Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
File: lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft (raw, json)
Hash identifier: IjYZuaMLowmcKXdew0lThnLxVEQukTYF25qWbrGC1DI=
Subject key identifier: 43:AF:0D:72:7E:8E:67:E6:DF:76:C9:B4:62:29:10:B5:11:F0:2E:8B
Authority key identifier: 95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
Certificate issuer: /CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Certificate serial: 01A089E7D53D8B8EB6664FDAC49CB56EC8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
Manifest number: C8
Signing time: Thu 10 Sep 2026 06:01:07 +0000
Manifest this update: Thu 10 Sep 2026 06:01:07 +0000
Manifest next update: Fri 11 Sep 2026 06:01:07 +0000
Files and hashes: 1: _wGyv0k8XO18ySIo4NGtQz8fi-Y.roa (hash: 4PptUYYXksAvbEf1d4Az+k3sicfatEKpk4yuXrS/xKQ=)
2: lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl (hash: +GSn7ioS7Q08M2sB18EEBQHKBUqOxu3AMxftrlEl8xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:d5:3d:8b:8e:b6:66:4f:da:c4:9c:b5:6e:c8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Validity
Not Before: Sep 10 06:01:07 2026 GMT
Not After : Sep 11 06:01:07 2026 GMT
Subject: CN=43af0d727e8e67e6df76c9b4622910b511f02e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:2f:40:b0:fd:81:5c:21:aa:a0:b2:b0:b6:
7a:38:cb:b0:09:1d:c6:62:58:4e:98:55:ba:55:7a:
ec:30:94:fb:ae:7e:9e:af:b2:9d:d7:36:cd:e8:31:
71:97:20:29:5e:d9:70:85:1f:1a:3d:ee:8c:e5:e1:
61:93:6f:f5:a0:ea:d0:7b:fd:a2:02:05:5e:c0:24:
fc:b5:1b:8c:0b:c4:21:2d:2a:67:27:51:09:fb:0b:
18:b9:c5:32:c2:18:61:11:7d:9c:58:00:6e:c2:e5:
80:7d:51:53:98:78:87:04:3b:ec:3a:a2:fd:71:1d:
e4:37:61:f7:a2:48:a6:d6:57:3c:fe:26:ec:1c:33:
85:d8:e0:12:a5:1c:63:a6:7e:23:0d:8d:84:92:44:
4c:5f:50:c2:22:ec:6c:cf:d9:05:21:a5:75:ff:fa:
77:0a:75:97:b1:84:01:df:b9:ce:38:4e:11:a5:52:
f0:d7:f4:8e:f0:d2:8c:c4:1b:44:a3:2e:68:fa:dc:
a8:a4:c5:c7:ee:e7:17:5c:b5:17:20:40:6f:32:90:
3a:5c:1a:3a:5a:8c:85:58:f0:28:f9:ca:c8:db:b8:
5e:2f:70:1a:81:f8:a5:43:99:7c:44:b7:d8:3f:a9:
82:08:42:32:84:79:18:c8:c5:98:05:28:3d:f1:c2:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AF:0D:72:7E:8E:67:E6:DF:76:C9:B4:62:29:10:B5:11:F0:2E:8B
X509v3 Authority Key Identifier:
keyid:95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:3c:62:7d:dd:96:d9:dd:cf:ad:44:30:2a:ba:69:4c:ce:
4a:b1:b9:6d:e6:f9:17:09:e3:41:ad:0c:53:59:9f:54:c2:e0:
a8:a3:08:2c:ad:73:aa:33:95:a6:7c:ad:a1:14:b8:b8:a6:eb:
e1:38:e7:f2:d3:59:b4:5d:d3:f0:94:99:a7:b2:4f:90:1d:e1:
9f:55:52:fb:c8:d2:d2:48:42:30:24:2d:a9:ac:5e:22:f3:3e:
c2:6b:94:52:7f:cf:61:64:07:1e:ee:51:df:44:26:cd:e5:48:
25:30:5c:1d:40:14:ba:a0:8f:ca:45:1d:b8:d2:26:ae:12:43:
31:7d:b7:be:6d:55:5b:cf:8b:28:3a:e0:c1:f0:fb:c5:1b:4f:
68:39:4b:3f:13:f5:d8:7d:04:16:83:f9:31:52:39:fc:76:7e:
c9:13:a2:cc:78:67:e3:ae:20:7d:d0:fb:bb:40:4c:bc:d0:2e:
aa:05:72:f9:47:39:4d:7a:57:3c:cb:29:36:ae:3a:c0:2f:9c:
75:e3:6e:76:70:2b:70:9f:00:7e:92:38:2f:d7:f8:5d:ae:c9:
49:40:a5:4e:7b:bc:ad:4b:f3:32:4c:40:b4:db:e5:ef:67:6c:
b2:19:2b:cc:25:cc:8b:f9:d4:c5:ba:c7:58:4e:a9:3b:52:1e:
79:34:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:16:05 2026 by rpki-client