Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: fX3U1M2U1teH+zeISvyhOMxgurwLz27lLjnXiVus7qA=
Subject key identifier: 46:A9:53:D1:ED:89:2D:5A:75:38:34:6D:0C:CE:C2:12:0D:9D:A9:4A
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019F91DAAFB4ADE95AE28A865C4B8A8D17DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 08BE
Signing time: Fri 24 Jul 2026 02:00:55 +0000
Manifest this update: Fri 24 Jul 2026 02:00:55 +0000
Manifest next update: Sat 25 Jul 2026 02:00:55 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: /HVB1o+ae15ucBzeGQ9XUGh+wHEBf0fsZNwcTq0EN8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:af:b4:ad:e9:5a:e2:8a:86:5c:4b:8a:8d:17:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jul 24 02:00:55 2026 GMT
Not After : Jul 25 02:00:55 2026 GMT
Subject: CN=46a953d1ed892d5a7538346d0ccec2120d9da94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:07:f1:ed:3a:93:40:9e:a1:12:30:cb:ff:
d7:e2:ce:61:1b:69:80:7b:c2:f0:5a:c1:b2:0d:69:
6b:45:69:bc:b8:25:08:03:be:08:a1:ab:e7:12:c4:
d7:0f:2d:77:28:7e:55:0a:d3:63:05:d2:ed:df:dd:
0f:1d:34:e2:1d:37:e0:05:8b:93:00:1b:30:9c:76:
93:2b:93:89:07:68:01:fa:92:4f:03:45:6a:e0:cc:
87:83:18:a1:8c:5f:53:c2:bb:fb:04:8e:1c:5a:18:
19:da:76:a5:7f:e4:b6:80:31:bd:f6:16:b7:be:a8:
f2:6b:3e:ac:15:df:83:9f:78:f8:77:10:dd:93:09:
cd:9b:73:17:f5:6f:55:e5:f1:5b:9a:ca:fb:18:9b:
0f:c5:1a:26:47:00:f6:3b:ed:73:a5:22:17:f6:df:
db:7a:42:8e:f6:9e:51:d7:55:95:20:da:a1:ea:dd:
fd:a5:7d:9f:37:68:0a:b1:a4:b6:eb:f9:56:74:a5:
ea:bd:76:04:18:68:05:d8:9e:8c:16:63:65:c6:ac:
73:35:61:41:d1:35:d4:37:b9:58:6f:cb:0d:29:83:
07:c3:30:67:d5:ba:82:7f:2f:6a:fc:0c:09:6c:16:
ba:54:a4:53:f5:88:ce:78:6e:3e:f8:a4:44:26:07:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:53:D1:ED:89:2D:5A:75:38:34:6D:0C:CE:C2:12:0D:9D:A9:4A
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2f:33:2f:bf:bb:4e:40:c4:dc:ae:bf:7f:1f:38:28:cc:0a:
6e:9a:3d:4d:5f:f3:97:fa:1d:d9:20:62:c9:96:bc:83:ab:97:
59:b6:e8:38:ae:60:39:70:17:ac:03:69:8d:92:60:7b:84:26:
f8:8f:bd:f5:d2:da:49:90:13:05:5e:f6:6b:ce:e2:96:7c:90:
f6:65:f2:bd:e9:6e:5f:c8:17:2f:24:dc:2c:3d:62:4b:69:3e:
7d:67:46:5e:a1:37:8d:6c:58:50:e1:55:8d:6e:c9:e0:eb:c2:
70:45:71:eb:4c:1e:8c:48:86:f8:ae:b4:fb:29:a9:44:00:88:
01:15:35:e0:2b:ea:c1:f1:20:bc:22:9f:fb:84:48:50:18:9e:
1b:a2:17:f1:c8:e6:35:82:35:7f:1f:14:2e:53:dd:db:fd:64:
33:3b:a4:bc:99:9d:ac:99:68:71:aa:67:f2:43:fa:c5:78:0a:
e8:71:23:46:17:5e:62:96:3b:7f:4f:96:dc:af:9e:46:a9:95:
cc:74:50:f2:a6:50:5f:11:51:70:68:ae:f5:ca:c1:1f:5c:11:
6d:dc:ee:32:16:9f:6d:d1:ca:49:20:8e:51:c5:43:50:64:03:
c3:b0:81:e8:bb:4d:5e:6b:b1:b9:a0:e1:ea:8b:f7:8d:69:c3:
ce:08:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:20 2026 by rpki-client