Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: I7ydG/1JD6XJNQaQ+o8SSmIT5oOwYa0YGXCOQduzlHs=
Subject key identifier: 64:AD:E2:99:92:07:54:9C:47:50:F9:2E:A4:A0:89:48:D7:E0:F3:4E
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019F92EDA3862A80B3240C14068CC7D15560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0466
Signing time: Fri 24 Jul 2026 07:01:15 +0000
Manifest this update: Fri 24 Jul 2026 07:01:15 +0000
Manifest next update: Sat 25 Jul 2026 07:01:15 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: G80uTWcnEqP93ZMWzG5/ZW9JIz2YBKc+edmPtlDTHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a3:86:2a:80:b3:24:0c:14:06:8c:c7:d1:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jul 24 07:01:15 2026 GMT
Not After : Jul 25 07:01:15 2026 GMT
Subject: CN=64ade2999207549c4750f92ea4a08948d7e0f34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:c7:f9:0f:ce:e5:0e:3c:f3:c1:23:ab:1e:
10:58:c0:3d:a1:73:24:9b:64:ae:0c:07:26:a7:b3:
09:37:0c:d2:52:b3:4f:1d:d3:d3:a9:5f:93:be:a1:
d5:7a:f8:70:c9:60:8e:5e:f0:26:6f:a0:ef:a9:94:
e4:9c:94:b1:38:74:63:7d:81:3f:96:23:a7:75:65:
42:7b:1f:ba:ae:2f:c0:89:05:ce:d8:6c:62:df:bc:
33:d7:3e:b0:ca:60:73:a9:4f:8d:eb:48:99:a4:8f:
8e:cd:e9:a7:1c:50:4e:c2:fc:80:05:91:d1:5d:bc:
02:d1:55:7a:1a:48:76:6b:d9:e3:e5:14:48:d1:46:
f6:1d:76:1c:a3:56:e9:ef:83:26:7c:97:b2:13:a0:
57:4a:43:c7:ba:dd:14:19:8e:c3:4d:3f:90:32:84:
d0:f4:bc:5b:a5:c0:b9:90:e1:42:39:ce:95:15:74:
92:0f:04:6a:03:6a:ef:f9:61:c7:12:6c:90:e3:b5:
41:91:af:da:42:11:b1:07:eb:f8:01:5d:be:26:11:
0d:a5:a7:64:fe:06:01:29:9f:e9:60:80:29:ea:20:
74:2d:2f:71:90:a7:82:2a:8c:e1:30:a5:5e:54:b2:
00:0b:5a:a9:77:f8:4e:63:02:c6:27:d8:25:a3:93:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:E2:99:92:07:54:9C:47:50:F9:2E:A4:A0:89:48:D7:E0:F3:4E
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:91:af:d9:8f:bc:2a:fe:e5:e8:ec:f9:01:be:14:61:55:d7:
f6:c0:39:ba:5c:27:f5:01:ef:9b:5f:33:dd:14:99:a6:69:d5:
28:ee:36:b9:b0:58:e7:5b:75:50:1b:31:85:0d:f6:87:5c:1b:
ec:fb:19:84:b0:da:cc:bc:87:7e:1e:8f:4e:3b:cd:a1:c8:7a:
7a:6a:6b:86:c7:e2:01:38:b2:d4:58:11:c9:63:e2:6b:e3:2f:
f4:ba:ac:ee:2e:5b:a8:51:f0:65:52:e5:bf:7e:66:01:f1:3e:
cf:99:cd:0e:16:26:ba:66:b5:02:27:91:aa:7e:ef:5a:f2:82:
c0:eb:7b:2e:db:47:9e:0f:65:2c:43:38:4a:23:d2:12:f2:b7:
1a:9e:71:9c:5c:5e:71:d0:3d:65:ff:a1:f5:f1:5f:26:27:8b:
5c:e1:b6:06:74:7c:b6:be:34:3d:51:2c:61:9f:85:7c:e3:7f:
8f:70:e5:dd:c0:c5:76:82:76:91:6c:8d:6e:ce:ea:e9:0f:86:
ab:a0:be:ca:bf:a1:3d:b9:0b:4c:7f:d2:14:55:2c:08:7c:88:
40:32:c0:f5:d7:1b:86:30:fc:c7:59:08:de:2a:5b:da:69:99:
f1:f1:85:2f:37:55:5a:a5:01:a8:c7:1e:64:ff:07:67:3a:26:
b0:36:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:40 2026 by rpki-client