Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
File: lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft (raw, json)
Hash identifier: cKWHcZNEr8Gxdxh7rdiEgEhhuKfMg0Xc7wboUkWySRY=
Subject key identifier: 41:EE:0E:60:E6:BC:CD:75:B2:E6:DA:C9:25:78:9D:4A:69:A5:7B:08
Authority key identifier: 95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
Certificate issuer: /CN=95be849d9e7037cb502218a85b2c997eb21ad498
Certificate serial: 019F916C94F360A70AE17A9B78DD48C5769F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:39 +0000
Manifest this update: Fri 24 Jul 2026 00:00:39 +0000
Manifest next update: Sat 25 Jul 2026 00:00:39 +0000
Files and hashes: 1: H7lQoACnsFlHoo9HQV1IBRHtwoo.roa (hash: NNgGcddEdzA3iYBWngh1e1ZZud+h+6ZZttNj6RYZ3PU=)
2: lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl (hash: Zm20T8ppds+VfBVqlAb/wWrOErCfCluqsIl2eOi3C3Y=)
3: vQWV1pYlCU0FXSj9NR7lSullj30.roa (hash: sy51u7zGghYJOBSf65dALTT087zsPExFgtS4V/w0WrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:94:f3:60:a7:0a:e1:7a:9b:78:dd:48:c5:76:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95be849d9e7037cb502218a85b2c997eb21ad498
Validity
Not Before: Jul 24 00:00:39 2026 GMT
Not After : Jul 25 00:00:39 2026 GMT
Subject: CN=41ee0e60e6bccd75b2e6dac925789d4a69a57b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:7d:ba:46:30:d2:96:1a:4d:a2:2d:f3:9c:
f6:92:9c:51:64:29:fe:1a:c2:a7:2a:90:ab:d7:19:
f2:a3:96:37:81:b1:0c:cf:14:42:9d:f9:2d:6a:ba:
84:30:17:17:66:e6:20:87:b4:76:c1:8b:4b:88:d5:
4a:6e:30:4c:c3:e2:d0:45:50:53:f0:62:33:55:b8:
3b:9d:04:50:8c:58:a9:ae:b2:1a:cf:7c:40:a7:92:
b5:26:4d:da:2e:56:14:02:b2:3a:97:4d:37:dd:b6:
e7:31:86:04:4e:d1:6a:d1:67:d4:aa:db:73:b2:4c:
a4:44:ea:ad:30:63:a7:2f:52:12:9d:2f:47:7b:85:
9f:ea:c9:40:f8:4a:a4:8b:32:47:9e:e4:c7:f6:10:
88:ad:0a:48:a5:67:a6:77:01:29:07:e1:d0:9b:0d:
a3:f0:ba:5e:2f:6f:b2:ac:32:8a:39:34:ca:76:43:
23:af:2e:6c:e0:39:97:19:54:27:4b:c4:e3:e3:68:
db:37:e7:e4:e2:44:ae:67:44:22:f7:1c:95:19:b6:
59:9f:fc:03:70:ea:90:bc:b8:c2:8a:77:67:cb:32:
12:9b:f2:63:9f:9a:7d:36:92:02:31:fb:85:64:4f:
96:32:d2:af:ca:8e:e7:18:ee:8b:4f:ad:cd:a0:b4:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:0E:60:E6:BC:CD:75:B2:E6:DA:C9:25:78:9D:4A:69:A5:7B:08
X509v3 Authority Key Identifier:
keyid:95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:ad:55:36:1f:40:14:21:8c:b3:b5:63:49:2c:ff:71:f9:
d0:5a:d8:fd:06:04:1d:d5:fb:94:c5:0a:cf:73:a5:99:d3:e5:
d4:ed:8b:68:f5:dd:fe:b3:c6:76:7e:c3:87:0a:67:aa:93:82:
6d:d6:41:3e:94:7d:1c:de:77:73:5a:9d:26:21:9e:78:e4:25:
45:07:2e:5d:30:a4:0b:b8:33:65:5b:cd:9f:4d:a0:3c:29:1e:
b5:35:5e:ea:81:ed:53:1c:42:d5:ad:2a:84:c9:28:86:0f:b3:
c9:9d:76:02:49:96:17:99:0a:52:ad:85:27:d1:d6:a6:33:32:
bc:66:68:d0:09:37:b9:f7:6f:30:bc:c7:2d:f5:08:f2:73:71:
aa:f1:67:f6:65:00:e0:b9:44:a2:84:25:1e:a3:96:2f:81:86:
81:48:98:ca:9a:d3:c9:cb:c3:1f:78:b6:85:a8:ac:4e:61:79:
cd:9a:b7:e3:e4:56:8a:a6:fb:14:9d:50:ff:bd:9a:67:d2:a8:
af:02:73:3b:e6:32:19:32:e5:0c:b0:58:a8:9d:84:db:d4:f6:
08:9a:b7:bc:bb:0e:8c:62:b6:88:d2:91:42:ac:42:c3:36:3e:
20:b8:1a:d1:15:29:6d:34:c3:93:fd:68:e9:e5:a7:cd:5d:5e:
e5:07:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:10 2026 by rpki-client