Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: PtaOrdeYGQcHEVYs8b5I2Vpz0VWRNmxVJ73uao77+Ec=
Subject key identifier: C3:26:63:9E:5B:24:55:98:41:60:00:05:73:D4:D4:93:8B:BD:79:14
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019F9023204FA2CC2EF7A34CA3F7A78A185C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 15FC
Signing time: Thu 23 Jul 2026 18:00:48 +0000
Manifest this update: Thu 23 Jul 2026 18:00:48 +0000
Manifest next update: Fri 24 Jul 2026 18:00:48 +0000
Files and hashes: 1: 1PybCNr_IFgLVkzLXWGTaCDybTk.roa (hash: Cg8snUmzbGaDrQOzkD+CjoCw4C1tZVVgBqfz05gGV2c=)
2: Fep6qr8rRobHKsNR16UZ8IogVaU.roa (hash: uZWJyhzdZhmIt386GPPzhnoAhK/Him80kP4WtX/gQ6o=)
3: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (hash: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs=)
4: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (hash: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw=)
5: jb81OuVJup1PLJeMNccOVNPoCJ8.roa (hash: deKoWNZnlpwFwiqew1tUzp1N8o/V+tWA//EpRC0uV3s=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: +zJr6H/yGZpIettaPQTvQiv02XWcAChdczjWqgq1Ms0=)
7: zjv8SZhQ9gV8oRmS9YUAJhkKaT8.roa (hash: 9mmbxYMsoWHE5kxulUQxb1ol9WOyJhGIh77y7/oMRtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:20:4f:a2:cc:2e:f7:a3:4c:a3:f7:a7:8a:18:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jul 23 18:00:48 2026 GMT
Not After : Jul 24 18:00:48 2026 GMT
Subject: CN=c326639e5b2455984160000573d4d4938bbd7914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:66:b5:d9:08:e5:a6:8d:1c:e4:c3:17:ef:
6a:0b:f8:32:ac:e9:87:c8:fa:76:27:7b:db:6e:34:
07:fe:70:19:00:0e:d2:50:1a:a5:68:28:bf:3a:33:
f6:cb:3e:21:e6:47:a8:1b:b9:5d:ee:1f:11:d1:5e:
5d:db:0a:e4:e3:69:85:7a:68:8c:96:ef:bf:5b:4e:
c2:18:9a:15:23:d1:c7:a6:d9:c3:d0:94:11:1c:ad:
54:ae:07:83:ef:38:a4:a4:6e:54:bb:bb:fa:bf:18:
7f:02:fc:97:fb:c8:96:80:14:18:a0:1c:62:53:87:
68:71:61:a3:9c:3c:31:16:67:6f:79:6c:aa:55:b9:
48:80:3a:c4:25:2e:15:f9:07:80:75:4c:1c:0d:ba:
09:49:dd:c2:7f:17:92:55:e5:45:e3:17:fc:d5:f6:
17:f0:db:82:9a:9a:1c:7b:82:9a:2d:63:b7:8b:96:
ea:31:89:1e:b5:49:d5:70:08:48:f8:45:ef:ac:e4:
db:c7:4b:34:a6:d8:bd:86:ed:28:91:2c:5a:23:e3:
13:39:8e:95:b6:7b:bb:6d:8e:40:b4:3a:93:78:4b:
a9:12:bf:bc:d1:48:b7:4c:5b:a6:e6:97:87:3b:ff:
1c:ca:c3:82:e0:aa:cc:3d:08:42:01:fc:4f:3e:9b:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:63:9E:5B:24:55:98:41:60:00:05:73:D4:D4:93:8B:BD:79:14
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:cd:e2:7d:f7:00:02:11:19:e4:88:e4:cc:4c:4d:c5:6a:
cd:3b:38:5a:84:86:58:6b:dc:15:4f:5d:e3:2d:16:7d:4b:c0:
12:6d:3e:96:64:ce:b8:51:03:e6:ec:72:38:84:39:33:df:ad:
fb:3a:17:a9:65:8e:b4:32:c3:43:19:6f:b6:93:9c:6b:e2:7d:
f7:1a:af:8f:40:5b:68:3b:d5:9a:a6:02:93:ee:a8:de:6e:94:
ca:4f:69:56:84:bf:83:82:86:e1:7a:2e:ac:e8:c3:57:68:50:
f1:50:bf:d5:de:01:f8:c7:cf:52:4d:8e:d2:15:70:d6:0b:02:
99:bf:3d:a4:3a:6f:d5:fd:cc:67:16:ff:ab:a7:4a:62:05:47:
4a:92:c9:b0:fd:66:80:ca:db:fb:bc:80:43:ba:40:3f:3c:17:
12:13:f2:27:be:36:46:f9:5c:12:ef:60:22:ab:5f:48:13:48:
cd:d6:17:81:f3:2d:13:66:f1:d3:14:e8:45:f7:38:5d:9d:6a:
75:cd:b0:d2:ee:49:df:d6:a9:c6:15:19:e7:a1:55:86:d5:9f:
c5:fa:45:b5:a0:ff:ab:0f:ff:67:8f:8c:60:41:41:2e:ad:57:
f5:e0:90:22:97:24:b2:08:19:1c:12:86:a6:bf:53:fa:c7:ce:
98:75:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:31 2026 by rpki-client