Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: mcGOeQ7UIbQbvxzIhgzZbREBfeImj1rryXkYQ/gTWnY=
Subject key identifier: 08:A3:70:39:14:21:7B:A2:6C:BE:2E:B4:C3:52:1C:E1:33:FB:57:3D
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019F943676027A1A6B99E8F73D3523352ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 13:00:24 +0000
Manifest this update: Fri 24 Jul 2026 13:00:24 +0000
Manifest next update: Sat 25 Jul 2026 13:00:24 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: jDCgn+irUC12AHsUbwR8PVTHFoB9p+MAXPsTDnhBY2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:76:02:7a:1a:6b:99:e8:f7:3d:35:23:35:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jul 24 13:00:24 2026 GMT
Not After : Jul 25 13:00:24 2026 GMT
Subject: CN=08a3703914217ba26cbe2eb4c3521ce133fb573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:e1:d9:e3:a8:69:89:d2:3a:f4:64:2f:4d:
d6:36:db:46:fa:b1:28:d8:b4:db:0a:52:b2:46:66:
67:b5:b6:cf:64:8a:66:41:f0:ef:da:4e:cc:04:e1:
8f:cf:85:ec:62:2f:eb:60:5b:2d:20:45:d6:4b:ad:
78:be:04:da:08:d6:c3:49:e9:e3:ee:fc:c5:4b:c2:
5a:5f:09:6a:e8:09:92:dc:7f:db:9d:b7:60:b2:0a:
14:60:60:d7:f9:2c:20:17:dc:09:e8:81:83:a0:6d:
32:4c:e3:76:c1:05:e8:e0:a5:d3:9a:ee:ad:6d:3f:
66:e2:bd:c1:1c:70:97:80:30:70:20:e5:29:31:c8:
d2:d1:8e:2c:5f:ed:0c:7f:05:ec:8e:61:46:4e:13:
47:18:5b:37:a5:c3:b8:3d:8c:e5:23:01:b8:3a:0c:
29:d8:a8:98:6a:e4:bb:cc:72:c3:63:e1:1c:16:54:
b6:6b:23:eb:97:85:1a:fc:f6:68:cb:20:ac:ac:76:
56:cf:df:22:e5:bb:82:9e:32:c6:4b:a4:09:ae:40:
80:3f:e5:2d:fe:dd:17:3a:77:34:5c:0d:10:d8:f2:
35:33:84:de:b9:6d:c2:8b:a6:68:85:b1:de:ef:ff:
7f:7b:b5:70:39:9e:b2:d2:8f:79:be:f6:b5:ed:6c:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:70:39:14:21:7B:A2:6C:BE:2E:B4:C3:52:1C:E1:33:FB:57:3D
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:d5:02:4a:78:0c:87:59:94:3f:95:0f:7b:9a:a0:d8:b2:
f1:49:53:6e:e1:a7:94:79:4e:50:82:1f:c7:c7:00:1e:f6:1b:
33:83:4c:d6:b9:24:9d:b7:46:5e:1d:ca:d1:ad:13:91:73:b4:
55:8a:71:f1:c6:b9:36:13:db:3f:31:5f:66:62:4c:d1:e0:26:
89:5f:18:04:03:56:db:fa:69:74:61:b1:68:7f:0a:52:2f:2a:
cc:28:68:73:a4:58:fe:4e:8d:e8:55:ed:67:36:cf:fa:84:e7:
46:73:08:f5:00:bd:86:49:12:29:b2:72:20:0a:2b:1c:e8:02:
0f:9f:44:5a:71:18:7f:95:ec:87:7f:ab:c1:48:5b:63:d0:c2:
cb:6a:e8:4e:9c:87:99:57:76:f7:d6:a8:b6:51:3a:7a:90:f0:
82:9f:35:d8:b7:92:a5:a7:e4:47:7a:40:d9:ae:44:9f:6f:b1:
de:67:0b:3a:40:30:8e:9f:4a:78:df:3b:3e:35:f7:c5:41:c4:
38:cb:a7:e4:98:eb:68:9b:24:02:a8:e7:68:06:38:9d:14:8e:
f3:c5:b2:c7:09:be:31:80:f3:f9:a7:0e:38:0d:4f:1e:1e:78:
30:4e:9d:af:b8:c2:11:dc:06:e4:be:e0:42:b1:b7:51:83:06:
8d:24:02:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNnYCehprmej3PTUjNSrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx
NWE0ZWIwHhcNMjYwNzI0MTMwMDI0WhcNMjYwNzI1MTMwMDI0WjAzMTEwLwYDVQQD
EygwOGEzNzAzOTE0MjE3YmEyNmNiZTJlYjRjMzUyMWNlMTMzZmI1NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9rh2eOoaYnSOvRkL03WNttG+rEo
2LTbClKyRmZntbbPZIpmQfDv2k7MBOGPz4XsYi/rYFstIEXWS614vgTaCNbDSenj
7vzFS8JaXwlq6AmS3H/bnbdgsgoUYGDX+SwgF9wJ6IGDoG0yTON2wQXo4KXTmu6t
bT9m4r3BHHCXgDBwIOUpMcjS0Y4sX+0MfwXsjmFGThNHGFs3pcO4PYzlIwG4Ogwp
2KiYauS7zHLDY+EcFlS2ayPrl4Ua/PZoyyCsrHZWz98i5buCnjLGS6QJrkCAP+Ut
/t0XOnc0XA0Q2PI1M4TeuW3Ci6ZohbHe7/9/e7VwOZ6y0o95vva17WzCBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAijcDkUIXuibL4utMNSHOEz+1c9MB8GA1UdIwQY
MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt
OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx
LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFjVAkp4
DIdZlD+VD3uaoNiy8UlTbuGnlHlOUIIfx8cAHvYbM4NM1rkknbdGXh3K0a0TkXO0
VYpx8ca5NhPbPzFfZmJM0eAmiV8YBANW2/ppdGGxaH8KUi8qzChoc6RY/k6N6FXt
ZzbP+oTnRnMI9QC9hkkSKbJyIAorHOgCD59EWnEYf5Xsh3+rwUhbY9DCy2roTpyH
mVd299aotlE6epDwgp812LeSpafkR3pA2a5En2+x3mcLOkAwjp9KeN87PjX3xUHE
OMun5JjraJskAqjnaAY4nRSO88Wyxwm+MYDz+acOOA1PHh54ME6dr7jCEdwG5L7g
QrG3UYMGjSQC/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:33 2026 by rpki-client