Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: zHMRc5S7PuHZWkXBu3bJ1oOhauXWoVvNNl44QWbC4rM=
Subject key identifier: 3B:8B:BE:97:5B:DD:99:78:FA:67:64:4F:88:DA:54:76:49:3F:E3:58
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01A08A559E1F69BECEDC8DDB18A94717EE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 093F
Signing time: Thu 10 Sep 2026 08:01:01 +0000
Manifest this update: Thu 10 Sep 2026 08:01:01 +0000
Manifest next update: Fri 11 Sep 2026 08:01:01 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa (hash: eTI4gnLg2t5AMJXWsqRgOPsBhukLdQ0XY5+wofN0AgI=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: C8fl2EfnGVVZBwx8N81Hltqog+BASqW8KfG6jl/nvdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:9e:1f:69:be:ce:dc:8d:db:18:a9:47:17:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Sep 10 08:01:01 2026 GMT
Not After : Sep 11 08:01:01 2026 GMT
Subject: CN=3b8bbe975bdd9978fa67644f88da5476493fe358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:8f:89:a6:a2:ad:86:24:e1:02:f4:8a:0f:
53:41:69:de:77:34:45:33:16:3e:30:eb:50:a0:3b:
22:27:42:36:0d:23:32:8e:b6:7a:35:59:7f:98:25:
80:53:57:c8:19:1f:4d:cb:a4:ca:ca:c3:5b:da:b4:
8c:f0:9a:e0:ea:56:0e:09:83:42:c7:95:9e:1e:29:
85:37:89:57:c5:a4:f7:75:18:29:f3:e2:99:24:8d:
91:d2:0b:27:d1:2c:71:5d:8b:63:e8:84:b7:f3:af:
35:41:d1:16:5e:ef:b2:36:95:05:9b:47:c0:38:e5:
3b:e6:3a:b8:6b:9a:7f:4a:b3:7d:40:33:33:b9:16:
35:4f:5c:47:a9:17:01:6c:f5:7d:92:1d:6c:a1:be:
0c:57:08:cc:db:6f:7e:ea:c6:f9:80:78:23:46:53:
87:92:28:96:04:66:3c:37:a7:0a:c8:e9:34:82:e9:
68:7b:61:3b:a2:ee:cf:28:7b:7a:cd:a9:49:f5:e6:
6e:a1:10:55:66:8a:c0:fa:40:f9:b8:5c:e1:b4:f9:
30:d9:96:c4:ba:f4:d4:96:e2:5f:f9:58:e5:ac:bd:
90:2a:31:d4:30:0e:19:fc:fc:64:0d:86:b3:f6:7c:
7b:8c:ed:a9:26:2c:5f:bc:39:b1:17:ca:16:77:19:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:BE:97:5B:DD:99:78:FA:67:64:4F:88:DA:54:76:49:3F:E3:58
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:77:fb:a2:6a:3e:d8:18:29:c1:5c:36:65:57:f9:f5:88:b7:
17:a0:92:89:b8:e0:18:d2:e3:2a:c1:12:1c:fa:b1:8e:40:d5:
83:57:ca:ae:e7:98:07:e8:4a:8a:cd:18:7f:1a:41:69:5d:a6:
51:0d:8c:db:dc:43:bd:70:41:d5:44:2e:d4:34:e8:1a:d1:53:
ce:56:e5:ef:d4:e0:d3:46:8f:1c:2b:0b:b1:6a:92:4d:ef:d7:
fe:83:d2:9e:4d:95:57:a5:17:94:d8:1d:59:f0:29:64:00:c5:
2e:4e:81:eb:49:cc:af:49:f8:57:7d:09:31:12:19:9c:34:9e:
bc:c7:1a:25:39:ec:50:34:c3:36:38:a3:b1:54:9d:08:1f:76:
7b:af:a7:05:b4:8d:81:b4:83:d6:f6:ac:8e:60:db:93:04:0b:
db:e5:6e:64:2e:04:73:d3:32:f8:45:7e:5f:58:a8:12:8e:60:
70:4d:b2:15:65:8c:41:aa:36:cc:91:fc:af:bd:97:8c:cb:f4:
89:82:e2:6c:50:9a:99:0a:94:cc:41:83:65:81:3f:10:e5:90:
66:8f:c5:14:b5:36:58:4d:d3:a4:1d:94:1f:44:72:96:38:54:
0d:9f:8b:26:d9:22:42:85:fe:1f:a3:2f:82:3b:8c:60:6e:68:
b9:2f:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:09:50 2026 by rpki-client