Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: ETX1eRYotklPBTCYIFkiHHJepDorPOtoLHTyavTOV+g=
Subject key identifier: D6:69:03:E6:D0:32:8C:DF:5D:5A:A5:2C:C0:9D:89:94:D8:BD:0D:64
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01A17D3CA4282D9C4C038BF91EB6E4ED1275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 1A66
Signing time: Tue 27 Oct 2026 12:01:28 +0000
Manifest this update: Tue 27 Oct 2026 12:01:28 +0000
Manifest next update: Wed 28 Oct 2026 12:01:28 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: M5OrCPBKPyVfh4N6Cb/5GS3U0jxISqgH3TvS3iRzLsA=)
2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:a4:28:2d:9c:4c:03:8b:f9:1e:b6:e4:ed:12:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Oct 27 12:01:28 2026 GMT
Not After : Oct 28 12:01:28 2026 GMT
Subject: CN=d66903e6d0328cdf5d5aa52cc09d8994d8bd0d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:1d:1a:b9:53:a7:af:8f:bd:ad:6f:30:8e:
15:c6:b2:6a:8c:1c:22:4c:9d:47:0a:c9:38:15:3f:
8e:79:5e:18:a2:e4:25:4f:38:80:c3:84:ff:ad:f6:
17:97:b2:13:c0:42:31:ce:71:35:7b:0f:0b:5a:b7:
10:f8:85:5c:e9:45:bd:10:cd:0b:96:43:7b:c4:26:
a3:3e:d4:3f:a3:ae:d7:5d:57:7f:5a:7e:8b:66:60:
a1:84:9c:1f:92:dc:18:cb:61:19:2c:4c:72:28:2f:
2c:d0:c7:1d:c7:2b:85:96:a5:64:1f:37:32:1b:b1:
aa:c9:48:21:04:d9:59:30:2a:d4:5d:b1:f3:bc:99:
18:9b:40:05:d2:74:9d:df:26:1e:d8:5e:fc:e7:08:
8f:d4:6d:af:95:1f:f5:e7:b6:5a:30:64:1a:bb:ac:
24:57:0b:90:92:c9:20:80:63:a9:b6:40:2c:8b:3a:
c9:c7:50:84:12:94:9b:55:ee:96:2c:5b:8c:6a:bf:
27:55:aa:6b:ae:94:50:ac:60:cd:b3:07:a1:fa:6c:
13:97:a2:10:6b:2f:34:fa:44:fa:3b:45:f5:4f:4f:
bd:91:08:be:46:95:fd:28:bd:ab:7e:bc:dd:6f:c8:
9c:d5:ca:d8:19:65:cc:1a:e3:53:7f:ad:a0:d2:14:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:03:E6:D0:32:8C:DF:5D:5A:A5:2C:C0:9D:89:94:D8:BD:0D:64
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:53:d7:b0:bd:7a:d9:81:4c:14:90:26:f1:41:e3:97:c4:4f:
72:07:ea:7e:45:b5:f3:ea:97:60:f5:3f:a1:1c:68:27:a8:2d:
e4:8d:20:cf:8a:90:33:5e:55:51:b4:53:b0:89:9f:68:92:0a:
a5:65:40:fb:69:3a:af:74:12:74:24:84:30:6a:01:bc:0e:ba:
3e:b0:75:35:61:aa:6d:3b:8f:ab:df:96:2c:36:7d:95:02:4b:
b7:43:d2:65:01:4c:70:c7:9c:64:1d:71:8b:27:c2:f0:84:b2:
0c:15:57:38:c0:79:86:d8:49:39:cb:1c:2b:1e:dc:fa:25:8f:
47:ca:9a:72:b3:55:02:39:18:97:d2:df:35:d3:c2:e9:12:bb:
1b:5c:02:bd:ff:34:a3:1c:4e:64:d1:08:5e:fb:f5:ee:ea:ce:
bf:5f:86:e8:eb:ca:8a:4a:28:a7:21:44:aa:67:27:c6:bd:bb:
f4:fa:4e:72:65:af:58:ae:f0:a4:80:f6:f2:4d:aa:40:4e:2c:
b6:e0:9d:c8:d6:14:46:29:12:4e:ae:3e:42:66:29:ea:7b:e9:
74:c4:9d:45:f2:1a:bc:7f:2b:56:70:55:d3:89:83:03:80:bf:
8b:39:ba:fe:fe:42:1b:66:fc:ed:03:9c:3c:3b:38:5b:72:a3:
3a:b1:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:35:18 2026 by rpki-client