Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: oBwC4T3FS1Yi21c1O0/C4qShmwBl+BZwoEJcIHc17/M=
Subject key identifier: C9:BF:8E:35:A8:55:5E:89:5B:72:EA:BB:45:3E:C9:B6:13:48:DB:1D
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019F935BA1B9F9CC887B0C22D96ACA1C3C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 09:01:23 +0000
Manifest this update: Fri 24 Jul 2026 09:01:23 +0000
Manifest next update: Sat 25 Jul 2026 09:01:23 +0000
Files and hashes: 1: 3x92TrF8N94ZpyZCm4fts9AHkrI.roa (hash: sNwt0zp1LxcJpyDYVc0cP5yyw+nZAgDz5XkvLtfBLcY=)
2: CvN-OPpHrkoiSwngHGByZ8d5Y50.roa (hash: HUmo1OpTkAigfX6oXWD0/+6iPG83y0OXXAaTcOrXIoE=)
3: JejL0L9MCBQWF6peNve4-RWHF1w.roa (hash: PXp7lUFrDYOjtMqq8880S6RWrXRSNsHPCPxIMrX1zVU=)
4: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: nIK/c9GQ6tYDup5/vAZmW0qeA4297vvWLN4J7ziHAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a1:b9:f9:cc:88:7b:0c:22:d9:6a:ca:1c:3c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Jul 24 09:01:23 2026 GMT
Not After : Jul 25 09:01:23 2026 GMT
Subject: CN=c9bf8e35a8555e895b72eabb453ec9b61348db1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:12:77:cb:f3:9f:fb:c0:ce:75:0c:e4:91:
b3:8b:67:8f:a0:3b:a3:95:8b:a5:e2:e6:ba:a5:4a:
e8:61:9b:43:9b:43:ae:fe:3c:7d:f8:50:5d:ab:5d:
59:ab:76:1d:37:e1:ba:09:49:26:1d:0a:2e:7f:c0:
49:17:33:25:e5:e0:9c:b7:08:23:4f:07:7f:fc:2a:
15:48:66:60:a7:a1:3c:8a:7a:3b:c2:81:28:92:d9:
39:d0:60:ec:a8:a7:7d:76:9f:09:de:3e:84:f8:49:
19:64:c0:a9:36:b5:74:4f:fc:41:57:38:0b:93:d6:
eb:7b:b0:fc:33:e7:d7:09:98:d9:94:55:d6:1c:6e:
5a:b8:73:51:39:64:d5:f3:40:2f:fb:a9:56:06:62:
19:b8:d1:2f:f4:71:b8:f9:70:0f:ce:f0:2e:07:15:
93:e3:f9:7a:5f:95:55:ec:56:7e:10:5e:8c:91:26:
12:43:3d:cc:0c:f6:13:b3:e5:95:63:06:47:2d:8a:
05:fd:37:04:b9:f5:7b:ad:69:3a:30:e1:ef:35:ac:
f3:b9:90:f3:07:ef:02:bb:5b:c6:94:8d:a3:de:d3:
b6:86:1c:65:f0:e7:dd:33:d8:23:be:33:6e:4d:6d:
14:68:1e:48:a2:cb:fc:14:09:c4:b9:c8:de:71:22:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:8E:35:A8:55:5E:89:5B:72:EA:BB:45:3E:C9:B6:13:48:DB:1D
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3d:2e:6a:a0:54:ec:ba:4c:5d:ef:56:cb:38:2e:86:e4:71:
8c:1d:d8:36:96:f0:2a:63:02:b5:2c:4e:72:83:ad:2c:5f:c0:
00:1c:dc:4e:43:22:0a:96:0f:6e:4a:ed:ea:71:30:b6:22:82:
c0:b9:14:47:a0:2a:e6:00:ca:4d:8d:12:78:36:96:3b:43:a1:
d8:94:97:ee:4b:1c:6f:a3:e7:13:65:bf:08:9d:16:01:5e:1c:
28:ed:af:4c:25:da:17:8f:d6:3b:8f:bd:1f:66:0f:8a:9d:b3:
75:16:aa:c7:2d:fa:cd:4d:1c:db:ef:a4:db:09:7d:0d:f7:0d:
63:2d:7f:42:6b:c3:32:4f:f8:1c:fb:14:2f:34:eb:ed:9f:36:
30:56:6c:7f:36:aa:5c:d3:a0:a3:01:05:26:ee:ff:85:1b:77:
29:e6:b7:87:32:80:71:12:78:23:80:bc:e7:ac:71:cc:07:b0:
10:37:51:7c:09:f9:89:f8:44:fd:7f:f1:22:da:bc:67:d1:cc:
9b:71:ca:31:b4:3a:69:54:d3:38:29:02:81:45:d3:06:03:fe:
de:c7:26:50:d1:50:93:b2:4f:23:20:61:8d:18:41:b1:d8:7f:
23:03:0c:1c:96:cf:58:db:b8:6f:a6:db:97:dc:4e:76:4c:b7:
fe:6d:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:53 2026 by rpki-client