Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: N2R+a9d8LVhRLWb6TeTw8pqW88hr3sm2qm+tifvd0Xs=
Subject key identifier: 79:42:74:D3:5E:5C:DF:2B:75:3E:87:62:BF:18:DC:49:B1:1F:76:E5
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01A0841CD29F8DA8059022B39BE44FA4DE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 15FF
Signing time: Wed 09 Sep 2026 03:01:16 +0000
Manifest this update: Wed 09 Sep 2026 03:01:16 +0000
Manifest next update: Thu 10 Sep 2026 03:01:16 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: qkO0WrMqUpk/g3c5/bJxIR/N706CnFMxgm35SxoLuq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:1c:d2:9f:8d:a8:05:90:22:b3:9b:e4:4f:a4:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Sep 9 03:01:16 2026 GMT
Not After : Sep 10 03:01:16 2026 GMT
Subject: CN=794274d35e5cdf2b753e8762bf18dc49b11f76e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:39:90:60:91:a5:a3:84:b7:b7:d2:57:37:
8f:7c:e3:24:24:67:8f:5e:1e:47:a4:7e:ba:be:04:
36:eb:c4:02:65:be:17:c1:de:77:c5:82:ed:30:88:
bb:40:39:f1:82:ce:2f:81:56:82:ee:be:ac:3b:55:
f7:bf:43:bc:0b:9b:b3:f3:6c:23:06:34:6e:34:09:
b8:17:47:e7:0a:88:c7:37:95:30:22:83:f6:4d:50:
77:b6:78:39:3e:87:20:3b:d7:43:25:2e:f1:b0:62:
75:1f:d5:5c:9c:ba:84:d8:0c:d3:a6:95:b5:a4:d9:
76:98:a1:60:4d:bf:ec:ee:b3:38:92:52:b6:c9:3c:
84:76:dd:36:60:56:92:45:9e:c2:c7:80:48:4b:34:
85:c9:b0:26:4f:f8:ab:da:06:b0:8f:4d:a3:5e:e2:
dd:81:bc:08:15:0a:dd:5d:e3:2e:4f:02:5c:2f:86:
4a:eb:70:41:e0:c5:ce:05:39:3d:aa:ac:cf:96:b3:
44:17:80:56:d0:a6:53:1d:dd:8d:2b:2b:93:4c:b5:
7c:15:90:17:8e:5b:02:9d:71:39:db:9d:82:ce:1b:
86:ca:5b:54:39:59:8b:4c:8e:a2:55:3a:df:fe:44:
1c:de:ce:e8:dd:a0:82:07:c5:20:d4:53:3c:4e:cd:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:74:D3:5E:5C:DF:2B:75:3E:87:62:BF:18:DC:49:B1:1F:76:E5
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:87:85:53:6e:5f:80:0c:43:59:b1:72:48:81:ff:a8:00:43:
29:37:dd:20:0e:b9:bd:fc:ca:0f:08:19:39:02:fc:d5:7d:2e:
03:90:7d:67:23:12:f2:5e:91:46:26:07:ec:67:72:59:ad:8c:
64:f3:3b:e5:15:c0:6a:0a:a9:36:63:0c:e9:24:aa:bd:2c:d9:
5d:d8:bb:7b:96:2e:37:41:c5:82:51:fd:59:ab:10:d6:8b:31:
15:88:9c:5a:64:f2:92:b0:29:54:18:ec:c4:13:4a:8d:a6:c5:
e4:16:be:93:ee:5e:41:8c:d4:34:81:4c:67:17:7a:98:8a:08:
eb:ea:eb:89:e2:f3:98:ec:54:67:7b:de:86:a3:fa:d3:78:84:
8c:e0:04:0c:08:8f:5a:b2:5d:82:5f:45:69:cd:60:86:2e:91:
f0:0e:cf:34:24:23:ae:66:d2:db:a6:54:0d:1f:7f:58:f4:40:
b1:29:3a:d0:37:99:47:e5:84:02:24:41:bd:9b:6d:11:74:9d:
e9:9a:d9:7e:dd:03:55:cf:d4:38:ba:84:9c:4d:9d:07:aa:c1:
b8:4f:1a:fe:6b:c5:6f:66:33:b1:c5:f2:3c:68:5d:98:bf:33:
03:bc:db:61:22:74:a2:53:e6:52:54:79:b1:d0:8d:58:fd:ca:
b8:be:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 09:35:13 2026 by rpki-client