Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: NXlKH+tRR4xgLzobg3UfDZ0ahd3R78505/xdQdVQm6M=
Subject key identifier: F1:D9:64:CA:2F:1E:A8:1D:17:5C:FF:BC:C7:8E:D0:44:79:F6:0A:6C
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01A18187346DB6697FFF83A5D74EEF7966D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 09BF
Signing time: Wed 28 Oct 2026 08:01:23 +0000
Manifest this update: Wed 28 Oct 2026 08:01:23 +0000
Manifest next update: Thu 29 Oct 2026 08:01:23 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa (hash: eTI4gnLg2t5AMJXWsqRgOPsBhukLdQ0XY5+wofN0AgI=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: qzviC41OUuZOa/3G2A0eTtMFc9J6xmKWVogPvFdHu3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:34:6d:b6:69:7f:ff:83:a5:d7:4e:ef:79:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Oct 28 08:01:23 2026 GMT
Not After : Oct 29 08:01:23 2026 GMT
Subject: CN=f1d964ca2f1ea81d175cffbcc78ed04479f60a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:16:91:9d:2b:cf:d5:17:35:c8:50:15:10:
20:fe:f6:16:a4:e0:5d:bb:e9:f2:82:3f:e7:a6:c8:
48:69:08:b8:89:f2:8f:d6:5f:4e:3f:e5:56:db:32:
99:46:2d:15:3b:52:5a:ce:1e:fb:fa:df:98:46:df:
a9:8a:53:2f:3a:f8:a2:89:ad:06:31:6a:f1:81:c5:
b4:9b:f9:ec:8e:ce:52:47:36:45:32:07:48:78:f5:
c4:1e:1f:5c:e8:fe:b8:97:79:f8:69:f9:65:f2:e2:
ed:ed:45:91:db:ed:1d:8e:5f:ff:7d:7c:fc:db:1e:
6f:67:aa:7e:d2:6f:9c:52:14:65:a0:ad:35:7d:d1:
b5:a8:98:65:54:5c:fd:fd:2c:da:ac:43:9c:46:6a:
1a:bd:57:58:b5:d2:76:9a:81:60:82:f5:74:7d:95:
11:0a:80:66:5d:14:31:78:a7:c2:ed:48:39:27:c1:
2e:c5:f1:09:97:e0:26:a0:2a:21:ba:e7:02:55:f3:
03:cd:57:9e:e0:65:70:42:01:c9:06:90:35:9d:db:
5a:27:90:8f:36:c0:bb:8a:78:ed:06:b5:2a:10:08:
be:0c:27:4f:fb:c8:4c:ce:69:49:32:5a:22:e9:a4:
2d:bf:0d:28:c8:5c:67:b2:b1:7e:03:54:dd:7d:ce:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:64:CA:2F:1E:A8:1D:17:5C:FF:BC:C7:8E:D0:44:79:F6:0A:6C
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:81:58:32:be:bf:11:b9:f1:f1:00:bb:1f:4f:5a:78:60:df:
a1:8c:c1:26:b7:cf:88:2c:19:6e:27:4b:4a:04:a6:e7:f8:3b:
83:48:33:d9:63:66:d6:37:e9:9b:39:ac:f7:6b:9b:d7:51:a4:
2e:e2:35:86:4b:d8:8d:22:26:33:44:4b:8d:ae:51:59:bf:52:
5f:60:9b:f0:bd:16:32:bf:91:4d:a6:ff:f2:92:17:4c:41:61:
c0:ce:99:4e:77:64:ec:af:37:2a:f3:77:d3:41:5b:2b:a8:30:
8b:c1:15:f5:80:97:23:98:d8:3a:92:64:b6:4b:2c:85:dd:d8:
b3:c6:88:d5:59:e9:eb:10:f8:ba:29:8a:69:7b:61:e2:db:a6:
3f:45:dc:5a:4e:a0:df:ef:d3:29:d5:c9:5b:e1:d2:f0:40:a0:
81:63:ad:92:06:be:6a:6d:c6:2d:a7:b2:c5:de:17:96:8f:07:
4e:38:80:f9:08:8a:af:b3:5a:6c:cb:f0:1e:c9:ec:47:2a:8a:
4a:45:26:88:c5:e2:fb:05:38:60:37:07:21:62:1e:64:68:07:
40:fa:4f:00:bc:9b:ac:aa:52:b4:58:6c:e6:59:9f:a2:6a:3d:
06:25:b1:c3:8e:55:d6:06:93:44:aa:1a:04:a2:01:6d:55:4a:
c9:c6:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:29 2026 by rpki-client