Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: wVpdQB2mdAy9TydyvrTeyioSD3CkWy1sMXWfVPNxy1o=
Subject key identifier: 3A:DB:50:36:10:93:29:C8:12:C8:3B:CC:2B:E3:14:9F:AF:A4:31:2A
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 019F93C93A15F1CBE5679CC31297FB2B7764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 037B
Signing time: Fri 24 Jul 2026 11:01:06 +0000
Manifest this update: Fri 24 Jul 2026 11:01:06 +0000
Manifest next update: Sat 25 Jul 2026 11:01:06 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: WE/AOZdmalGGTFnf5EZiykuFJq86KhDDUO2vgw3UuwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:3a:15:f1:cb:e5:67:9c:c3:12:97:fb:2b:77:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Jul 24 11:01:06 2026 GMT
Not After : Jul 25 11:01:06 2026 GMT
Subject: CN=3adb5036109329c812c83bcc2be3149fafa4312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:58:39:18:2a:a8:de:ec:5b:e4:f4:f9:bd:
e8:a0:bd:54:0d:96:29:d3:67:fb:5e:00:f4:ef:88:
98:d0:fa:08:c3:d9:da:99:b7:08:69:8d:77:ba:b9:
df:7e:99:7d:95:7a:59:31:ee:97:c3:c5:20:5b:a9:
e6:f4:1d:95:cf:94:b4:15:36:1b:f5:e8:8f:3e:4e:
4d:2a:eb:4a:74:ca:27:33:c5:a9:e1:55:72:c1:8d:
39:bb:7b:20:bc:a5:7e:5f:69:b2:7b:a9:98:3f:a5:
13:59:62:9f:7b:7f:b9:5a:de:d4:b0:df:71:9b:fc:
c5:32:fb:21:8c:4e:3a:f4:33:ac:df:a2:8a:a8:f6:
6a:91:34:68:5d:77:23:65:c3:de:bb:d7:a2:41:96:
ad:42:85:51:24:14:fd:6c:76:6f:a8:4b:7d:dd:9c:
9e:db:8e:3c:a4:bc:a5:53:00:08:70:e1:63:a6:bd:
c4:d3:75:4d:1d:a2:9f:98:33:34:df:51:40:0d:60:
98:ec:15:1b:1a:86:54:12:ba:2c:5c:db:a9:32:45:
67:b2:23:e6:88:17:80:b0:41:74:e0:1d:0a:f8:cd:
b1:59:0a:c2:52:30:40:f8:db:19:a1:83:9a:f3:50:
0a:fd:96:55:ed:28:e9:e3:8d:21:d9:07:e6:fc:ce:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:50:36:10:93:29:C8:12:C8:3B:CC:2B:E3:14:9F:AF:A4:31:2A
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e2:29:7d:7b:c9:4a:f9:8f:39:62:f1:bb:5e:b3:b5:26:51:
e8:17:de:f3:9c:55:e6:f3:ec:eb:b6:37:4d:28:ae:c4:9a:27:
32:10:88:99:bc:76:54:ae:a9:17:78:00:9a:09:33:af:ca:8a:
04:47:9b:e8:fb:96:64:f6:bf:df:23:d0:3b:4a:3c:63:af:21:
32:40:b9:2a:51:b6:1a:35:38:6b:62:38:0b:cd:91:c7:c8:9e:
47:92:9a:9b:9f:03:cc:7b:eb:81:20:60:0c:26:ca:92:ee:6c:
34:30:e4:c8:8f:03:46:85:27:44:e5:00:f1:0a:8f:b7:e7:bf:
6c:82:15:71:75:96:ed:89:5a:d9:3f:e6:04:49:aa:e5:60:58:
e3:ed:be:d7:68:7f:c9:f0:52:94:d3:1f:31:98:ff:db:53:98:
97:2a:88:ad:f9:d1:23:09:1d:06:02:11:30:46:d8:33:40:33:
6e:9d:de:33:62:23:a3:0c:24:d1:5c:47:3c:d9:3c:0f:1e:6a:
50:8c:dd:fc:ea:66:61:c3:ac:57:17:2d:b1:f8:e2:44:0b:b2:
d8:88:29:11:87:f8:51:db:61:c2:0f:94:66:68:6c:e8:09:6c:
d2:dc:dd:33:9e:38:3c:f0:97:45:31:cc:5a:44:08:9e:63:99:
44:26:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:30:31 2026 by rpki-client