Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
File: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft (raw, json)
Hash identifier: CtyPIdGDiKF8Hhh3ZMZoCs44KzWRZ9iZgLLkA5M9AXk=
Subject key identifier: CD:56:3A:67:11:6E:A1:C9:85:74:50:34:46:D1:15:7A:89:67:4D:5A
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 01A183AC0CF00A9DA214D7D3AC7D34166CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:00:53 +0000
Manifest this update: Wed 28 Oct 2026 18:00:53 +0000
Manifest next update: Thu 29 Oct 2026 18:00:53 +0000
Files and hashes: 1: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (hash: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=)
2: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl (hash: FR193J+4xWJ4RhUNwdAvVckk4ahZA7pmH3CTus2MJXQ=)
3: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (hash: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:0c:f0:0a:9d:a2:14:d7:d3:ac:7d:34:16:6c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Oct 28 18:00:53 2026 GMT
Not After : Oct 29 18:00:53 2026 GMT
Subject: CN=cd563a67116ea1c98574503446d1157a89674d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:be:36:72:48:71:96:08:75:67:3a:78:31:
6a:28:b8:e7:c6:06:8c:9d:77:21:e3:ef:11:74:ac:
01:35:af:0a:9a:a4:02:c3:a8:dd:45:06:4c:c0:d6:
b3:a1:e3:58:10:b9:7e:09:61:17:68:64:75:b9:ed:
fd:3d:37:77:0f:37:aa:5f:08:05:dc:74:2a:13:1c:
30:d2:43:42:78:ec:b8:56:c9:e7:1b:85:8a:fd:99:
fd:62:a1:b8:89:d0:78:d7:a9:1f:ec:a9:74:46:38:
f8:c7:ba:b9:97:55:69:c2:82:8c:60:35:42:aa:b6:
a3:46:6a:0f:c0:2f:3f:08:88:6e:c0:42:71:97:45:
3e:99:45:ae:d2:ec:eb:4b:21:27:42:63:e9:22:bf:
ea:77:34:df:d6:b6:35:1e:05:20:63:db:be:9a:4b:
c8:f3:43:af:90:8d:0f:5f:7e:4e:1e:ce:cc:c9:ba:
e7:c4:ac:6e:f9:68:ce:f5:3b:b4:f3:b1:f7:ad:ad:
ea:fd:f5:58:c6:2c:20:b2:42:2c:b5:72:11:7e:dc:
86:42:f8:bf:c3:d4:b5:e0:8d:24:bd:0c:13:e8:4c:
8a:89:d0:a8:91:b7:76:2f:f3:ae:7d:91:87:c7:56:
ea:27:76:c5:04:48:f0:c5:0f:d8:f4:65:6e:6d:e0:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:3A:67:11:6E:A1:C9:85:74:50:34:46:D1:15:7A:89:67:4D:5A
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7b:43:28:6e:aa:01:7d:c3:c8:ad:84:40:92:ec:f2:8f:19:
3a:de:5d:2b:ea:a4:a2:96:ba:30:07:27:ef:23:7e:f0:18:18:
d4:38:65:e9:aa:b8:d7:13:9e:2c:7f:26:04:9d:d6:32:03:6f:
63:09:69:c8:51:3d:df:7d:84:87:11:cd:d7:cb:17:65:1f:6a:
38:04:5a:8e:12:96:21:3d:9b:14:06:c1:f5:9f:d3:7e:34:46:
f8:ca:b4:e6:66:77:c4:77:28:f9:62:ce:4d:6e:1f:a7:09:a9:
d3:fa:cd:a1:c8:d1:3f:6d:61:2e:49:80:8c:21:29:69:25:99:
96:12:1f:93:12:73:9c:78:ac:60:83:1a:bf:43:92:a4:ea:b0:
3f:f7:c1:a9:58:05:e2:83:73:aa:89:8f:29:cf:84:88:5f:ba:
e6:df:ad:f0:8f:4f:00:ba:b8:30:2d:74:bc:2f:60:6b:fa:da:
5d:fa:e9:51:3e:e4:6a:3e:b6:36:22:3e:ac:75:03:70:00:e9:
69:61:5b:9b:13:d6:1a:48:9f:5f:da:66:fd:57:7c:11:87:ab:
15:53:d6:98:63:a3:10:fb:04:08:91:a2:b6:c6:db:74:3a:7c:
6b:55:e7:e0:49:b7:46:af:3e:b6:80:5d:af:a1:04:ca:1a:d9:
87:ae:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:51:08 2026 by rpki-client