Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
File: lWCHIpBdg1KkDKpGoGES6mpEYA4.mft (raw, json)
Hash identifier: BAg1cS3f6vS65oi7oJsd2nFmSLJ4b+O/W9gVObGqdpQ=
Subject key identifier: 2E:21:05:AB:18:97:A1:3C:71:93:68:17:D2:79:D4:12:58:0D:8D:FD
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Certificate issuer: /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial: 019F8F7F4CC2AB4FA91DA399F6D301239EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:52 +0000
Manifest this update: Thu 23 Jul 2026 15:01:52 +0000
Manifest next update: Fri 24 Jul 2026 15:01:52 +0000
Files and hashes: 1: 6gfsbp70NcwcNxJT8XMgqV4g908.asa (hash: Di3Vjzbs6+arwrS0sNW5XttvE64t8QV4IW+z0/vEuPw=)
2: 7z7bFp40wPTbt5RvIZtTppWl7AM.roa (hash: lwNSwOHOkunLWIvv4A5ENj1DeD3yKEj+lVowF+Ei8vY=)
3: KDCDR5HMfski0xwt6UzkMSAG708.roa (hash: V7yjpYjttVxBzbdwJHm85I1dbdth+qcfBSlmVeGdWlY=)
4: KH370sNYu21avkL8lpe4CVDI6IQ.roa (hash: DzzaFBH+1mwllU7379SPzlQjcpZBkQqIzj2ch2xa5ec=)
5: OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa (hash: oD26JJOT6DwdR4GxVKpP9CnRulkt+gNmlzlwVyBAeto=)
6: lWCHIpBdg1KkDKpGoGES6mpEYA4.crl (hash: bzF8XlZnyYz5CM8q4xQNljqhjokW9o2ZrJ0+s6d6bbQ=)
7: vcJsXSmebygkiO1u98sDd5yvTS4.roa (hash: E+7qJmCAiPJjSB0MZl/CtlkcxsQXp3zBWufxUli/XlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:4c:c2:ab:4f:a9:1d:a3:99:f6:d3:01:23:9e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
Validity
Not Before: Jul 23 15:01:52 2026 GMT
Not After : Jul 24 15:01:52 2026 GMT
Subject: CN=2e2105ab1897a13c71936817d279d412580d8dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:80:1f:72:15:8b:ed:7d:70:9c:a4:18:ce:
83:2c:8b:72:b0:04:25:2b:4d:f2:05:bb:c3:45:0e:
1d:7b:39:c6:82:28:aa:80:2e:7c:53:44:42:51:d0:
d2:a1:0e:7e:36:fa:39:3e:89:4b:e3:5d:d9:34:34:
c6:4d:ba:f8:aa:d1:2b:da:bb:c2:4c:64:5a:ce:94:
62:23:6e:08:88:2b:ca:c5:b0:7b:47:44:6d:39:43:
90:cf:70:06:74:c9:3b:45:47:4c:fd:62:0b:a6:d2:
1c:c5:8d:e7:40:d5:fd:7a:43:4d:3d:94:fc:0d:e8:
e0:3e:d9:9e:1f:de:fb:d1:b7:bc:e9:ce:fe:bb:f3:
08:54:5e:92:6b:99:7f:c8:ec:9b:65:f4:a4:ed:d2:
88:8f:06:02:1e:c1:3b:79:93:34:83:6b:e6:0c:17:
3a:aa:7e:aa:9d:93:26:2e:56:ff:24:6d:38:a8:e9:
ce:05:43:b0:0e:ef:6a:74:ff:0a:32:74:85:b9:77:
57:c5:09:47:6e:e6:45:e9:69:0d:58:f0:76:2e:7e:
50:2f:ab:8a:ef:7e:6e:96:9a:3e:59:01:bc:19:74:
4c:bb:d7:8f:e1:b5:6b:6a:14:cc:f3:ff:6d:a9:0c:
b1:27:80:2a:df:6a:0b:70:9b:0e:34:9c:74:7a:5b:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:05:AB:18:97:A1:3C:71:93:68:17:D2:79:D4:12:58:0D:8D:FD
X509v3 Authority Key Identifier:
keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0d:db:2f:b7:a8:80:aa:f5:81:f1:ef:38:f6:d3:7d:0d:e3:
aa:27:af:96:5f:aa:f4:d8:69:a0:ae:1b:40:6a:55:d0:f4:eb:
2a:99:5d:df:5a:14:40:45:58:92:0f:f0:90:6a:77:0d:a1:57:
5a:f6:af:ac:54:3b:33:4d:15:c2:19:68:da:c8:80:25:24:08:
da:0e:0d:bb:67:45:76:ae:85:4f:9a:8b:59:e5:73:f5:de:1a:
96:6f:7b:75:73:02:c6:c2:8b:fa:da:a1:7e:50:af:75:15:cf:
36:d7:aa:84:f7:1c:75:a2:e2:7a:16:31:3b:d6:01:fa:3f:ac:
1c:58:c8:a5:2f:9b:95:08:3d:98:ed:55:a8:d3:f8:8f:fe:18:
36:e2:95:24:92:1b:66:67:0d:cb:ee:a5:ec:e8:36:c3:ec:40:
2a:47:4d:0a:e9:a2:f7:d2:ef:4c:ce:68:7f:47:9d:15:18:c1:
49:75:d0:3b:a6:4f:13:0d:30:3b:cb:5e:d6:a7:ca:0b:9c:7c:
c5:d5:02:02:35:f1:9a:f2:aa:68:f2:37:1f:94:83:65:99:74:
bb:06:a7:4c:f2:2e:4f:23:04:47:c7:c3:22:8d:59:e4:a9:b7:
96:d2:56:84:85:1b:60:2d:bc:ef:57:10:e5:48:a1:a3:54:65:
4f:e8:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:55 2026 by rpki-client