Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: wD0vE5ShC8oPpiFaCLl0jTgCdn65v6Lv6+njZlwOUsE=
Subject key identifier: 14:6E:38:B7:33:0C:CF:93:D9:C9:A0:7B:64:9B:E9:71:8F:28:25:A8
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019F93C937D7A2C4196475A59C79CE05E4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 19D8
Signing time: Fri 24 Jul 2026 11:01:05 +0000
Manifest this update: Fri 24 Jul 2026 11:01:05 +0000
Manifest next update: Sat 25 Jul 2026 11:01:05 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: IOTJG32G6xs5TZ5PHIRjYWFZvgci6uBJPZFVGl3yRJQ=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:37:d7:a2:c4:19:64:75:a5:9c:79:ce:05:e4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jul 24 11:01:05 2026 GMT
Not After : Jul 25 11:01:05 2026 GMT
Subject: CN=146e38b7330ccf93d9c9a07b649be9718f2825a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:ee:54:60:fb:9a:a5:de:b9:dc:84:0c:53:
f9:b2:16:65:58:19:db:8f:a5:53:f1:dc:b1:08:82:
11:d5:30:d1:cd:7b:75:a9:4e:cf:d0:76:8c:d9:91:
c3:a5:82:ad:04:74:4e:1a:34:1d:8b:66:fc:3c:2c:
7e:32:55:8a:b4:4c:e7:b3:ef:49:ef:3b:6b:7e:6f:
c0:a2:cd:af:7b:a3:c6:0b:7d:0a:76:88:5c:6f:50:
3d:b2:30:83:5e:74:7a:97:83:b6:51:e5:15:39:28:
e0:eb:13:8d:ad:c8:fb:a3:5a:2d:e3:34:18:19:8b:
4b:27:7c:14:af:5b:19:96:6d:dd:12:fb:03:67:fd:
ba:1c:37:9b:ab:8f:a8:c5:10:26:4e:d1:7b:35:8a:
3a:ef:36:16:e0:b3:c5:b3:a2:be:7e:4b:e8:6f:7d:
04:93:4a:68:24:20:47:f3:7b:02:cc:1e:92:ce:9f:
f6:4a:ef:36:6a:f0:10:00:71:13:bd:10:72:99:c9:
33:b4:3e:c1:94:57:7f:c5:28:24:99:a1:ba:cb:c2:
89:91:73:51:c8:ff:2e:76:11:e1:f2:94:35:0c:a6:
a5:d9:30:d0:52:4c:12:d1:2b:cb:bc:df:af:fa:d5:
84:96:ad:ee:d1:3f:d5:bd:c4:ba:08:c3:38:9d:bd:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:38:B7:33:0C:CF:93:D9:C9:A0:7B:64:9B:E9:71:8F:28:25:A8
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:59:f2:57:7b:3a:50:18:bc:5e:28:4e:6f:ca:11:0a:be:87:
cd:4a:61:96:12:5c:f8:eb:db:15:ad:4e:bd:47:cd:84:da:72:
a8:b5:75:bd:65:73:86:30:60:e8:6c:63:70:e2:a3:e4:0c:16:
c1:8c:d7:27:2b:47:b4:d4:49:16:46:1f:96:b8:be:88:d0:46:
77:e6:64:ee:a8:1f:12:aa:44:ad:ef:56:aa:9a:a5:75:f0:2b:
14:bd:8f:2f:8e:3b:1b:ee:61:b6:46:37:08:03:59:0f:72:c8:
fb:b0:7a:9b:e7:bd:2c:af:76:59:1f:24:2d:ce:2a:29:3b:e2:
3f:15:63:04:b2:58:b7:7c:2d:08:3c:b7:37:61:13:24:94:da:
41:0d:bd:b8:b8:1d:7e:c7:d9:40:03:4a:db:f4:e3:cb:93:55:
b8:3f:ca:69:91:86:2e:7f:74:62:fb:ad:32:23:a1:7b:d9:07:
91:bf:1c:cc:67:99:e9:4e:ad:e5:4b:a7:0e:32:20:e0:82:5f:
29:2e:7f:c2:e4:5a:b0:93:10:5e:2e:06:26:bd:84:f9:80:0d:
8e:a4:67:94:fc:1b:00:a6:de:48:08:92:b8:2b:24:c9:28:bf:
9a:7f:53:a6:f6:9b:31:63:6f:59:89:96:44:f2:db:d3:82:54:
bf:5e:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:12 2026 by rpki-client