Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: BjvHa79tF8+4t8eY63y+ojytrQ/Ln9zO9v3UVONWoBc=
Subject key identifier: 94:A6:A5:00:99:69:C8:A0:88:A6:B8:ED:09:64:9E:B0:70:D6:20:BE
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 01A08D56826A6FFBEFB43FA9656E290343F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 22:00:51 +0000
Manifest this update: Thu 10 Sep 2026 22:00:51 +0000
Manifest next update: Fri 11 Sep 2026 22:00:51 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: fgzEgi3aXFbbC8Jjukl8ByiD7UDxkoWqgcoKDZz4TkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:82:6a:6f:fb:ef:b4:3f:a9:65:6e:29:03:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Sep 10 22:00:51 2026 GMT
Not After : Sep 11 22:00:51 2026 GMT
Subject: CN=94a6a5009969c8a088a6b8ed09649eb070d620be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:ef:1c:73:24:38:f6:32:71:e5:f3:92:e6:
f0:6c:52:32:82:fc:da:57:1f:ea:b3:5f:f6:24:cb:
cb:d8:49:e0:81:d4:35:65:6d:07:3f:de:af:43:54:
a7:ca:42:13:28:36:b9:58:53:7d:03:7a:99:a3:f9:
9c:6e:bd:c2:39:19:18:3d:d6:ae:61:91:1b:b9:fa:
d6:b3:cd:b4:ee:79:d7:e2:9c:95:be:b0:c7:c2:2a:
ec:ef:00:db:8f:3e:da:e7:b5:24:53:b1:a6:ba:1c:
63:99:ce:f2:23:bd:62:06:e5:b5:d2:34:86:f6:20:
32:f2:32:6e:99:27:e4:ca:00:94:a3:7b:a4:e9:b6:
ec:3b:e3:c0:a8:14:68:19:7a:1d:31:a3:95:6f:99:
2c:a4:18:58:c8:8d:dc:7c:72:5a:cc:df:ba:1f:20:
45:98:7a:e9:38:40:e3:06:d0:a4:42:4a:65:df:99:
7b:e0:c3:71:46:3e:32:08:6d:57:f3:0a:03:cf:be:
b4:36:67:b3:9a:30:7a:77:24:bc:b3:4a:eb:56:bc:
4b:47:98:1b:2e:b1:d8:98:9f:86:f7:ba:f4:b2:01:
fd:50:7c:9f:2b:cb:4b:00:2d:93:32:89:d7:39:cf:
0e:0c:48:f3:8b:a5:1d:ff:f7:83:a6:18:7a:95:46:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:A5:00:99:69:C8:A0:88:A6:B8:ED:09:64:9E:B0:70:D6:20:BE
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a0:8e:f2:73:89:94:74:16:21:9b:1f:78:2a:b4:66:c6:c3:
a5:c3:92:d4:1e:72:a8:f2:d1:88:d7:49:b3:13:6d:8a:ab:0f:
6a:58:dc:6d:8e:5b:56:05:20:2c:22:ca:3e:86:4f:73:e0:f6:
cf:cf:e9:d5:47:e7:56:e9:b0:e4:2a:fb:ed:97:60:bc:86:60:
d7:69:01:11:10:e5:60:5a:20:84:fb:90:d2:63:55:37:0d:c5:
56:64:35:83:64:36:eb:c2:7d:ee:78:9c:a2:1f:d7:b1:59:01:
af:53:54:1f:7b:5c:61:d0:63:e7:c9:93:9e:8a:83:04:55:ea:
c4:d0:2d:31:56:9a:bc:c1:fb:08:52:e7:62:ab:6b:c6:0e:2d:
7a:3d:ab:e2:fe:d6:ae:80:ec:91:fe:ea:de:5e:59:14:69:a1:
01:61:24:0a:1b:e4:72:30:c9:68:7e:8a:12:1e:0f:a2:62:7a:
b6:cf:15:43:b5:08:fe:ec:ba:96:c1:63:0f:a7:65:f1:e3:8f:
1a:40:46:b1:bb:60:f0:fa:19:3a:d8:d9:0e:46:63:fe:3e:55:
cc:8c:31:d0:b7:61:11:60:e9:93:1f:15:00:24:3b:e6:e3:46:
d8:82:8b:2e:04:59:27:54:dc:20:a5:1e:6e:99:f1:88:08:59:
f6:2d:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:03:59 2026 by rpki-client