Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: WTKZGxoDqVUNLdWIsoUXCX0CWV12qZ0zblxaaU/4dv0=
Subject key identifier: 03:AC:29:55:A7:25:49:A9:64:B5:20:67:C9:92:21:44:A1:1D:D2:D5
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019F91A37B859965C31D3329917E1A349995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0452
Signing time: Fri 24 Jul 2026 01:00:37 +0000
Manifest this update: Fri 24 Jul 2026 01:00:37 +0000
Manifest next update: Sat 25 Jul 2026 01:00:37 +0000
Files and hashes: 1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: W7DbTAKKg4lmmUSz6u7Q1ZiBn4RtwG4XJQf/6DfVTb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:7b:85:99:65:c3:1d:33:29:91:7e:1a:34:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Jul 24 01:00:37 2026 GMT
Not After : Jul 25 01:00:37 2026 GMT
Subject: CN=03ac2955a72549a964b52067c9922144a11dd2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:b8:2c:7e:c6:dc:9d:d6:4c:72:38:5d:d8:
2d:4b:d0:2d:90:6b:f5:7c:f2:0a:93:79:33:09:cc:
f7:b4:c9:22:78:15:06:ee:ef:d3:c1:86:87:37:be:
be:c7:c4:33:99:51:02:2d:6f:b5:33:4e:91:61:cc:
60:28:1a:7c:b4:d4:ec:eb:d6:46:99:45:b7:76:24:
6e:dc:7f:0c:65:04:55:c9:42:c9:ab:ff:e6:c1:42:
05:20:46:f9:36:de:0e:de:f7:80:9b:f6:0c:27:c2:
f1:e6:db:40:6c:b3:76:fd:5b:c3:81:01:fc:77:25:
01:7e:af:fa:14:15:9c:49:b6:cf:96:7f:84:43:be:
5b:ea:6a:e5:e0:16:b5:f9:9d:94:c7:98:b7:98:80:
86:ba:ae:9b:68:ae:8f:a7:00:2c:f0:59:84:36:36:
d5:10:1c:6d:bd:a6:20:16:d9:8a:5e:28:bc:ad:30:
0a:6b:e0:8f:44:3e:57:aa:43:69:ca:10:85:fa:00:
86:50:97:66:ac:fe:49:9d:e6:08:b7:68:df:52:c2:
05:df:df:53:2b:89:0e:88:93:d9:ec:c6:d5:d0:e0:
02:53:27:fe:d5:b5:96:82:2f:c0:2c:73:9f:36:3c:
21:4c:c5:c1:4e:95:2c:04:30:cb:23:7d:16:5c:f0:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:29:55:A7:25:49:A9:64:B5:20:67:C9:92:21:44:A1:1D:D2:D5
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:9c:b9:29:d1:7a:95:bf:f1:41:f8:0a:6f:ec:41:b9:90:
df:68:f1:70:0e:0b:67:5b:73:2b:8d:a4:f0:8b:8d:fd:8a:2b:
99:05:b4:1b:57:22:34:47:b3:bb:23:8e:9a:05:bf:33:a2:12:
ce:9f:d8:03:e2:e1:3a:4e:d8:a5:00:61:20:04:66:cf:b6:49:
2f:d9:81:31:a8:87:21:4b:c8:60:b6:4d:79:ae:20:13:65:0e:
a3:43:8c:13:9e:3e:85:6f:62:8b:b5:69:a2:c3:9f:23:fb:09:
1c:28:8c:b0:af:22:0e:a6:d1:d4:6d:e4:8d:7e:69:02:8e:1e:
ad:58:3b:8c:c2:cf:d8:fa:21:91:d0:24:6d:a7:01:d0:5c:23:
58:ed:2a:0e:a2:72:2f:91:f9:75:30:d8:9c:e5:9e:cc:f8:76:
8d:45:48:5c:c1:2a:6a:37:39:d0:fe:36:75:48:aa:1f:6c:81:
33:c4:9a:98:36:76:4e:8b:b6:e2:b7:5b:3a:b2:03:17:c8:be:
3a:02:98:6a:15:8c:71:6d:9b:ed:84:41:1e:d2:08:3c:5a:f7:
b1:d4:90:fb:02:6e:c2:8b:2b:a0:8f:c4:f2:d8:0c:95:c1:7a:
59:7b:ed:6d:40:40:62:19:f1:19:fa:13:cb:cb:8f:24:46:83:
48:35:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:32 2026 by rpki-client