Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: N2WLy7vLJUubX9PCDc+6FBytDxA7x3+PzdLAfq8YM20=
Subject key identifier: 20:E1:E2:84:64:B8:36:6C:4C:59:11:5C:A7:FF:E8:09:F4:0D:55:87
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 019F90FE6D15EE64E8A57541A02BDE394E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 22:00:20 +0000
Manifest this update: Thu 23 Jul 2026 22:00:20 +0000
Manifest next update: Fri 24 Jul 2026 22:00:20 +0000
Files and hashes: 1: 4QLQLdRNistD58V4Gobwba2l7ak.roa (hash: rdeifE6ly74qVEIujDihCPvAKVfy9CBgE4V+s0Ryjsg=)
2: LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa (hash: p9xq3q/MMRkwXX0B1rVTdYY5jk1Jby2fa+eubc67Btw=)
3: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: x6f6eP6aDpyq8n90LYM2mPOX6SicbVGjb/MxkRRb0UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:6d:15:ee:64:e8:a5:75:41:a0:2b:de:39:4e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jul 23 22:00:20 2026 GMT
Not After : Jul 24 22:00:20 2026 GMT
Subject: CN=20e1e28464b8366c4c59115ca7ffe809f40d5587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:18:07:53:b1:40:d3:a2:87:d1:e3:dd:74:
35:72:a0:9b:28:45:7e:34:e8:af:cd:99:ce:53:98:
df:0c:3b:a2:8f:8f:fe:d4:48:6f:c5:d7:99:dd:ae:
08:e5:b6:8d:5e:7e:c0:1b:1b:62:8f:1d:e1:fe:21:
28:10:28:19:c4:45:c3:8e:7d:55:14:58:c3:35:d9:
a5:ae:38:97:c2:cd:90:09:8e:f4:10:69:81:73:29:
40:76:e2:ac:36:69:ed:02:ec:a4:30:fb:90:3a:ec:
ef:8c:fd:22:91:21:f9:32:ef:e7:80:c8:fb:e2:c8:
bc:30:b7:4b:5c:ca:9a:6a:0c:ab:16:bd:bb:0d:a9:
b4:45:9e:48:99:08:34:9a:40:56:e5:2b:08:d4:35:
55:88:97:92:25:90:3c:26:55:8d:4b:fa:8e:9b:65:
75:6d:34:2e:8b:64:a9:e9:e7:81:42:0e:0f:7f:96:
0d:a5:44:1a:0b:51:8f:be:ab:63:4a:29:c8:41:e8:
74:52:8b:6a:35:28:48:6e:32:fa:ff:e3:38:53:9e:
06:49:55:1c:68:76:14:e5:32:81:d7:69:04:fa:3f:
f1:17:63:1a:01:82:14:f1:91:61:fe:d6:ed:ea:10:
1f:bc:b5:61:87:eb:b4:7f:15:a9:8c:8f:cc:8d:b4:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:E2:84:64:B8:36:6C:4C:59:11:5C:A7:FF:E8:09:F4:0D:55:87
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5b:be:1f:7c:94:c2:5d:2c:e3:dd:1d:3b:44:48:be:80:35:
6d:60:72:77:39:e0:2e:b1:22:62:d0:5d:ae:b9:51:cd:42:e8:
bf:ea:85:11:1f:ee:26:0c:df:24:91:04:f3:1f:7d:c3:a1:1c:
94:10:b6:5f:46:dc:79:25:f4:43:0c:9c:ec:98:29:40:f3:fc:
50:4b:99:f6:e4:79:e6:9d:9b:93:63:4c:93:47:90:81:23:10:
8f:6b:80:50:3c:35:c9:f6:95:a7:0a:8d:78:41:5e:6b:42:a3:
47:a6:e6:11:db:a2:80:61:03:fa:2f:3a:35:94:20:31:76:31:
e5:3b:51:8d:fb:e3:a2:2e:8e:c9:c8:4b:08:8a:90:3e:38:53:
3c:52:2d:80:c1:2a:69:c0:fe:4d:44:89:41:75:b2:18:7f:43:
96:83:66:67:eb:f8:3e:d4:af:4f:a3:9a:ea:b0:e8:d9:99:ff:
c1:d9:c5:81:03:43:a2:aa:b0:ff:28:53:74:cd:ff:b8:ac:c3:
39:da:ca:3f:70:13:d7:8f:db:50:62:e8:ad:d9:5d:a5:13:55:
29:bb:03:f8:4b:4d:19:07:1b:20:71:fe:ca:05:8f:15:ad:ed:
55:63:8f:2f:92:7d:ba:fd:a4:26:4f:8b:f2:9c:9f:64:eb:51:
1a:fe:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:19 2026 by rpki-client