Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: QevDCPgZpySqKNSCGvo0tj5Jjs3mb5hjeQKJnIHI+Fg=
Subject key identifier: DF:FD:3E:52:3F:97:54:D4:19:63:08:4C:84:42:D9:43:B5:4C:AD:72
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019F93FFBD2066BAADD367C1A634D593E651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 12:00:38 +0000
Manifest this update: Fri 24 Jul 2026 12:00:38 +0000
Manifest next update: Sat 25 Jul 2026 12:00:38 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: +cbTN8a7lMr6/clK7Yh8herhqKHAyrcj1t6EvD8lFl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:bd:20:66:ba:ad:d3:67:c1:a6:34:d5:93:e6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jul 24 12:00:38 2026 GMT
Not After : Jul 25 12:00:38 2026 GMT
Subject: CN=dffd3e523f9754d41963084c8442d943b54cad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:af:c8:8a:13:38:09:36:fd:3a:0c:1f:ae:
0d:f7:ca:2b:df:eb:52:77:ab:48:c3:22:58:c4:dd:
f1:73:bf:b0:72:8d:2d:d0:3e:32:d0:43:0d:b7:24:
51:ac:55:4f:f1:bd:37:8f:74:e4:b8:4d:e4:c6:12:
15:d6:5a:82:80:99:68:a5:34:d2:76:b7:be:57:15:
bc:67:f7:ac:f3:21:d7:e7:0a:b9:1a:74:02:93:69:
77:36:d1:8b:87:9f:81:2e:05:4e:3a:53:47:2a:08:
df:07:f4:3a:95:68:25:2c:b5:a8:5b:b2:93:ff:b6:
79:f1:fd:6d:8a:a6:41:40:c9:36:b8:21:1e:ff:6b:
12:8b:10:2b:27:f8:8a:6e:24:ad:02:bc:9b:85:0e:
8b:0f:eb:89:28:be:4b:4f:95:54:bb:6a:c9:24:b8:
da:1a:a4:1f:c9:17:78:63:24:d5:e7:49:3b:86:8b:
c6:21:db:62:98:a2:7a:1a:c9:72:70:2d:d2:53:04:
fe:83:fc:a8:fa:56:38:aa:8b:b1:34:c6:30:3c:12:
47:86:20:c8:96:c4:c4:91:64:c4:c3:58:38:8b:a4:
3b:49:33:55:9e:c1:f5:4f:f3:c9:40:c8:2b:a1:00:
9b:12:fe:e8:45:dc:20:b4:63:af:4d:41:6a:f4:5d:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:3E:52:3F:97:54:D4:19:63:08:4C:84:42:D9:43:B5:4C:AD:72
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:90:f6:a5:38:22:9a:44:fd:c6:5a:70:fb:a0:84:09:fc:d0:
31:a9:f2:96:75:58:fd:1c:b7:15:3b:56:3e:cb:a8:56:78:6c:
1b:c5:4e:a5:ea:34:b1:82:c7:db:d7:8e:5a:1e:49:27:e9:04:
ae:96:8a:73:e3:55:a1:57:e6:34:38:d8:64:51:b1:24:63:ee:
8e:45:d2:d2:67:23:92:54:8a:9c:4b:a1:14:3e:4e:a5:9c:eb:
d0:40:2d:a3:87:cc:45:ec:70:30:a0:c0:76:95:ba:0d:51:23:
35:bc:84:44:8f:72:ec:65:a3:7a:39:8e:9f:62:c4:26:3e:89:
34:78:b8:3b:b8:23:d5:d7:53:a7:4b:c9:c9:46:6c:8a:0a:41:
74:21:59:90:6b:bb:48:3a:51:17:90:4d:29:bf:4a:37:42:a6:
b9:da:24:fa:a7:4c:c2:e1:ff:be:ed:f1:c8:46:da:59:9a:78:
2f:1e:dd:8a:05:d5:62:40:e3:61:a2:31:7b:96:dc:41:9f:89:
50:c4:a4:c7:9f:7f:ee:eb:1f:3e:71:06:f6:0c:d2:17:56:ab:
90:87:62:a3:f3:4f:b9:a9:c2:69:78:9c:42:27:3c:8e:54:62:
c7:6d:a3:df:f8:e3:0e:8c:c8:f1:11:e0:e4:c5:51:9a:78:9e:
43:d0:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:05 2026 by rpki-client