Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: mbu1cBRJqj+g/ij9sp2ck6T4CEJMDRq41zUSGTtFlvs=
Subject key identifier: 56:66:DE:C3:DF:CB:F6:12:C0:2B:03:28:D8:DF:A9:F6:9C:4A:A3:16
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 019F93921BD134AD4868876DDEE54A5FFD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:00:53 +0000
Manifest this update: Fri 24 Jul 2026 10:00:53 +0000
Manifest next update: Sat 25 Jul 2026 10:00:53 +0000
Files and hashes: 1: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: HopXSLRech8MRQR3Dl/VmD/4VLxlQRsk/KlRP26YUaI=)
2: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (hash: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:1b:d1:34:ad:48:68:87:6d:de:e5:4a:5f:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Jul 24 10:00:53 2026 GMT
Not After : Jul 25 10:00:53 2026 GMT
Subject: CN=5666dec3dfcbf612c02b0328d8dfa9f69c4aa316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:28:8e:6d:78:56:40:a6:fb:3c:59:91:46:
2c:06:a8:fe:73:be:13:00:88:60:23:b6:0f:c9:b6:
6a:a2:a0:e7:ef:13:67:5e:b6:d4:0f:82:fe:09:15:
f6:36:f8:63:69:8b:e4:9f:cb:f8:7a:0b:57:2f:2f:
2e:98:9e:af:8c:b7:a8:f4:3a:d0:43:0c:83:aa:21:
31:ae:ce:23:4b:6b:ea:1d:c5:87:1d:01:e7:1f:6f:
3e:02:60:f3:25:8a:ef:f2:cf:18:5e:58:48:50:a9:
f0:9e:e2:6e:98:ed:d7:d2:ab:df:72:05:e8:6e:18:
bd:75:e5:9b:b3:43:9d:f8:0b:00:b9:e5:d5:f5:4a:
b9:85:e9:3c:28:eb:1d:68:6e:4f:4e:29:56:0b:36:
ea:f4:1d:71:0f:b1:ea:84:41:12:8c:f2:2b:4b:02:
e7:bb:fa:4c:3b:85:1e:f8:79:76:54:e0:af:08:d9:
f6:9a:1e:95:df:bd:9a:50:d3:5b:87:0f:d6:c4:cf:
16:84:a0:b6:30:66:b8:62:25:23:ad:9d:78:70:40:
71:6e:1d:36:32:ca:3d:6a:3d:8a:5d:46:2c:60:b9:
fc:2a:a5:d7:60:ad:a5:8e:dc:5b:35:a5:4a:35:82:
b6:7f:89:30:02:05:cb:fa:dc:e5:6e:50:4d:a6:99:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:66:DE:C3:DF:CB:F6:12:C0:2B:03:28:D8:DF:A9:F6:9C:4A:A3:16
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:37:35:19:d0:58:91:a0:37:45:97:d2:18:53:b1:90:42:23:
6d:34:74:0e:39:1a:38:42:f5:fa:18:ee:4d:2b:47:b7:43:ff:
f4:1a:f0:cd:36:1f:15:21:e2:84:bd:72:97:30:48:b1:6b:87:
c3:d9:54:31:2c:6d:65:10:a2:57:58:da:63:b8:47:7c:c7:55:
5e:f3:62:01:0b:78:b2:e5:ec:18:a4:57:ec:c3:54:55:1c:74:
97:04:cf:81:58:6b:18:ab:cc:a3:bd:46:ad:6d:49:00:a5:bb:
f2:d5:9e:d5:ee:1d:ea:4b:0a:5b:3c:16:25:56:7f:70:6d:11:
be:5a:c0:71:d8:aa:4c:37:ab:3c:0c:2a:8a:03:af:0a:bb:37:
b4:a5:03:ec:80:6a:a7:20:38:a7:9e:4e:00:1b:c3:db:8b:46:
f3:3a:10:9a:4d:c5:77:ef:c7:00:5c:a4:cb:56:e7:1e:5f:cf:
4d:70:7b:1a:56:15:27:85:b2:6b:4c:09:40:eb:eb:95:9d:b1:
55:3b:4b:cc:9a:fb:6f:00:91:1c:31:80:f4:db:2b:5b:63:d5:
05:55:1d:bb:65:a5:93:2f:95:95:a7:e7:18:d9:d8:1a:98:75:
09:9e:49:0d:17:8c:27:5b:fb:b2:2a:52:f5:61:12:37:b3:d4:
94:29:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:35 2026 by rpki-client