Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: DyKzfvh0WTwni6GgkUyQhI7iLwiNVY53BVJFlEn442E=
Subject key identifier: 35:4F:1F:A5:50:05:80:1C:90:4D:71:2A:B4:09:6A:4C:11:A1:E1:2F
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01A181190D4C657B25FF88BA60B41DC271D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1682
Signing time: Wed 28 Oct 2026 06:01:04 +0000
Manifest this update: Wed 28 Oct 2026 06:01:04 +0000
Manifest next update: Thu 29 Oct 2026 06:01:04 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: cyzge2Xw/jEzr81/gCXLAjZfa/9K5zloeR0MVlulOjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:0d:4c:65:7b:25:ff:88:ba:60:b4:1d:c2:71:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Oct 28 06:01:04 2026 GMT
Not After : Oct 29 06:01:04 2026 GMT
Subject: CN=354f1fa55005801c904d712ab4096a4c11a1e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:81:d8:c3:7b:35:bc:fb:b4:8c:6e:59:81:
d5:11:d0:c0:0c:85:b9:50:e4:cc:54:15:47:86:31:
40:e5:26:c3:6a:fe:4a:cf:40:74:44:69:a2:3d:28:
12:3f:fe:39:fa:fd:1e:5b:18:59:67:50:08:1c:dc:
9f:0f:4c:71:2e:9c:48:f5:31:90:62:97:83:85:ae:
5f:1c:63:6f:f1:fe:1b:ae:42:83:b7:72:69:6a:50:
e3:95:8b:9b:c0:13:0a:46:2b:6e:fa:95:35:ce:2a:
7b:41:3e:50:e2:be:30:7f:ef:35:4b:34:63:09:3f:
be:76:32:38:37:73:8f:75:fd:3c:a4:ad:b9:78:b9:
ff:1e:0e:56:2d:36:23:7a:c8:99:c0:e1:81:80:7d:
37:5e:1b:3e:95:8a:2c:fa:06:03:84:c5:26:74:43:
46:7b:7f:53:30:49:fd:2a:d8:6c:c5:bb:48:42:a9:
4f:b7:bb:42:e9:4f:81:ae:b7:23:63:74:c8:d1:62:
e2:ef:2f:09:20:3b:d3:d5:0d:7e:d6:73:4c:8e:b1:
b0:b7:b9:cd:7f:97:ae:ce:9d:77:bb:a3:fa:e4:81:
29:db:3b:21:fa:91:57:fd:fd:13:04:e8:a2:9f:28:
cb:90:3f:d5:7f:2f:23:4e:3c:0a:61:e3:8b:59:03:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4F:1F:A5:50:05:80:1C:90:4D:71:2A:B4:09:6A:4C:11:A1:E1:2F
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:86:7e:88:f1:cd:d7:fe:72:4e:2f:dd:0f:49:06:00:0f:e5:
b8:48:42:ac:77:b6:f3:6b:91:cd:08:8c:66:22:d1:d5:9b:64:
1d:9f:a4:3e:25:5a:7a:05:2d:f5:9a:62:cb:9e:d3:2a:45:75:
6d:af:8c:85:84:7a:30:d2:2b:af:82:ca:d0:3a:7f:2f:28:ef:
88:76:c2:b7:87:32:13:36:ac:84:1f:67:da:1a:1e:c7:b8:71:
76:74:b0:16:4a:31:f1:96:4d:c7:71:27:8d:18:41:be:56:36:
30:ef:ad:60:8b:63:a4:fd:7f:14:16:83:2b:82:57:45:dd:91:
87:43:1c:a1:b2:97:11:2f:c6:23:0d:9c:dd:ad:f7:75:8b:44:
77:21:1e:f3:5f:ce:c4:87:6b:b2:11:f4:c4:6a:7f:f6:0c:21:
2e:38:09:fe:d4:9a:a4:77:c3:3f:d6:47:6b:e0:87:21:43:bf:
18:11:28:a1:7d:d8:6a:0d:7b:97:1e:e9:02:d1:36:6b:40:a9:
d0:69:7b:c0:e4:fb:5d:89:c6:9a:fd:a0:0c:d2:40:82:dd:28:
94:f3:bb:b9:0d:59:55:c9:e8:9c:b4:ac:55:38:06:5c:d1:76:
b6:76:82:0b:e0:04:7b:c2:b4:2e:d3:df:c0:82:bb:d1:32:29:
44:fe:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:50 2026 by rpki-client