Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: uDbtoTLd6xBBH2wLV8vbNtQmc/I5OHm7B+1n96Agf+Y=
Subject key identifier: 70:73:32:03:87:54:8C:24:5F:F6:1B:F3:E3:85:08:37:E6:8A:64:60
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 01A08A8C4E0B8E653787EB79CBBCEDB7B13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 17EA
Signing time: Thu 10 Sep 2026 09:00:45 +0000
Manifest this update: Thu 10 Sep 2026 09:00:45 +0000
Manifest next update: Fri 11 Sep 2026 09:00:45 +0000
Files and hashes: 1: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: GjHo4GS7qCwmmvkw/DbhgCzS5EiU3dum4nXI7O3H0Go=)
2: tH6UAUlHkrphiRbu61-HSS86nXk.roa (hash: WUdezRc32+vmp8r5srct60iy1f5vPUfnPMrswiz/mE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:4e:0b:8e:65:37:87:eb:79:cb:bc:ed:b7:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Sep 10 09:00:45 2026 GMT
Not After : Sep 11 09:00:45 2026 GMT
Subject: CN=7073320387548c245ff61bf3e3850837e68a6460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:89:b2:cb:b6:65:1b:cb:fd:52:7c:18:27:
68:45:02:ef:d3:93:06:d0:6e:69:ea:e0:27:01:ee:
75:9f:c0:fe:7e:60:93:08:1e:d0:b0:c5:e3:e2:b2:
ee:3c:56:be:a9:b5:ad:b9:d2:47:65:3f:9e:de:b5:
f2:52:3a:4f:37:c9:3a:5d:f2:4e:83:6d:2e:06:32:
cf:9a:1a:66:b8:aa:33:bc:b2:11:28:db:42:c7:db:
1b:44:fa:d3:b8:d0:98:3b:1e:f2:63:7a:79:00:59:
10:20:0b:b2:18:2a:14:5a:3a:84:e6:8e:46:96:df:
be:6a:68:0c:d5:35:be:f1:e8:e2:f2:ae:c2:15:79:
8e:f9:15:93:45:f5:f7:40:dc:1f:d7:1a:40:2c:b5:
8f:a5:07:11:2d:6a:99:55:d9:12:40:e0:11:03:5f:
5a:b1:1f:b1:19:98:3d:88:1f:9c:5d:17:3d:8b:87:
fb:c1:e0:ed:26:ae:cf:0b:62:6b:fd:72:a2:97:ca:
9d:35:03:d3:e2:75:2f:c2:43:ba:39:a0:37:d9:7b:
5b:e1:9a:6c:b3:8c:ad:60:68:aa:51:3c:81:af:4b:
57:4f:77:05:42:6e:4e:24:25:70:e2:3b:0b:8b:15:
c9:7d:9d:f1:b5:ff:0b:6b:ad:9c:e6:e8:22:d9:3c:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:32:03:87:54:8C:24:5F:F6:1B:F3:E3:85:08:37:E6:8A:64:60
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:9c:10:57:a2:3b:d1:0c:80:02:ac:7e:89:9b:a5:5d:b1:
c8:3c:b7:b7:7d:7c:49:c9:eb:78:61:bf:e1:78:ff:81:f5:2b:
19:50:df:e0:65:49:a9:84:46:8d:66:45:33:16:44:45:04:ec:
13:06:0c:1f:f5:65:4b:91:f3:b1:28:8f:53:a2:a0:1d:59:91:
f2:9c:b1:c1:9c:a2:d2:fc:a4:7d:54:5b:cc:5d:33:6e:e3:67:
62:fc:7f:5b:43:e1:d7:97:c6:f5:41:06:bf:cf:c1:5e:63:e1:
e4:0d:56:26:a3:e9:37:2e:d3:0e:87:91:c5:2c:c0:fc:76:c9:
8a:21:7c:b1:dd:27:8a:3b:79:e7:d8:43:4f:00:0a:2d:2d:2c:
3c:f1:2c:fd:94:e2:19:22:5c:eb:ed:f4:c3:df:86:c7:c7:5d:
ef:0c:18:17:07:0c:94:1c:ee:d1:fd:92:d5:27:70:e3:20:fd:
20:5c:e3:c6:5f:8b:03:1e:3f:b4:a2:8f:75:77:c3:0b:5d:52:
63:45:b2:7b:b7:18:4a:a5:1b:7f:38:6a:72:59:f5:24:6a:21:
ca:f9:31:26:18:87:4e:3b:3f:73:38:ba:79:00:0d:30:13:0e:
11:a7:e3:f5:9d:c0:92:da:fa:6c:77:b6:4e:b4:ca:f7:c3:25:
a5:93:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:22:10 2026 by rpki-client