Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: 8OxoE0wbjzo9h+JA3LmbhBYMW19GmCCVwTp9ewVumHE=
Subject key identifier: EA:46:5E:37:A7:27:E3:8D:9D:C2:B9:51:FD:8E:06:ED:A7:A9:C7:56
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 01A16A9124CBD557CFD013B64C4E38359298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 187B
Signing time: Fri 23 Oct 2026 21:00:59 +0000
Manifest this update: Fri 23 Oct 2026 21:00:59 +0000
Manifest next update: Sat 24 Oct 2026 21:00:59 +0000
Files and hashes: 1: 1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa (hash: 8052VqgxoQXtGMoT/9mInb/P+q/GQzoHQcwJ95n8TXs=)
2: Phjh0r_ad13WTH6l1p80FF4KGew.roa (hash: u3OCSo+Ax8+S8/eXW7W/E7Cm5GtFphsGlM/+L/E8D18=)
3: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: DrDuJizBgUe8UEWMbKkrxxzi4BFwd3//uytpu5V64rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:91:24:cb:d5:57:cf:d0:13:b6:4c:4e:38:35:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Oct 23 21:00:59 2026 GMT
Not After : Oct 24 21:00:59 2026 GMT
Subject: CN=ea465e37a727e38d9dc2b951fd8e06eda7a9c756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:36:f2:6b:86:1d:3b:8f:6c:91:05:29:a9:
09:46:68:d6:74:62:15:3c:3f:fb:1f:1d:da:1d:31:
a8:c3:25:ea:6c:7b:79:3a:fb:16:3e:e6:f3:79:a0:
36:e1:13:04:c7:ee:2d:cc:6a:04:0b:f8:52:f3:94:
17:32:85:fc:08:df:da:57:c3:1f:b0:c5:be:05:d5:
25:13:db:3d:72:41:d1:9a:6e:a6:3e:c0:73:13:d1:
b3:20:68:ea:e1:9c:05:e0:10:59:5b:94:65:a9:bd:
85:03:4d:c0:a0:c1:55:09:aa:46:a0:6f:84:21:3c:
39:2d:ee:83:26:08:c9:b0:54:22:dc:59:a6:2d:83:
30:4e:66:77:c5:0e:39:4f:28:45:60:e2:6c:71:0e:
42:b1:31:55:e7:2d:47:ad:08:2b:9d:82:59:41:c8:
15:a9:1c:8c:18:fd:70:0b:f2:cd:f3:20:ae:14:ce:
5c:7f:4a:d7:b0:99:5c:98:c3:4f:3f:0f:7d:c9:7a:
6e:89:e0:11:c8:a6:59:f0:6c:0b:5a:42:36:f3:4f:
92:79:74:78:43:69:f1:45:b6:f6:6e:6a:fd:8a:b4:
9b:5e:20:e7:a9:66:bf:e7:7e:4f:4f:cd:5b:22:90:
66:ff:8e:d6:f7:dc:60:9b:68:39:e0:a6:24:57:6c:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:5E:37:A7:27:E3:8D:9D:C2:B9:51:FD:8E:06:ED:A7:A9:C7:56
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:bc:7e:ee:3e:43:77:c5:2b:a6:59:ec:9d:46:4b:4b:18:
35:1b:7c:cd:df:cd:a6:db:9a:0b:1b:c3:34:d0:fc:b9:95:38:
28:d9:f2:ac:32:dd:60:33:16:98:95:78:77:0a:c8:19:d6:d9:
82:94:c9:bf:94:1e:ca:74:22:a9:00:00:15:32:4c:1c:49:0c:
e5:29:31:8a:1c:0b:33:1d:d4:5a:d5:c2:d1:98:f8:b1:f2:8a:
80:29:78:e9:01:ec:e3:a9:11:36:10:d5:b4:e1:e4:78:5f:b0:
73:bc:bd:50:8c:8f:c9:16:5f:17:15:e8:7b:e9:16:05:46:1a:
42:ff:76:40:a4:01:24:eb:fe:05:ec:ac:17:82:90:08:fa:95:
b0:f3:b1:36:e5:57:d5:66:ab:6c:82:a2:76:73:77:66:0b:fd:
eb:fc:a7:db:65:cf:e9:e3:a4:78:93:2a:7d:73:90:39:5d:db:
ad:80:98:f5:b3:59:ba:1a:d7:c9:ca:32:c2:8b:33:c4:29:10:
f4:9f:19:b7:5a:e1:9c:38:aa:58:77:ea:75:90:dd:65:d3:e7:
51:6a:0b:59:55:ba:fa:31:fa:63:2f:7d:70:fc:dd:54:9b:f7:
b0:87:cc:3b:a6:4b:e1:30:85:f5:b6:32:52:d4:34:5d:e8:76:
f4:85:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:55:21 2026 by rpki-client