Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: wkmeGXvtfOX0Lc1mIQbMvwmW91FbGSKSn0RlMAGoRMI=
Subject key identifier: B4:51:F6:FD:13:34:4E:6A:15:71:38:37:DB:9F:DB:21:7C:F5:56:12
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019F91A41CA49F0A761409DACAAC4800268B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 05CE
Signing time: Fri 24 Jul 2026 01:01:19 +0000
Manifest this update: Fri 24 Jul 2026 01:01:19 +0000
Manifest next update: Sat 25 Jul 2026 01:01:19 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: NvCc46QlDA0ccd/xV3JxogXSn0br13h6g/LCvT5qKjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1c:a4:9f:0a:76:14:09:da:ca:ac:48:00:26:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jul 24 01:01:19 2026 GMT
Not After : Jul 25 01:01:19 2026 GMT
Subject: CN=b451f6fd13344e6a15713837db9fdb217cf55612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:93:ea:1f:94:17:af:a2:20:42:9b:5e:45:
62:59:0f:df:dd:b2:a6:9f:53:66:5e:6e:23:c7:0c:
d0:36:e7:7e:ea:3e:e7:be:ce:82:1c:93:85:72:4f:
d6:98:8b:3b:34:17:6c:88:8c:45:6e:de:d4:37:f9:
2a:10:6c:44:69:52:6c:27:e2:1e:3e:a9:a2:2f:bf:
1d:f5:76:cd:d2:d2:55:16:2f:9b:dd:fb:cf:cb:99:
e2:b5:71:da:2a:ac:47:61:40:a8:bf:30:fd:58:c7:
96:6f:16:f0:17:1b:9a:9d:94:f9:01:70:0e:38:ec:
d2:f2:93:ea:c4:29:ae:d1:7d:9e:c7:32:5f:48:3b:
40:b3:41:ae:cb:d5:29:43:bf:3c:85:2b:29:29:b6:
0d:78:86:3d:74:10:2d:a8:eb:7f:d8:e0:08:6f:ce:
e0:3f:fa:1a:ad:b0:5e:b8:f0:5a:07:14:12:cb:05:
03:7b:2c:02:3b:d9:25:8d:89:65:c4:23:e1:80:10:
46:0f:b8:69:fe:af:16:7d:7c:8f:6c:35:ef:04:5a:
e0:8d:ab:9c:aa:04:d5:2d:11:cc:61:f0:9d:35:c0:
01:de:d7:1a:6c:b3:b3:b0:7a:f6:5e:6b:ff:30:31:
8d:67:9f:76:8b:e4:b6:29:c7:7f:b9:74:35:ff:0e:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:F6:FD:13:34:4E:6A:15:71:38:37:DB:9F:DB:21:7C:F5:56:12
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:eb:a7:43:67:e2:66:31:24:12:1c:35:92:86:e0:bc:f3:63:
c2:3e:ce:a8:fb:ea:12:44:fb:70:d7:c9:83:d5:04:89:cb:6d:
c9:e5:53:97:00:5b:0f:8e:55:5f:f6:20:35:97:63:29:61:37:
84:15:46:a1:87:ff:18:43:ae:5d:09:aa:06:b2:d6:3a:69:32:
d2:25:33:f5:04:cb:cb:80:8f:e0:7f:25:8f:1e:e8:25:48:4e:
36:02:dd:e0:62:1e:12:e7:3e:29:85:2f:97:83:ba:d2:15:02:
48:23:f8:f7:74:3f:cb:d6:7f:2c:09:6c:25:4a:7a:49:c7:b6:
c9:17:be:b1:82:8a:a2:be:87:c1:79:d5:89:c3:da:09:23:8a:
1a:61:76:17:83:6c:d1:b3:f5:bd:10:ad:77:70:93:eb:7d:c5:
79:dd:95:09:9b:1c:e9:8e:5d:3f:ca:4f:14:48:5c:88:39:5a:
d8:f5:49:65:41:1f:eb:44:8c:c6:07:08:fd:d9:97:7e:2c:ba:
dc:d7:35:c3:cb:08:ed:f4:f6:a9:56:a0:9c:06:68:ed:c0:d0:
ad:ad:67:c2:b2:a9:1f:14:1f:46:16:b6:bb:36:f6:27:a0:1f:
0f:7a:9e:66:48:b1:87:bc:bd:7f:0c:83:9c:81:9a:04:1d:50:
9e:72:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:21 2026 by rpki-client