Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: uSbYVooZHm0jrUdxxbznkubmzAtbYTemMQJHiLHnQFY=
Subject key identifier: 14:B6:DE:A5:96:EF:60:4F:BB:59:08:FB:85:32:CA:99:BB:0D:85:96
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019F9391C83A018B2A395A7CEE6760E2471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 10:00:32 +0000
Manifest this update: Fri 24 Jul 2026 10:00:32 +0000
Manifest next update: Sat 25 Jul 2026 10:00:32 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: ORk97rkLJ4CFwKv676OIUgCcIFpyCzecLn8Z2ixx4rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:c8:3a:01:8b:2a:39:5a:7c:ee:67:60:e2:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Jul 24 10:00:32 2026 GMT
Not After : Jul 25 10:00:32 2026 GMT
Subject: CN=14b6dea596ef604fbb5908fb8532ca99bb0d8596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:8a:72:c0:22:f4:65:eb:5c:55:ab:2f:36:
ee:4a:a1:dc:35:ea:c6:f6:9e:ab:b9:a8:f7:f8:93:
ca:b2:a2:b2:68:3a:b9:ce:f9:fc:35:f2:13:ad:e7:
e2:11:16:28:38:e3:53:c3:03:ea:b8:da:73:93:79:
d2:56:fe:a8:c5:fe:ec:d2:e0:85:a4:fe:6a:4d:09:
03:50:46:93:c2:be:6e:25:91:00:0d:23:7f:57:0c:
d4:d3:6e:a7:b3:ae:07:9c:a9:9a:8c:b2:e4:15:ee:
86:b4:86:0a:b1:5b:35:98:04:fc:01:39:74:6e:91:
e7:f6:e4:60:0f:8b:13:cb:d2:07:7f:35:b7:01:de:
52:e5:11:fa:01:b4:e8:9c:2f:a5:4c:b4:cc:23:de:
e7:d3:83:7e:97:76:49:03:84:ed:49:c1:6b:26:21:
ef:65:d8:3b:7c:5b:09:a9:41:25:49:5f:06:b2:ce:
b7:99:91:c5:63:e4:59:7e:fb:da:92:c6:16:e3:25:
93:1f:40:9e:90:1d:7a:59:5a:4f:d0:81:51:ce:9d:
e3:1c:bd:7c:62:ec:b1:d3:72:42:f7:8d:72:fb:74:
86:40:fb:b0:6a:d2:cb:6f:88:21:21:8c:90:7e:b7:
f5:91:64:ba:22:7e:a9:6c:71:6d:f0:05:dd:e6:c8:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:DE:A5:96:EF:60:4F:BB:59:08:FB:85:32:CA:99:BB:0D:85:96
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d2:46:be:1d:27:64:4c:59:b1:41:62:de:bd:b7:44:d0:60:
4c:09:00:2d:1a:79:ae:b0:47:05:65:2a:e8:15:7c:9c:c4:78:
db:25:d6:61:53:fe:ad:86:22:6c:82:a2:b2:e9:92:7d:ec:f9:
a3:e7:7f:1f:67:51:84:e7:e8:d9:08:56:21:7a:5c:eb:4d:a7:
de:c2:d1:bd:47:a6:9e:60:f1:cf:7e:8e:38:d6:53:73:cd:3b:
b3:28:ff:0b:12:47:a9:a3:12:27:4e:11:ab:55:3b:58:1b:30:
8d:48:14:9d:0b:77:e7:8d:e5:fc:15:93:98:63:d2:ed:dd:b1:
57:59:88:f0:42:b7:dd:85:21:0e:06:38:93:40:36:4f:55:66:
cf:61:3b:04:ce:3e:ec:92:b1:3a:16:75:4c:f3:b2:ec:5c:30:
61:f7:e7:b9:14:48:0b:50:f8:31:a9:c6:32:2c:82:bd:42:78:
65:17:36:f4:4f:38:5c:75:64:55:b5:8f:7b:c3:9f:60:34:30:
75:2e:61:3c:12:1e:f0:13:45:c8:8a:08:c8:e1:8c:68:84:05:
e6:9e:c2:3b:26:14:06:b9:b2:7a:90:c2:06:41:ca:b2:92:44:
31:b9:f9:f1:f1:8a:68:9c:2d:15:9b:69:be:aa:5d:86:14:94:
a9:69:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:59 2026 by rpki-client