Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
File: ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft (raw, json)
Hash identifier: 3IDT7ViVfvGvuYW9TNJi+Qj5VS/S8UY00+AOpkGIosc=
Subject key identifier: 12:D7:80:7F:7C:49:A9:D0:EA:0C:ED:EC:15:1A:43:17:92:B8:6F:AA
Authority key identifier: 96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
Certificate issuer: /CN=96ce931f852f4046ff8db482b39450219f8b383a
Certificate serial: 019F927EF908B7F70AEDADE25ED64A987096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
Manifest number: E2
Signing time: Fri 24 Jul 2026 05:00:22 +0000
Manifest this update: Fri 24 Jul 2026 05:00:22 +0000
Manifest next update: Sat 25 Jul 2026 05:00:22 +0000
Files and hashes: 1: 2rO9mH3OXryLXQ1fKrL6Nz5IHqU.roa (hash: pjcgHLDWo1fInBoA6L65uzzfcpINA+52BV8ltO/eZJE=)
2: OMAfxlKlArt8nhDTTD6Xvr--tCg.roa (hash: qjVFBgoWq2ZsGj3ZMQWgpCZMEuEApEEAzRA1asj0/Ns=)
3: ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl (hash: 9Yle7xkXCmFJexRNT2UAlKaxWci8Tt9DCqXKEykZOpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f9:08:b7:f7:0a:ed:ad:e2:5e:d6:4a:98:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ce931f852f4046ff8db482b39450219f8b383a
Validity
Not Before: Jul 24 05:00:22 2026 GMT
Not After : Jul 25 05:00:22 2026 GMT
Subject: CN=12d7807f7c49a9d0ea0cedec151a431792b86faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:51:31:eb:dd:e7:d0:96:44:44:e1:35:5b:
22:3a:60:57:68:4d:4a:c0:d7:f4:5d:39:51:27:76:
eb:ce:90:1c:64:7c:d7:e6:14:8d:33:f5:ae:52:92:
8a:a0:51:67:f5:ff:c2:bc:0e:d6:23:cf:ed:36:e5:
e5:5c:59:33:ed:e2:83:78:c5:16:c4:ac:0f:7e:4e:
bb:c9:37:66:51:ba:ab:c6:ca:db:ce:fb:44:ae:fb:
9c:72:59:14:50:28:8c:16:e8:c2:20:a8:0e:17:a2:
2e:64:c8:a4:f7:0f:c7:ee:26:f8:ce:7b:a0:72:1e:
02:c0:9c:12:1b:92:a7:f8:c2:39:24:c3:72:9e:88:
92:89:ae:cc:1b:2c:dc:40:d9:ff:38:84:10:0f:73:
22:1f:1f:08:ba:70:6f:fd:eb:7f:e4:f4:e4:c2:3a:
42:05:05:04:9f:ea:f3:0d:00:e5:63:ac:41:9c:5d:
22:01:4d:ef:26:d9:b8:a4:9b:76:a6:64:b9:82:ba:
70:d7:63:40:23:ba:ab:0e:90:7a:8c:aa:02:02:2a:
27:dc:e9:78:05:1e:96:17:fc:c2:23:89:eb:8b:57:
96:da:e0:96:d7:57:c5:91:b0:7e:58:b2:8b:32:31:
53:ee:ad:8b:63:0c:60:8f:2b:47:1a:f4:2f:a2:7f:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:80:7F:7C:49:A9:D0:EA:0C:ED:EC:15:1A:43:17:92:B8:6F:AA
X509v3 Authority Key Identifier:
keyid:96:CE:93:1F:85:2F:40:46:FF:8D:B4:82:B3:94:50:21:9F:8B:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ls6TH4UvQEb_jbSCs5RQIZ-LODo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bbd8d6-8f8a-4dcb-8c80-71f125f5f4c7/1/ls6TH4UvQEb_jbSCs5RQIZ-LODo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:dd:58:9f:52:22:55:15:ba:7e:38:68:8a:72:28:4e:a3:
f3:52:e2:e7:68:92:91:1c:32:0b:07:fb:86:8d:87:84:98:db:
5e:4e:85:f2:79:54:40:6a:25:ba:67:f0:71:53:db:61:41:d6:
78:b0:14:86:95:e7:58:c5:44:ae:23:7c:a3:03:99:cd:c8:8e:
a3:72:bd:a6:b5:b9:5c:88:93:6c:a6:67:a0:94:2f:4f:17:e5:
e7:76:bf:08:ff:b2:32:c4:5a:cd:39:c3:de:02:09:30:cc:ef:
93:fc:4d:f3:29:f1:a5:c5:dc:64:58:66:49:62:ab:be:15:7a:
20:30:23:f0:68:71:68:cd:90:00:3a:b9:e2:e4:8a:00:4a:a0:
35:a9:fe:03:8e:97:a8:a0:c7:72:d8:1c:70:f4:b1:0a:32:33:
1f:b9:67:83:3a:44:59:44:f2:a0:eb:e3:8f:f9:6a:1d:fe:7f:
aa:28:c0:75:7d:06:8f:41:92:43:1c:fc:e9:ee:25:bd:86:81:
4a:06:96:22:77:9a:50:5f:0a:15:63:99:9a:4c:f4:4b:68:a8:
bd:b1:26:5b:9c:b9:0a:c6:dd:51:32:6b:2b:5d:82:a5:4f:d7:
d6:6a:a5:4a:34:68:48:79:b4:0e:11:e0:72:70:20:a7:48:64:
14:59:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:08 2026 by rpki-client