Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: 1zftv9AsWrLJbr9rrk9o2YQ70TkcgFp8u74lcoD+eKU=
Subject key identifier: EC:DF:D5:BF:4E:F1:0F:AD:6B:B6:D3:DF:0A:88:A6:13:48:E0:B3:74
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 019F95B6F2DE0F58A026B0BBF81A81C5B6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 20:00:22 +0000
Manifest this update: Fri 24 Jul 2026 20:00:22 +0000
Manifest next update: Sat 25 Jul 2026 20:00:22 +0000
Files and hashes: 1: geYG7jgB_IZyvx4sV17jbEgt41M.roa (hash: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: CkHoxhESCe8utqDtCczcf1Qjp9sx9hJp28e8Rs8PnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:f2:de:0f:58:a0:26:b0:bb:f8:1a:81:c5:b6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Jul 24 20:00:22 2026 GMT
Not After : Jul 25 20:00:22 2026 GMT
Subject: CN=ecdfd5bf4ef10fad6bb6d3df0a88a61348e0b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:6d:ac:7c:d3:de:22:e2:cc:31:0d:b5:ff:
02:10:34:0f:c2:32:28:78:e6:67:f5:98:0e:c3:9a:
b4:fd:35:47:63:aa:64:8f:3e:9a:4c:2a:6d:56:4b:
27:62:b4:b8:24:9f:9f:78:68:ce:85:88:c8:44:39:
5b:0d:96:1a:cd:6f:6a:71:2b:40:f2:31:6b:ff:c9:
36:74:39:f1:af:4f:b1:4b:fd:50:c0:f9:04:00:b9:
fc:f8:fc:66:79:22:fa:32:06:68:b0:77:e1:4c:be:
2c:98:04:32:f7:c6:40:1a:92:bf:14:3d:8f:f0:fe:
21:7b:7e:77:0a:e9:50:10:6e:e0:0c:b0:86:2f:a7:
23:95:05:fd:36:62:eb:bd:2e:ad:6c:da:10:09:e8:
5e:e4:14:fa:d9:0a:22:ce:ff:ab:4e:b9:20:e9:39:
8b:ef:c2:c3:fd:1d:a8:e0:72:d2:4b:f0:64:98:29:
a9:c0:c9:a6:9d:13:36:b5:06:42:0f:99:09:bd:38:
32:ed:8e:ec:5f:e2:35:f2:7b:5f:d7:8f:60:80:aa:
d1:4f:ee:9d:3a:21:32:39:26:39:3d:eb:30:f0:7c:
be:bf:37:0f:8a:f3:24:17:e4:b1:89:37:aa:ad:81:
fd:5a:12:75:e9:93:cc:21:46:fb:f6:40:de:30:bf:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DF:D5:BF:4E:F1:0F:AD:6B:B6:D3:DF:0A:88:A6:13:48:E0:B3:74
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:18:c5:a0:da:c2:be:0e:e7:3e:df:0b:ad:ae:a1:9d:83:3c:
d5:75:01:5a:d9:25:32:8f:b9:f6:c2:2d:b7:11:d5:cb:7f:af:
98:ce:c9:2b:fc:35:fe:85:c0:17:83:50:a0:cb:22:2e:42:61:
01:55:0d:04:56:c0:cc:a0:92:48:5a:a0:b3:c1:57:65:97:56:
60:80:dc:28:6b:c3:bb:4a:e8:02:1d:5c:e4:0a:64:04:62:37:
8b:7f:cd:a0:30:6b:0f:d8:e8:e0:02:3f:ba:66:48:21:02:6c:
aa:96:0c:8f:96:51:d9:68:5f:5b:2b:6d:fe:03:a8:cc:db:0d:
1f:2e:c1:7b:20:0a:65:8b:30:67:97:54:57:67:46:7d:3e:7a:
10:2a:d7:ac:7e:7e:59:54:43:7a:c3:ed:0e:49:0e:08:30:a7:
b8:88:c4:c2:f4:20:dd:71:3e:1b:db:ba:a7:20:3b:58:b3:3c:
6f:14:fc:7f:15:e4:1f:e1:32:83:e9:64:e5:f7:19:5f:17:2d:
22:cd:55:2a:94:e6:ed:32:71:4e:0d:df:6a:a0:19:1e:b4:a2:
fd:1f:ff:15:eb:2b:b4:c9:6d:77:f4:6b:86:dd:1a:bf:5b:97:
9c:02:a5:be:12:6b:11:58:7b:26:b3:81:e8:cf:74:e8:62:90:
6c:36:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:35 2026 by rpki-client