Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: eXxLT1oUaxPLVtKALQtHypAA4qgigAzf+bKfmCBrtLk=
Subject key identifier: 3D:3F:2D:FF:FE:C4:B7:60:BD:65:2F:BE:7D:BC:A2:8D:53:8C:C9:05
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 01A064FF705D8A4AAC5FE0A2133227458654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 06E5
Signing time: Thu 03 Sep 2026 02:00:57 +0000
Manifest this update: Thu 03 Sep 2026 02:00:57 +0000
Manifest next update: Fri 04 Sep 2026 02:00:57 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: Kb+CZMPm5/wIuSOWSd1PLIcQSvOQlsnfJAANHRTeEvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:ff:70:5d:8a:4a:ac:5f:e0:a2:13:32:27:45:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Sep 3 02:00:57 2026 GMT
Not After : Sep 4 02:00:57 2026 GMT
Subject: CN=3d3f2dfffec4b760bd652fbe7dbca28d538cc905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:30:84:21:46:7a:a2:ef:55:79:85:56:8b:
39:96:10:25:e8:b6:81:b8:c1:3c:0e:d5:ed:f2:e4:
2d:91:10:8b:0f:5a:a1:98:f4:2e:e3:92:87:4f:52:
20:27:a3:d2:e7:05:cc:f8:f3:e2:1d:80:48:4f:91:
7c:02:d8:4d:11:0c:46:5c:71:59:c0:45:8e:4f:8c:
b7:14:dc:78:8d:56:a0:2c:15:63:25:a2:19:ed:bd:
22:17:92:47:85:8a:bd:1e:a6:59:8b:81:a3:19:20:
2b:7d:1d:a3:e1:db:80:db:0e:84:ad:dc:61:90:76:
eb:0a:34:63:55:7c:ba:40:da:63:e8:41:4c:a4:86:
18:77:72:59:82:e8:58:8f:78:ee:e8:23:21:e6:15:
1e:c2:04:71:f5:47:34:a6:97:ad:ad:1d:41:cf:c4:
f2:09:9f:46:c3:96:a3:48:3e:49:61:70:5f:39:11:
c2:de:47:ce:7e:c5:7b:27:ea:1a:ec:45:ab:2a:65:
f9:b3:1a:ba:c4:29:11:00:10:4f:69:97:c3:6e:3a:
c0:7e:59:96:34:2b:52:5b:96:56:5a:3d:d3:3d:d4:
15:05:1e:54:7e:06:b4:f0:e2:d4:62:37:5e:a2:79:
58:22:e7:a0:ef:fb:4c:79:5e:f8:47:2b:fe:5c:8d:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:2D:FF:FE:C4:B7:60:BD:65:2F:BE:7D:BC:A2:8D:53:8C:C9:05
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:be:c6:7b:5e:d7:24:95:82:ce:9b:e1:05:2e:f2:03:97:
8c:b7:8d:65:93:3d:e3:72:03:f9:10:3b:53:8d:0f:bb:7a:fe:
5b:50:af:42:10:47:b8:fb:ed:3a:d6:70:6f:fa:4f:a8:b2:5f:
94:1d:6b:09:b8:0c:c4:ac:eb:36:02:9a:2f:b2:07:03:bf:3c:
7a:5d:72:72:74:66:ba:7b:c1:f0:e2:cc:76:51:fa:dc:6f:cc:
53:fa:a8:87:b2:52:69:73:8c:87:f2:89:4e:1d:22:82:14:f5:
33:7b:a9:28:ec:c1:87:73:f0:37:45:4d:08:4d:5e:41:5d:d5:
00:a5:11:aa:eb:7f:83:44:f4:b6:13:10:a9:11:95:7a:41:cb:
da:c8:cb:2f:55:ee:e6:55:33:5e:8b:03:a8:bd:e7:7a:48:2d:
94:8d:95:5a:05:30:99:0b:59:60:6c:88:d8:fa:17:f9:25:88:
2e:e6:63:1e:6e:fa:c5:05:51:28:ee:f0:6b:0d:11:0a:f5:3d:
bd:f9:40:fb:62:57:4b:e6:3f:e2:1b:28:f2:e8:3f:d0:58:d7:
c4:6f:0a:97:0b:86:58:ed:00:a7:a9:08:b4:ec:c0:70:13:fd:
83:18:3c:04:e9:31:fa:62:b9:b7:05:d5:20:8a:03:31:81:00:
a4:62:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:58:33 2026 by rpki-client