Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: dJ6Yn7mjyE2FWnIHGZ3Xe+5oIqQfTvgI4e2tmxc7eOU=
Subject key identifier: 51:43:F2:0E:78:DA:FD:D5:8D:9C:9B:CB:19:D4:54:A8:28:DE:14:D1
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019F91DA9932FEBA2621969DFC69968B865C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0561
Signing time: Fri 24 Jul 2026 02:00:49 +0000
Manifest this update: Fri 24 Jul 2026 02:00:49 +0000
Manifest next update: Sat 25 Jul 2026 02:00:49 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 55r1GplWqwEw/MsUsQ16UCGqHN08Q5rDHePz7ZoSQwU=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:99:32:fe:ba:26:21:96:9d:fc:69:96:8b:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Jul 24 02:00:49 2026 GMT
Not After : Jul 25 02:00:49 2026 GMT
Subject: CN=5143f20e78dafdd58d9c9bcb19d454a828de14d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:12:5c:48:7f:04:4a:a0:64:0a:9a:27:7f:
c1:e5:1a:16:95:f9:7e:97:9a:09:24:46:a8:5d:02:
f1:5a:0a:d1:d9:9f:7b:b8:e1:5c:5d:4e:c8:53:22:
3a:5f:3b:e3:4f:3a:3c:ea:1c:86:d0:8a:02:71:d0:
75:5d:90:8a:af:74:95:45:ca:04:19:49:68:09:43:
6e:3a:d0:d9:2c:00:03:54:43:f8:f8:56:1b:b3:8a:
18:42:e7:5a:85:f2:e1:c3:53:8f:2d:5c:8d:86:ea:
7d:3f:dc:30:1e:d9:a6:95:e5:c1:a1:cb:7f:c8:16:
f8:9c:e7:b1:f7:ae:7c:c0:0d:f6:1f:90:8e:d8:0e:
7d:95:6d:2c:93:af:d1:49:f0:9e:40:71:96:7a:f6:
1c:2c:1f:9c:b2:1d:0a:67:f7:b4:68:53:6a:8f:59:
70:bf:de:16:c0:26:03:02:f8:58:18:f4:5c:2f:42:
ae:2d:7d:ea:99:7e:71:29:cf:df:15:5a:a6:bf:6f:
10:be:71:9a:84:fb:62:69:64:2a:09:00:08:32:f8:
0c:da:48:b7:22:d4:41:27:d2:fc:e8:ff:04:2a:77:
e5:c8:14:5e:35:eb:2d:7f:ee:3c:73:ee:ab:6a:fe:
34:1b:75:55:ca:6a:83:45:67:20:6f:e1:db:19:0e:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:F2:0E:78:DA:FD:D5:8D:9C:9B:CB:19:D4:54:A8:28:DE:14:D1
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7a:47:e0:39:dd:7b:07:44:cd:f8:ba:c2:0a:cd:19:f8:fb:
b6:99:ef:e9:16:79:cd:19:bd:ec:9d:83:fe:10:fb:d8:ae:53:
b6:68:76:d7:be:d2:9b:2a:39:dd:50:7b:0d:b4:b2:a0:ae:fe:
fd:c1:6f:11:cf:a2:44:77:f2:d1:da:03:c4:18:fd:6c:82:58:
68:1f:65:81:bd:15:61:49:51:8f:c9:ff:ee:3e:7b:66:65:54:
03:93:7e:b9:42:e9:4b:50:00:eb:37:65:fe:bd:d5:6e:99:ac:
6a:62:99:67:45:1e:55:fb:7f:43:4e:87:9d:c4:69:7e:d7:ca:
9d:c3:77:5e:de:3a:7e:ab:d2:aa:78:62:a3:f1:ff:f5:8d:8c:
31:c6:fd:41:9e:73:c8:6b:c3:c5:3c:46:fc:38:ea:65:1f:e9:
99:90:58:b1:72:53:ab:7d:25:b9:45:41:2d:3c:80:e7:d2:ff:
ad:c7:a9:33:7a:af:92:73:de:cc:3f:f6:d7:03:f0:c8:f1:9e:
70:f6:30:b5:88:5c:50:4f:5e:a8:70:1c:b8:83:f3:e3:f6:47:
88:a9:9e:b4:ea:dd:c6:99:ab:03:7c:23:5c:93:72:01:7f:86:
d4:03:43:d9:9d:01:4f:4d:19:5f:90:9c:00:74:79:e6:d5:00:
4f:74:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:17 2026 by rpki-client