Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: o6UuRHjZNTTwtkuaRVKnDQa1BZN3GKjAfYZip2TTFRM=
Subject key identifier: 5A:EC:32:04:92:42:77:0A:41:2D:6C:A0:4D:54:E8:AB:D2:23:4F:6D
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019F9437346721BEEEBACCEF7AA2BA9B8000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0E5F
Signing time: Fri 24 Jul 2026 13:01:13 +0000
Manifest this update: Fri 24 Jul 2026 13:01:13 +0000
Manifest next update: Sat 25 Jul 2026 13:01:13 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: DzRrzezwu0tQH5i2Fd1toGdGccxuZILlsow14sKm0ak=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:34:67:21:be:ee:ba:cc:ef:7a:a2:ba:9b:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Jul 24 13:01:13 2026 GMT
Not After : Jul 25 13:01:13 2026 GMT
Subject: CN=5aec32049242770a412d6ca04d54e8abd2234f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:49:66:2d:8d:2b:ce:3e:b8:ce:39:fb:fa:
f3:3c:be:c3:0b:80:57:3c:86:80:92:40:d3:d1:a8:
5e:24:84:85:1b:8a:57:95:e3:a9:c2:10:e3:86:37:
0a:a6:c6:fb:44:a1:66:f8:e2:48:63:c0:aa:ad:fe:
55:0e:9b:0c:b0:58:2b:1f:1f:33:5a:bb:b6:ec:1f:
b0:4e:6a:05:48:97:fd:b6:3c:a4:5a:f8:8b:a8:c9:
8d:ce:2e:e8:23:c7:b0:56:ba:fe:53:ba:82:10:8a:
2d:af:c6:f0:1c:d3:22:dd:d6:4d:4f:2e:61:7e:68:
3c:5b:36:b0:a9:ba:21:cc:a9:b9:c5:57:c2:1b:54:
19:a9:0d:73:d2:f5:e4:da:99:94:79:6e:09:80:ae:
27:c7:ab:a9:e1:31:46:14:1b:41:09:ff:25:b7:ee:
f4:96:fa:5d:75:f3:00:57:a3:ad:33:9e:ea:3a:6c:
ec:dd:94:be:bc:1c:c1:42:31:35:9c:b2:7a:64:4f:
ff:26:60:94:ab:59:39:c7:0c:12:17:ae:ee:ea:c2:
94:e1:c9:f5:f5:98:24:53:4c:f0:9e:5c:5c:42:1f:
86:43:3a:f0:7c:e6:70:44:ea:3a:0f:96:b4:cf:4b:
4a:a6:f7:d1:89:fb:a4:aa:88:64:e2:a7:bc:0c:17:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:32:04:92:42:77:0A:41:2D:6C:A0:4D:54:E8:AB:D2:23:4F:6D
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:86:c9:45:15:7d:52:96:75:77:b5:28:9d:50:72:b6:9f:9c:
b2:d0:d1:63:96:a7:0b:d5:80:e9:a9:7a:1c:23:95:d3:ab:06:
d0:44:32:2c:41:04:19:19:22:e3:14:6b:be:a0:9c:c4:a2:a6:
14:3c:2b:54:af:35:44:34:d8:75:2b:d4:41:ba:22:25:d4:89:
7a:7d:e8:10:6f:99:e2:4e:24:c4:44:7c:66:82:46:56:d0:45:
08:b7:a6:bc:de:01:0a:ab:2b:3e:0c:7c:e9:43:9f:08:e9:c8:
68:d0:a9:5d:09:72:18:9a:c6:ed:19:97:6c:0f:d9:10:e7:ab:
79:18:cc:cf:5f:93:9d:f9:94:9a:d9:bd:7d:39:53:5e:45:68:
dd:7d:e0:05:ee:d9:94:8e:a4:5c:68:78:77:2c:c7:9b:2b:30:
ba:0c:e2:1d:49:d7:60:0d:2a:79:c4:e9:78:81:a3:f8:b4:e4:
9b:d9:ac:75:57:85:da:2c:92:18:3b:78:33:76:10:96:b6:07:
cd:38:2c:f3:24:57:9e:74:0b:71:21:aa:06:18:1c:02:09:61:
9f:2e:f5:c9:b0:74:28:1b:4d:42:39:9e:ec:90:2c:38:c6:86:
ae:22:5d:29:92:fe:b5:cd:56:c1:bf:cd:e7:c6:51:b9:57:6a:
09:be:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:43 2026 by rpki-client