Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File: laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier: CH508PHxD2rYdG4djpyH9p/TqR8cot02KLSm/iW6qXM=
Subject key identifier: E9:8E:AD:77:50:DF:F3:CE:13:77:98:8E:27:75:17:D4:EF:A1:0E:CC
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019F8FEBFCF62E76D1DCB2A0895578C77E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number: 01E7
Signing time: Thu 23 Jul 2026 17:00:35 +0000
Manifest this update: Thu 23 Jul 2026 17:00:35 +0000
Manifest next update: Fri 24 Jul 2026 17:00:35 +0000
Files and hashes: 1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: Qk/YqewEbrXuoToQjcw7A6IfgpwiqVkWtKX0hQl8xmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:fc:f6:2e:76:d1:dc:b2:a0:89:55:78:c7:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Jul 23 17:00:35 2026 GMT
Not After : Jul 24 17:00:35 2026 GMT
Subject: CN=e98ead7750dff3ce1377988e277517d4efa10ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:06:5b:ba:32:77:d2:58:b1:76:4a:2f:41:
85:e0:5b:69:37:78:8f:e0:ca:24:ee:71:22:1d:fa:
f8:19:ba:d0:76:10:77:22:b2:3f:f3:cf:51:da:31:
74:ab:68:1a:a0:8a:4e:a6:ef:d9:08:88:5c:99:21:
50:b9:34:60:f8:d4:3d:86:b7:e6:eb:31:52:3f:7b:
6c:8b:9f:57:83:d2:45:8f:65:18:a0:d6:d6:5f:d9:
7b:05:2b:c6:b0:ed:6e:b4:ca:9f:bf:bb:79:29:28:
d0:a3:d9:fc:33:e7:8c:0d:44:78:7e:f2:c9:b6:9e:
8a:23:1c:c7:ff:08:5f:46:fa:0f:f1:9e:3f:81:4a:
df:08:b8:b6:ba:d3:a3:a8:21:9e:4d:71:3a:c7:f7:
28:0e:3b:d6:31:12:53:96:03:ae:6e:4b:f9:c2:25:
18:8b:3f:92:9a:4d:68:fb:2e:72:1e:9e:8f:7b:f8:
4c:c7:9f:52:cd:cc:7b:bb:39:29:81:ba:05:b1:f7:
f5:7d:36:8d:3f:bf:96:5f:95:ca:5a:63:5c:20:92:
e5:61:4a:5c:e3:80:3c:ff:7e:2b:4f:64:a9:94:35:
bc:87:e3:f6:f3:9c:fe:98:5b:f8:8a:0f:d8:22:39:
18:9f:2c:6b:33:ab:12:73:59:38:a0:a9:9d:26:e4:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:AD:77:50:DF:F3:CE:13:77:98:8E:27:75:17:D4:EF:A1:0E:CC
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:56:41:24:b5:a4:1f:40:4f:34:ea:6d:4f:89:62:0e:8f:
9f:ba:1e:36:8c:4a:5e:e1:9e:0c:31:ff:56:ed:8a:00:9f:4f:
bd:4b:24:1a:fd:c8:fc:27:8d:e9:a0:0d:9b:f1:52:ba:c2:a9:
e0:26:a6:2e:a6:4c:fb:18:f9:c7:be:67:89:58:05:8e:99:30:
ce:69:bb:a3:15:f4:9f:b4:53:37:f6:5d:5a:45:87:89:3b:f4:
2e:e9:34:a8:3d:35:56:9d:6f:b9:b9:87:1a:79:b9:b4:55:ed:
31:13:6e:d7:13:a3:23:05:46:52:34:03:48:cd:e7:db:60:29:
3b:58:59:2b:b9:7c:f9:65:22:12:cb:e6:da:7f:ad:69:46:7d:
98:71:bb:82:b7:cb:4d:76:67:19:7b:a7:ed:9f:ac:1c:87:7d:
7d:d6:88:25:7f:9a:34:8e:33:6d:61:66:64:50:4d:b7:b2:1d:
86:c3:b7:75:72:6e:59:5b:5a:68:31:ed:ab:14:00:6f:a2:40:
d8:aa:33:d9:a9:fe:9a:84:01:43:29:89:ba:33:95:13:16:d8:
95:6e:e6:22:f3:5f:54:ad:29:ba:b3:9b:9b:26:7d:81:d1:3e:
0c:e7:92:6f:4f:e0:46:3e:7e:91:9c:95:41:ea:c5:2b:20:2a:
dc:ee:33:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6/z2LnbR3LKgiVV4x36RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTJiNmE2ZjM4N2JlYTZlOGJkMmU5NTJhMjM2OTA5Mzky
YjA3MTMwHhcNMjYwNzIzMTcwMDM1WhcNMjYwNzI0MTcwMDM1WjAzMTEwLwYDVQQD
EyhlOThlYWQ3NzUwZGZmM2NlMTM3Nzk4OGUyNzc1MTdkNGVmYTEwZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw0GW7oyd9JYsXZKL0GF4FtpN3iP
4Mok7nEiHfr4GbrQdhB3IrI/889R2jF0q2gaoIpOpu/ZCIhcmSFQuTRg+NQ9hrfm
6zFSP3tsi59Xg9JFj2UYoNbWX9l7BSvGsO1utMqfv7t5KSjQo9n8M+eMDUR4fvLJ
tp6KIxzH/whfRvoP8Z4/gUrfCLi2utOjqCGeTXE6x/coDjvWMRJTlgOubkv5wiUY
iz+Smk1o+y5yHp6Pe/hMx59Szcx7uzkpgboFsff1fTaNP7+WX5XKWmNcIJLlYUpc
44A8/34rT2SplDW8h+P285z+mFv4ig/YIjkYnyxrM6sSc1k4oKmdJuS3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmOrXdQ3/POE3eYjid1F9TvoQ7MMB8GA1UdIwQY
MBaAFJWitqbzh76m6L0ulSojaQk5KwcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85Mjk5ZmMtYjY2OC00ZjdlLWJmMGQt
NWFhOWE0OWQzYjllLzEvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85Mjk5ZmMtYjY2OC00ZjdlLWJmMGQtNWFhOWE0OWQzYjll
LzEvbGFLMnB2T0h2cWJvdlM2VktpTnBDVGtyQnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJFWQSS1
pB9ATzTqbU+JYg6Pn7oeNoxKXuGeDDH/Vu2KAJ9PvUskGv3I/CeN6aANm/FSusKp
4CamLqZM+xj5x75niVgFjpkwzmm7oxX0n7RTN/ZdWkWHiTv0Luk0qD01Vp1vubmH
Gnm5tFXtMRNu1xOjIwVGUjQDSM3n22ApO1hZK7l8+WUiEsvm2n+taUZ9mHG7grfL
TXZnGXun7Z+sHId9fdaIJX+aNI4zbWFmZFBNt7IdhsO3dXJuWVtaaDHtqxQAb6JA
2Koz2an+moQBQymJujOVExbYlW7mIvNfVK0purObmyZ9gdE+DOeSb0/gRj5+kZyV
QerFKyAq3O4zMw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:22 2026 by rpki-client