Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: r2ntc3VI+YLTQ/Wh1+pSqCmbj33/Hz5UI+gkvqNCoJ4=
Subject key identifier: 86:47:95:C9:5B:F5:75:50:3B:F1:A8:00:DA:14:9F:61:2F:12:A5:BA
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 019F95495A58F8CBCF396D58F046F8F5866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0AF8
Signing time: Fri 24 Jul 2026 18:00:39 +0000
Manifest this update: Fri 24 Jul 2026 18:00:39 +0000
Manifest next update: Sat 25 Jul 2026 18:00:39 +0000
Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: JDXgUHYMXhWspyzfA29RWbm5hVk3RZk4rfJrnt/NdzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:5a:58:f8:cb:cf:39:6d:58:f0:46:f8:f5:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Jul 24 18:00:39 2026 GMT
Not After : Jul 25 18:00:39 2026 GMT
Subject: CN=864795c95bf575503bf1a800da149f612f12a5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:59:da:4f:9c:ac:0f:c5:e7:a1:d6:03:ad:
7d:40:95:5b:51:0f:43:7b:3c:4f:9d:78:06:d8:6c:
24:2f:c0:00:0f:01:8a:2b:1d:2b:30:e5:24:75:d2:
02:cc:61:23:39:56:ce:e8:80:1b:d7:a2:a2:af:24:
62:9c:09:fd:46:fd:30:a3:3b:ed:88:a4:7d:ae:f2:
5d:09:3e:b2:db:94:f0:73:37:3b:a9:13:40:8d:e9:
be:5a:6f:e2:31:8e:79:e4:ff:14:7f:db:c2:d4:ee:
53:ea:db:d9:61:6b:70:74:a9:3f:00:cd:79:91:be:
6c:9e:ee:72:4d:68:2b:7e:73:cd:ff:47:ad:88:0f:
47:40:da:fa:54:da:7c:7a:02:1c:ee:e8:26:c1:42:
68:b0:31:da:4f:53:71:de:b2:77:33:a4:ff:b8:3e:
86:67:53:38:b0:ba:87:b6:22:41:e8:39:aa:85:b3:
a7:30:48:d2:1b:c9:5b:27:5d:12:43:d4:7c:dd:1a:
db:4d:49:7c:c3:00:c5:14:84:e2:1c:b0:c5:42:31:
b7:a9:97:bc:ea:8c:c5:61:c0:40:b4:e7:32:dc:24:
3e:37:51:b4:27:dd:0e:ea:b6:04:18:a7:11:ea:ee:
03:35:6c:48:4a:d6:b9:73:62:90:35:80:63:a6:67:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:95:C9:5B:F5:75:50:3B:F1:A8:00:DA:14:9F:61:2F:12:A5:BA
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4e:4f:75:ab:3b:2d:48:c4:b4:6b:ac:a1:f2:5f:fb:a4:11:
ad:bb:20:cb:2b:12:f7:60:3d:44:01:77:77:53:8e:e7:74:ae:
9f:56:bb:c4:a8:c6:bc:50:6d:5b:67:d3:66:16:fa:46:79:c8:
07:50:e9:e6:f4:8c:a3:c3:ac:98:1c:45:0e:3e:e7:30:dd:74:
5f:13:da:75:3b:91:28:9e:ab:53:78:2b:23:d5:30:ed:aa:cb:
14:01:e8:50:1b:58:53:bd:fa:06:c6:a8:2d:57:0d:65:0a:4e:
d3:6b:02:7e:9d:08:fa:96:37:0e:d9:f8:ea:0b:56:f6:31:f3:
b7:8d:95:a1:a1:5e:fc:04:eb:af:fb:7e:ab:36:2e:2c:3f:be:
82:86:6d:15:20:3d:69:88:7c:35:ce:65:fa:cf:40:03:3f:3d:
21:c4:09:0a:b3:ee:ee:3b:05:cf:96:1b:a7:e1:3d:92:8f:83:
ff:71:e3:d6:08:ef:68:12:82:b6:f9:ef:91:e6:38:a4:b8:84:
bf:fa:93:0c:26:cd:02:64:f7:d7:0b:5a:71:07:84:e4:06:d2:
05:73:e4:f3:48:7c:ba:67:7c:e5:bd:5d:f8:a2:84:26:53:38:
ea:af:0b:d7:23:1c:40:c9:84:00:f9:b0:01:46:17:a1:08:b9:
bd:98:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:26 2026 by rpki-client