Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: KBzDGNp88gfZqwPPrUfi49KUo0+SBqMYAGoKTqArmBQ=
Subject key identifier: 3A:B9:7B:14:35:DC:54:D8:0E:15:2F:D7:04:B4:EF:36:AC:70:53:ED
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019F9692E12E66E0EDDC8A216B8A4675C83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1584
Signing time: Sat 25 Jul 2026 00:00:35 +0000
Manifest this update: Sat 25 Jul 2026 00:00:35 +0000
Manifest next update: Sun 26 Jul 2026 00:00:35 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: sRFRWMOHDSRKOuaaeCWSYW0/BhanIR8522GEWr/Ocrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:92:e1:2e:66:e0:ed:dc:8a:21:6b:8a:46:75:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jul 25 00:00:35 2026 GMT
Not After : Jul 26 00:00:35 2026 GMT
Subject: CN=3ab97b1435dc54d80e152fd704b4ef36ac7053ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:04:90:e9:25:fa:2b:74:f6:4a:11:a7:d6:
4e:ae:4a:30:1b:43:79:7a:b4:f4:3d:27:31:19:0d:
ba:d0:31:56:9e:71:3d:b3:f4:c1:e4:15:df:17:22:
99:ce:a4:a4:29:78:b8:81:9d:f3:af:7a:27:f6:b9:
86:b2:9d:46:03:bc:81:ab:14:12:79:09:76:50:93:
1b:9b:ce:3a:e5:72:2b:99:74:43:96:23:62:fe:9b:
c7:af:6e:8f:e3:27:99:5b:21:1f:f5:06:03:4c:c8:
de:d0:cf:4e:70:7a:db:c1:a0:60:a9:56:dd:d8:0e:
a8:c5:ac:39:f8:8e:d8:b6:ef:58:74:ac:0f:7e:32:
c2:09:f2:cc:9a:e2:84:2a:24:d0:d8:49:bc:59:da:
1a:c2:3d:be:86:db:1b:a6:d0:f4:bb:e2:f7:1d:e3:
f2:e5:4e:9b:e7:6b:12:c4:30:04:d3:e3:40:ca:0d:
7e:f7:15:73:bb:44:ea:08:e4:4e:a7:fa:7b:b3:5a:
06:ac:c7:5c:77:46:b9:db:c4:e2:b6:cb:d6:55:fb:
3a:11:15:e5:5b:c4:fb:d4:e2:cb:8a:72:a9:d0:72:
48:fc:23:41:a0:f8:86:97:ee:eb:c5:5e:75:39:6d:
6e:2f:d3:77:b9:bc:d9:91:a9:36:fb:32:78:0d:dd:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:7B:14:35:DC:54:D8:0E:15:2F:D7:04:B4:EF:36:AC:70:53:ED
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:79:6c:7c:7c:13:f3:c7:25:ec:72:a7:83:2d:90:6b:c3:
91:6a:4b:f7:c1:ff:e4:ff:8d:67:f3:0d:a4:ac:ae:3a:b0:b4:
ae:86:c3:31:4a:7f:72:9e:a4:3f:e0:e7:65:81:88:33:4d:05:
c0:ec:19:ce:3f:d1:3d:7e:5a:19:9d:29:f2:90:1d:21:f9:b2:
9d:81:c7:c9:a3:e3:90:51:2f:7c:8a:d7:b5:bb:94:b6:18:a3:
6b:8d:e6:53:0c:69:8f:d0:8c:f3:8f:b9:73:7a:cb:08:67:aa:
80:06:5c:76:da:e8:e0:51:30:2b:3c:60:fb:aa:a5:85:6c:8e:
bd:64:3e:c8:3f:0c:c6:0d:83:6c:0c:87:31:bb:67:09:3e:a0:
5a:b5:51:93:5b:cf:27:7b:d4:86:78:49:30:7b:13:5f:5c:2b:
64:26:1e:44:2a:65:a6:35:47:58:6b:d0:1c:31:0e:ae:b3:10:
54:ce:44:b1:ff:21:ac:e1:36:aa:8b:54:b6:b3:4c:98:f7:b6:
49:10:2a:bc:92:41:bc:05:c6:32:fa:34:8d:31:b7:c7:53:a0:
9e:8c:0a:a0:61:b6:76:53:5f:13:fc:e3:89:33:9d:c1:68:d2:
e6:e8:80:51:85:a9:37:9e:13:af:cf:60:9f:1c:c1:c2:3d:bc:
6e:64:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:16:17 2026 by rpki-client