Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
File: lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft (raw, json)
Hash identifier: XfFQcEcpR1cgMMXgpjZhzpo7CLHOCMc/x0Cie/nsGOo=
Subject key identifier: 51:23:F4:4B:3D:7A:8E:C5:A1:C8:21:70:DA:6B:98:60:14:E9:63:6B
Authority key identifier: 94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
Certificate issuer: /CN=94bd5921933292a2f93e049f8b81fb7650301c67
Certificate serial: 019F9090AAD5D265426546F4B96E10AFAFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
Manifest number: A0
Signing time: Thu 23 Jul 2026 20:00:27 +0000
Manifest this update: Thu 23 Jul 2026 20:00:27 +0000
Manifest next update: Fri 24 Jul 2026 20:00:27 +0000
Files and hashes: 1: lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl (hash: NAxku1wyc0RO4Jkl/gPkZpBQt3Mx5zWNq5w4TWApoYA=)
2: xITKiIhMJqr64QWowOp5Oos94Ts.roa (hash: 0jGjhsogZ02DOgH0lYdyo4DGk9IGywTmUiv2U/qvPr4=)
3: zzQCv-E1bq6Vad6HBjZl3qZJnBs.roa (hash: GpwoA2VX03zH2zUpZrOb1rRxnrDXnBgehj8lNRuizXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:aa:d5:d2:65:42:65:46:f4:b9:6e:10:af:af:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bd5921933292a2f93e049f8b81fb7650301c67
Validity
Not Before: Jul 23 20:00:27 2026 GMT
Not After : Jul 24 20:00:27 2026 GMT
Subject: CN=5123f44b3d7a8ec5a1c82170da6b986014e9636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:05:e6:90:f7:71:ab:de:a9:9f:ab:62:66:
0a:ac:94:4d:fc:50:59:fc:8e:d9:a3:bf:3c:0e:05:
80:b8:a5:7f:72:ba:34:ea:82:d9:ab:ab:47:e5:7d:
a7:63:f5:f3:f1:97:bc:d8:27:1a:bb:b5:d8:51:87:
fc:0d:49:77:c8:a8:f9:31:3e:84:64:f2:2a:dd:bf:
fe:86:9a:c2:d0:32:6f:a3:6a:25:0c:18:9f:c2:49:
45:c6:76:a5:99:22:e8:5d:2e:f8:5e:1a:f6:76:fa:
3c:9c:1f:23:5c:bc:f6:48:66:52:28:03:86:79:ee:
8c:32:95:ad:2c:7c:c0:7f:c5:5c:9a:0b:60:df:bf:
d6:8e:2f:4b:c4:d2:31:fb:0d:ec:64:a1:ed:f9:8f:
8d:4c:78:79:11:d0:a9:75:8d:f9:39:8a:f0:05:fd:
7a:df:cf:e4:0f:5b:3d:89:84:33:87:4c:49:99:8d:
7c:ba:2d:85:94:ce:83:d6:4a:07:78:82:2f:33:d9:
72:8a:51:52:cf:d4:62:76:97:0c:72:59:80:bd:05:
da:be:43:d1:00:4c:18:fe:88:46:f3:88:16:68:88:
ae:1b:b9:93:39:f0:9f:6c:b6:52:7c:e5:90:35:27:
af:77:11:9c:2f:08:97:9a:5f:00:1a:0f:62:b5:da:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:F4:4B:3D:7A:8E:C5:A1:C8:21:70:DA:6B:98:60:14:E9:63:6B
X509v3 Authority Key Identifier:
keyid:94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:16:f5:4c:c6:32:bf:7f:15:d6:63:10:a8:2b:92:b7:56:f4:
fd:02:14:e1:ed:2c:fe:4c:81:4d:8c:d7:1a:0d:24:1e:5d:cd:
7d:89:c0:cf:49:f4:b8:b3:2e:86:e5:30:8e:49:8e:6b:c3:5c:
ce:7c:2c:2d:dd:81:bc:bf:1e:bb:ff:f8:7c:ed:16:f1:01:8b:
01:94:87:01:b5:4a:00:7b:86:5b:73:a7:dc:9f:73:52:87:fa:
d6:e6:43:db:b9:b5:82:6d:c0:a8:3d:5d:09:12:4e:1c:07:77:
2e:9b:cf:5e:7e:05:07:a7:30:1b:63:17:31:90:fd:cb:53:ad:
8f:9e:1c:f1:51:15:80:43:99:c9:4c:45:61:05:7e:41:83:75:
04:2d:f3:78:ce:f5:d5:04:35:35:3b:82:5c:3e:22:31:ff:ad:
2e:35:5e:f9:4a:e4:e8:5b:38:32:8c:b5:2d:3a:2a:e5:01:1e:
9d:c2:78:33:5e:90:14:cc:4b:96:3f:62:8f:b7:91:cd:94:34:
ff:28:46:bb:19:5b:0a:c9:d0:26:e9:61:d1:6a:05:ac:11:95:
45:ef:1a:64:59:57:b0:1b:73:4e:e0:10:03:86:7c:51:39:4a:
1a:18:0c:60:50:b4:0c:41:a1:1f:63:10:3a:da:bb:69:a1:a1:
1f:40:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:19 2026 by rpki-client