Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: 6xvfAfkMGMwPwlAxCuFEdkGeIB2kJh+7XmTv7NRTcT8=
Subject key identifier: D0:95:73:81:20:FA:1E:68:97:0C:B7:7F:D2:AF:03:97:B2:9E:CB:80
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019F8F10ED618F2661830B8631978BD047CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 0639
Signing time: Thu 23 Jul 2026 13:01:18 +0000
Manifest this update: Thu 23 Jul 2026 13:01:18 +0000
Manifest next update: Fri 24 Jul 2026 13:01:18 +0000
Files and hashes: 1: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: c//rweip78coqstWCIKYdxqHRrwE0rDtEJMaG5N3oy0=)
2: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (hash: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=)
3: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
4: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
5: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (hash: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:ed:61:8f:26:61:83:0b:86:31:97:8b:d0:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jul 23 13:01:18 2026 GMT
Not After : Jul 24 13:01:18 2026 GMT
Subject: CN=d095738120fa1e68970cb77fd2af0397b29ecb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:43:c1:bc:4f:f9:8a:31:fd:39:20:c3:bb:
6c:d3:48:3b:be:e2:fb:96:66:69:97:8e:f8:c0:44:
74:41:be:62:71:33:62:d5:b4:af:2c:b1:78:07:42:
10:69:d6:39:d7:3d:52:2a:b5:f7:e3:0a:b6:bf:31:
13:97:cb:1a:5f:26:42:11:50:22:28:94:42:22:bb:
b0:58:94:ad:4c:28:a9:30:6b:d4:01:50:af:4c:92:
ba:47:e7:c0:f4:6f:d9:32:3e:8e:e2:90:ba:4d:97:
2b:4b:52:4b:47:bb:5a:58:84:7a:2e:e7:e3:3d:49:
8c:03:ed:57:0d:00:40:6a:c7:d9:4b:d5:16:0e:70:
05:d1:c6:ec:a8:7e:43:c3:90:4b:35:9a:b9:1a:7f:
48:54:76:90:dc:03:4c:1b:f3:75:3c:3a:02:25:5e:
85:e4:66:84:60:76:1a:78:d7:05:a3:be:18:cb:12:
45:50:cd:be:a4:8b:0b:d7:a3:01:7f:49:98:2b:15:
5e:da:a3:88:91:19:fc:a7:b5:14:c9:7b:e0:21:70:
95:e0:3a:14:f1:a4:68:6f:9a:85:23:60:d2:94:a1:
8d:40:9e:ab:53:f8:74:be:74:4c:84:a0:4c:3c:8e:
e1:eb:83:7a:be:74:2e:67:49:78:fd:01:61:91:c1:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:73:81:20:FA:1E:68:97:0C:B7:7F:D2:AF:03:97:B2:9E:CB:80
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:22:f6:95:66:5b:8e:e7:75:9c:c8:10:b6:c4:5a:1e:41:cf:
cf:25:10:34:87:13:b4:53:7d:c7:b0:12:b4:16:8a:0e:29:4f:
29:b8:60:52:dd:58:31:a6:64:1f:86:f7:8f:a5:d3:e8:22:ba:
b7:5f:5c:5a:87:7a:02:c8:45:ec:2a:0d:22:e7:1e:5f:a6:f7:
f5:cf:61:3e:54:56:20:cf:e2:ee:56:b7:93:69:7b:ac:8e:c3:
dc:36:2d:ad:29:8d:d1:c1:ce:a3:ba:3b:54:26:57:fc:12:f9:
11:c0:ff:e3:da:de:b8:f5:95:4a:94:bc:ce:e5:9e:c0:a6:5b:
49:f1:bb:95:34:f8:f6:4d:d6:a1:41:df:02:35:66:6d:cf:31:
55:16:a0:4a:02:0f:21:57:89:1c:d3:ab:ac:3e:16:69:74:44:
53:5a:c7:19:c7:38:f3:e3:50:e5:1f:4b:e8:05:af:1b:07:5c:
13:ca:bd:5e:6f:63:7e:b6:13:df:55:6a:bd:cd:12:a1:f2:0a:
e0:8a:91:ab:dc:3e:27:a0:96:77:5e:a6:9f:9e:82:8a:23:01:
d6:f7:f2:42:73:c0:7a:ed:ed:1c:6f:01:a2:1e:a0:f5:59:eb:
d4:15:c1:ce:6b:a3:39:2f:b9:8b:22:2e:89:50:d7:e7:99:3e:
7b:3d:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:31 2026 by rpki-client