Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: GcgrzJpFsOU9LqAH5FOKyaBQ9O0rBbEuYHRCKIuidgk=
Subject key identifier: D4:41:AE:BB:10:53:3D:29:F5:7A:7B:A2:6B:B5:62:83:2B:E7:FE:AB
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 01A0F643E44931231F55A70259AE7FD9C5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 059D
Signing time: Thu 01 Oct 2026 07:00:39 +0000
Manifest this update: Thu 01 Oct 2026 07:00:39 +0000
Manifest next update: Fri 02 Oct 2026 07:00:39 +0000
Files and hashes: 1: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
2: QuJwAkOFN_XOE8IM4XrowzLIN7M.roa (hash: VPGDJLJ+93FnhUEzwkY0Hv11B12LiVEv3FiMpJzAXQA=)
3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: dtJGB7yLIFD+Q9CwfwhONlOraYSnPFnK5RvJVz/9zYU=)
5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:43:e4:49:31:23:1f:55:a7:02:59:ae:7f:d9:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Oct 1 07:00:39 2026 GMT
Not After : Oct 2 07:00:39 2026 GMT
Subject: CN=d441aebb10533d29f57a7ba26bb562832be7feab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:04:21:de:76:18:43:d2:65:83:6c:1a:ed:
cc:72:c5:8d:58:61:62:86:05:d9:ae:a5:f8:fe:2a:
af:63:4a:6f:07:92:aa:46:5e:f9:48:48:99:7a:d4:
0c:21:c8:f5:37:93:ac:ab:ce:42:eb:0b:2e:80:7c:
8c:72:bd:87:37:72:f1:35:48:88:fc:d1:1d:bd:bc:
be:a0:ff:b8:36:b0:94:81:05:47:42:f2:f6:b1:35:
8d:50:3f:30:53:eb:e9:d8:dc:45:92:8d:11:09:74:
4c:3a:6b:b6:91:ee:24:a5:a9:cc:1d:24:f8:b6:70:
1e:72:a7:95:09:e7:e7:c3:58:47:8f:ea:3c:c3:26:
48:3f:bf:11:4d:cf:60:b5:12:16:bc:04:d9:d1:d6:
50:65:39:cb:ca:b9:a9:99:26:d2:f8:85:bd:7f:a9:
a8:84:aa:2a:a1:4c:f2:3b:c2:b1:41:6a:e3:b2:50:
75:a6:38:3b:70:18:f5:4a:49:d1:a1:ed:85:2b:2d:
34:74:75:59:56:db:9a:36:14:14:53:a2:53:2e:c5:
cc:f9:7f:da:de:27:af:d6:c7:ca:f2:70:a3:82:b8:
5d:d4:9a:41:b5:f2:bc:35:ab:e9:05:af:30:23:40:
a6:34:92:bc:68:02:58:bf:ea:6b:97:91:c0:c7:d1:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:AE:BB:10:53:3D:29:F5:7A:7B:A2:6B:B5:62:83:2B:E7:FE:AB
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:82:63:b1:e1:a3:98:39:74:46:29:c3:01:8f:29:e9:84:24:
1c:37:4f:d2:a2:02:1f:c6:8d:be:6d:80:53:64:4a:bb:b2:3a:
51:c2:0c:16:9f:6f:0f:85:aa:9e:d0:08:fa:c4:a1:53:ba:eb:
29:e4:14:86:d7:be:9a:db:c4:fe:6a:af:98:e2:35:09:7e:7d:
f6:a5:3e:9d:5d:71:0d:51:20:49:a6:e8:7a:2f:78:c0:9f:90:
73:0a:c4:7f:03:59:12:16:0a:6f:c8:65:24:fc:bf:d2:1f:1f:
e3:0b:17:33:b8:f8:81:6d:cf:1b:08:ce:e2:b9:07:17:3f:d5:
1b:4f:c3:91:b3:4a:1c:28:15:82:c1:fe:8f:f1:5d:7b:ad:84:
49:48:a2:2a:dd:b7:66:93:50:05:64:75:96:da:f5:64:9e:9a:
30:8c:82:46:cf:a4:14:22:4f:9b:c8:68:1e:22:dc:64:ab:4d:
6a:1c:cf:fe:de:22:66:b3:97:d3:a5:21:fb:cc:42:32:ee:4a:
b4:42:d0:41:cd:71:61:95:c6:0d:e2:92:b9:29:b3:ea:a3:89:
c1:5e:d1:99:7a:17:e7:b9:78:79:16:0f:ba:8f:7f:71:60:24:
d2:a8:b2:5c:ae:be:37:52:35:66:44:e7:88:ae:78:f6:18:bb:
b6:f2:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:15:19 2026 by rpki-client