a:90:73:2d:ec:70:14:60:47:7f:1a:98:34:8d:95:
40:5d:f0:4e:39:aa:30:5e:cd:3e:98:75:9c:51:8a:
d1:f9:ae:35:67:5e:f4:e0:6a:65:71:57:0d:a7:05:
43:af:e5:6f:d4:bf:e4:19:78:34:0a:56:f8:ad:7f:
c7:04:f0:f2:f3:46:74:9e:b4:16:ab:88:ee:38:05:
bf:fa:bc:c0:a4:d1:8d:99:7a:67:7b:43:7b:ab:a2:
51:cb:4f:70:f8:57:c6:5f:15:fc:5a:50:f4:50:0e:
9e:e8:db:73:c2:68:01:04:e3:bc:5c:88:f6:7b:c9:
de:67:27:64:9a:f6:fc:6d:dd:20:e6:62:1e:4a:2e:
82:73:8e:8d:ad:42:cf:26:4e:5a:85:21:9f:9d:70:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:EB:83:B6:72:6B:18:5E:B2:A0:3C:2A:A9:4B:8D:E3:2A:26:C8
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:4c:33:69:b7:d3:eb:43:cd:c2:0b:d0:35:b7:71:c4:2f:
f5:b4:6b:4a:22:2e:2d:12:42:f9:03:06:29:05:e6:08:3a:46:
fa:02:99:35:51:46:aa:ab:6e:41:6b:55:a8:bd:35:eb:26:b4:
77:a0:a0:71:b8:21:8a:90:51:8d:a1:f0:03:2f:6c:5a:96:e5:
b5:49:4b:37:38:fd:2a:5a:58:45:62:5d:b5:89:aa:0d:ec:19:
c4:06:b6:7f:21:36:12:2d:d2:b3:45:c7:73:5e:1d:68:02:0d:
05:5e:59:9a:c6:60:86:7d:2a:c6:5f:f6:e0:2a:9a:09:af:b4:
87:5e:c5:9c:c5:51:ee:92:35:9a:f8:4a:a3:40:df:e1:50:09:
b9:c4:b1:b2:9d:5a:c3:07:40:8c:b7:9d:17:f2:f9:a5:b6:bd:
8b:98:23:1a:69:b8:af:da:ef:29:68:c8:75:4b:e5:0a:28:9a:
4c:d8:28:c5:0f:ff:61:c1:08:f2:41:a7:b3:cf:fb:31:21:11:
c1:62:63:a4:48:f2:7b:ae:27:db:cc:6e:95:73:a3:88:9b:de:
b5:a3:62:38:d3:1c:ac:c7:04:a4:e6:61:71:8f:64:ed:55:f9:
f5:bd:31:5c:27:36:d1:ad:f0:61:d4:c5:a8:8f:10:e2:f3:54:
80:d8:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:26:59 2026 by rpki-client