Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: /yfMSsxUhxMN8dlnrSa2ka89QyqzowAysWE0X60zNkI=
Subject key identifier: 04:DD:77:CF:70:DB:7B:8D:AF:53:3D:F4:19:D5:CC:D1:CD:00:CF:5A
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019F935B7018E1F6FC6FFF5EE17FB394C058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:10 +0000
Manifest this update: Fri 24 Jul 2026 09:01:10 +0000
Manifest next update: Sat 25 Jul 2026 09:01:10 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: zRnUFzMDuAbIk9uwR8NrygNYrcANAmr0m3LJTn8fo84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:70:18:e1:f6:fc:6f:ff:5e:e1:7f:b3:94:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jul 24 09:01:10 2026 GMT
Not After : Jul 25 09:01:10 2026 GMT
Subject: CN=04dd77cf70db7b8daf533df419d5ccd1cd00cf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:27:9b:1b:f7:f5:6c:ee:09:80:51:6d:54:
79:77:8a:82:b9:39:ce:85:ec:73:fa:63:d9:ff:34:
1a:fc:e6:ff:9f:6e:1c:e3:54:db:8c:64:68:81:7a:
a6:ec:9b:68:20:84:38:a0:b9:23:42:67:78:ad:4b:
f5:e1:df:83:60:25:33:77:e2:42:11:60:89:17:7b:
b8:fd:53:a6:06:ab:61:bc:d3:54:31:33:6c:c0:1c:
2e:13:73:5b:0c:16:b7:81:d1:0d:95:4d:2d:bd:35:
2c:c7:8f:77:e5:50:10:1b:49:be:81:17:bf:17:3f:
50:fb:02:8d:3c:eb:6d:2c:97:da:33:41:62:3c:65:
c0:ef:38:54:84:55:9d:7d:0f:ae:90:46:a2:1c:fa:
e4:aa:57:32:5b:f7:4d:3d:f5:63:ef:81:c4:b8:e2:
d0:3c:31:31:60:0a:47:fa:f8:66:98:ff:79:88:e0:
58:e4:51:d7:92:e8:7a:49:3c:2e:42:8b:8e:01:b2:
bb:e4:09:7f:47:ed:a9:49:28:23:52:61:54:48:32:
b0:40:5a:8c:35:30:b8:db:9d:9d:4b:b8:7a:78:a8:
cb:d7:92:ee:e2:97:72:5c:ff:0c:7e:6f:c0:eb:77:
a9:c0:92:db:3d:ed:a5:f2:1d:65:8d:33:fb:e6:df:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:77:CF:70:DB:7B:8D:AF:53:3D:F4:19:D5:CC:D1:CD:00:CF:5A
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:36:ee:f8:89:92:14:df:30:2a:74:37:5d:04:6e:d1:fe:69:
d9:0a:94:0a:cd:d5:17:d8:b7:84:5d:1a:4e:9d:23:f4:ba:74:
f2:ae:e5:cf:05:0f:14:cd:20:99:0d:55:f1:20:19:8b:91:23:
f6:5c:61:49:33:59:93:67:8a:a0:a6:08:fb:82:c1:89:22:63:
19:a5:ea:ef:3f:64:a0:23:bd:31:52:37:c6:88:8c:f4:7b:4b:
4d:39:75:87:00:6e:ed:a4:58:60:5e:63:94:ad:59:ea:4a:0c:
64:0b:59:ea:bc:6e:9a:9b:80:f2:60:61:fc:b8:7c:11:0b:f6:
65:80:0b:61:89:d6:7d:86:5b:cd:39:26:ea:8e:12:db:82:33:
14:4f:54:77:50:73:c2:10:42:1f:10:da:aa:2b:df:b4:f5:15:
12:e7:1b:cb:99:e9:98:dc:d9:2a:91:09:f0:d3:b4:5d:95:e1:
22:72:07:72:c2:14:1e:5e:5e:ee:13:38:b8:ab:4f:be:7e:53:
64:5b:62:8d:d0:22:53:aa:80:c6:6e:08:fb:0f:d9:c5:c3:35:
58:0a:53:ed:92:e2:49:89:27:60:5c:2e:57:62:ce:84:46:d1:
ad:83:dc:f8:7c:04:6b:bb:3a:fc:0c:b7:28:d8:dc:50:c4:08:
3a:a7:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:31 2026 by rpki-client