Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: muNaH4J8uLQKFX0SVHkBVUcqODffSe6Wb1EQ0RzU/ew=
Subject key identifier: 87:F1:A9:60:91:5C:B5:AA:25:6A:E1:95:0E:38:1E:7B:6F:49:41:0D
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 01A0897A935459A219AD990A54D2BA9C92DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 04:01:46 +0000
Manifest this update: Thu 10 Sep 2026 04:01:46 +0000
Manifest next update: Fri 11 Sep 2026 04:01:46 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: rx45BN0KzcIe+m9sUhUwAA6WH7mO8p/7IkfHaNjz4sw=)
2: weY_2856hTe3pr2rRDSeNZrrwGY.roa (hash: AgQxLvovPKe7WQZGV1eUhCzA8gghQ7NklaBXL9qGr3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:93:54:59:a2:19:ad:99:0a:54:d2:ba:9c:92:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Sep 10 04:01:46 2026 GMT
Not After : Sep 11 04:01:46 2026 GMT
Subject: CN=87f1a960915cb5aa256ae1950e381e7b6f49410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:99:c3:7b:3d:8f:38:8a:dd:10:73:99:5f:
c8:5c:85:1b:f3:9a:87:f4:fa:d5:54:bb:74:4b:21:
8d:49:0e:c2:74:63:6e:1a:eb:9e:2f:24:d7:e2:11:
a8:0e:93:9d:e9:46:76:23:98:b1:0c:e2:dd:66:45:
52:c0:f5:9e:f0:cc:3b:dd:cc:c7:50:c4:ab:1a:91:
35:28:64:0b:0b:b7:c6:6a:7a:25:33:a9:c7:49:54:
58:a8:5d:c4:01:a2:12:11:76:b0:7b:a8:fe:ec:d2:
9b:2b:ff:ab:d2:37:d1:58:20:48:b5:79:c1:2d:f3:
71:66:5b:cd:af:16:bb:72:5b:73:17:3c:f4:bb:9a:
65:84:f1:4d:5f:2a:37:1f:08:34:a0:5f:c6:df:67:
82:5d:15:d6:8a:57:42:04:c1:5f:7e:f3:74:21:6f:
23:af:c5:ad:6d:39:83:25:ef:72:fe:e6:2b:4a:ed:
e0:d1:72:e0:6f:9c:74:83:7c:52:8a:bd:e1:c0:92:
d1:42:a7:d6:ca:7f:e5:a9:ba:75:dd:c3:23:6c:92:
62:ea:85:fe:36:0b:95:47:45:ca:99:08:ac:15:08:
e2:62:fe:ca:0b:1a:df:a4:f2:d9:ec:a0:e8:4e:6c:
15:e6:02:de:c7:02:81:74:40:3f:f0:55:7a:3d:d5:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:A9:60:91:5C:B5:AA:25:6A:E1:95:0E:38:1E:7B:6F:49:41:0D
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:ce:ba:ed:63:78:bf:b3:55:bf:18:bf:ad:b3:0c:20:54:
c2:da:80:39:76:e5:54:50:b5:e9:f0:f4:bd:05:78:d6:1a:81:
33:b6:ba:90:98:df:16:ee:f6:47:fe:42:28:6a:d7:ae:8c:c0:
fd:6b:cb:9d:1c:02:38:98:ad:2c:c7:10:91:f0:cb:75:57:ce:
4b:98:ea:53:5a:74:ee:b2:0e:ae:09:6e:aa:68:77:1b:71:a6:
10:ae:76:0c:65:71:d2:d4:a6:7d:35:39:2b:fa:04:3c:33:0e:
da:50:9d:6b:ac:94:90:16:e9:33:3b:1b:76:e8:30:b9:c4:17:
71:06:c3:e0:e2:49:9f:68:93:6e:ce:c5:63:f0:ac:f2:56:e2:
15:6f:16:5f:b5:f0:d7:4d:63:fc:81:4e:51:ec:36:6e:05:68:
58:80:2d:be:e5:64:8f:1b:be:11:46:98:d2:d9:55:db:52:0a:
f2:44:39:de:fb:33:d1:47:56:d2:9f:81:bd:a7:97:e1:70:75:
82:bf:32:e7:97:5f:61:57:25:b0:ae:53:9b:34:f0:f5:87:0e:
ef:c8:80:71:3a:0a:6a:2f:f4:d4:bb:fb:84:c6:84:c9:58:db:
23:ed:5f:8d:9c:7b:06:0b:64:ab:38:63:e4:cd:43:8c:bf:14:
64:a4:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:40:44 2026 by rpki-client