Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
File: ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft (raw, json)
Hash identifier: dzrRkZR4abwKI2sG9dZHz9uKjbSxeVoWkCgvQFMCfpo=
Subject key identifier: DE:C1:1C:D7:52:3A:52:95:BC:62:CB:57:6C:44:FD:A7:C9:09:34:A4
Authority key identifier: 96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
Certificate issuer: /CN=96ce931f852f4046ff8db482b39450219f8b383a
Certificate serial: 019E1BD89941F4BBBD64B65BD2FE1A9CF72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
Manifest number: 20
Signing time: Tue 12 May 2026 11:00:40 +0000
Manifest this update: Tue 12 May 2026 11:00:40 +0000
Manifest next update: Wed 13 May 2026 11:00:40 +0000
Files and hashes: 1: 2rO9mH3OXryLXQ1fKrL6Nz5IHqU.roa (hash: pjcgHLDWo1fInBoA6L65uzzfcpINA+52BV8ltO/eZJE=)
2: OMAfxlKlArt8nhDTTD6Xvr--tCg.roa (hash: qjVFBgoWq2ZsGj3ZMQWgpCZMEuEApEEAzRA1asj0/Ns=)
3: ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl (hash: uzO8FZQxpKbHuK8PU6b/WWRmW1eacaIwTTSF3u8z0ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:99:41:f4:bb:bd:64:b6:5b:d2:fe:1a:9c:f7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ce931f852f4046ff8db482b39450219f8b383a
Validity
Not Before: May 12 11:00:40 2026 GMT
Not After : May 13 11:00:40 2026 GMT
Subject: CN=dec11cd7523a5295bc62cb576c44fda7c90934a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:24:21:87:54:c1:bd:cc:68:c1:a9:90:9d:
db:16:68:ce:8d:a2:8f:ab:94:18:3d:a8:ab:e8:14:
55:29:f8:2d:c9:3d:8e:c5:88:cc:a6:24:ee:32:9e:
1e:ba:ae:b0:6e:97:95:ae:a9:6a:8f:92:e3:95:29:
cd:90:14:46:31:37:94:a9:c4:d3:1c:00:ff:8c:e8:
84:1d:59:71:43:82:ae:4c:a5:e1:92:15:a4:c0:11:
18:74:07:e8:4b:23:a2:82:57:6f:f1:cd:c0:3f:79:
7b:bd:fb:c9:13:26:87:44:23:13:b7:a8:ee:24:b7:
94:37:d7:6d:52:29:2a:b1:00:af:32:47:f6:b5:c5:
37:6f:92:e8:79:d9:6a:c5:e7:ee:97:1a:b1:d4:ea:
bd:50:99:eb:e3:58:be:17:6b:8e:ff:08:e0:df:c0:
7d:4b:81:3c:c7:82:52:0c:81:54:5c:56:81:93:cf:
83:80:ce:84:53:fe:73:de:4e:72:c3:55:bc:61:b6:
82:39:9b:7d:bd:2b:4c:da:6a:a3:c9:69:4f:01:cf:
88:e8:11:5a:f2:44:11:7d:30:7c:20:78:06:bc:05:
9f:88:20:92:c7:01:46:2f:05:42:69:bf:90:34:6b:
50:36:04:ca:ff:e8:c0:6b:61:b1:f4:17:ce:8d:e6:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:1C:D7:52:3A:52:95:BC:62:CB:57:6C:44:FD:A7:C9:09:34:A4
X509v3 Authority Key Identifier:
keyid:96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:53:ef:ee:0f:8c:4e:76:42:d0:42:4d:3c:29:38:ff:6c:
0f:f2:88:af:46:18:f3:84:12:f1:ad:13:b7:92:3d:ce:35:ca:
a9:f0:d7:89:30:0f:de:37:8d:3f:68:9a:01:9e:29:95:02:42:
21:1e:ca:a6:1e:eb:b8:29:86:27:e4:80:b4:c6:b6:2d:43:6d:
5d:71:af:67:11:e1:ed:2e:dd:6a:87:15:9e:71:b6:bc:46:f0:
73:19:c4:22:5d:7c:c7:d5:ed:b2:c6:2c:f0:e4:0e:76:f8:8d:
76:0f:67:b2:58:f0:11:27:a3:87:be:cf:31:7a:38:c8:d2:ed:
04:cb:f5:83:d2:3e:1a:ec:2d:28:9a:cf:b9:25:9e:92:6e:51:
8d:be:f6:63:ae:29:e7:ff:83:5a:41:25:d3:e1:88:2e:15:eb:
1d:62:aa:58:3a:c5:26:cc:3e:6a:13:9c:e9:36:67:40:2b:a8:
bf:43:c3:a0:55:f6:d0:6e:11:cd:1e:cb:5d:82:76:5e:ba:a7:
bd:c6:db:ac:4f:c0:aa:93:bf:7e:e1:b2:86:da:58:0e:cb:89:
fd:e1:3d:af:92:7a:f0:e6:f7:c0:93:67:d0:06:40:74:4b:cb:
b3:d8:88:45:55:d6:be:72:26:cb:03:8a:ee:56:a7:25:ff:3c:
42:f3:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:38:54 2026 by rpki-client