Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: 9eitG9aIQvwh9IuY5FD4bcd1tEB6s/qxaI0mQP/fen4=
Subject key identifier: 1F:FF:B8:20:F7:65:B5:04:70:29:99:FF:2A:B0:C5:96:B3:04:F4:25
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019F91DAD6F18637CD9DB85B7C01F8BFD26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1957
Signing time: Fri 24 Jul 2026 02:01:05 +0000
Manifest this update: Fri 24 Jul 2026 02:01:05 +0000
Manifest next update: Sat 25 Jul 2026 02:01:05 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: 6geMLuBc4AeegAcJgJRFxloYYQVdvVyczprv5QuJe8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d6:f1:86:37:cd:9d:b8:5b:7c:01:f8:bf:d2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jul 24 02:01:05 2026 GMT
Not After : Jul 25 02:01:05 2026 GMT
Subject: CN=1fffb820f765b504702999ff2ab0c596b304f425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:65:36:f6:d9:6e:97:ac:fe:d0:06:d9:c7:
06:e5:89:5b:17:93:dd:a5:aa:74:aa:8b:55:73:75:
76:d0:c1:92:a6:c5:2b:32:af:d9:00:04:9d:5f:5c:
9e:92:a8:e1:05:3f:06:81:c9:ab:d9:20:de:4e:90:
fc:cc:59:f1:a1:c7:f1:27:e2:f3:6d:5c:b8:40:e7:
a6:50:c4:f4:60:51:77:b7:19:59:d0:02:b8:c3:9b:
28:ab:3c:3c:49:2c:ce:b4:02:30:3b:f2:c9:53:b2:
e6:72:ec:72:b4:11:e5:f8:f3:aa:1c:bb:af:3b:7c:
fd:e7:1d:9d:4c:7a:f3:1c:12:f7:cf:7d:9f:7b:eb:
ba:40:2f:90:4c:46:2e:2b:9b:f5:d0:35:cb:b6:86:
09:cd:1d:f7:33:09:4d:a4:9d:80:0c:70:0d:d5:14:
cd:0e:cc:10:31:b5:c2:01:59:28:76:ad:95:f3:48:
fe:ae:af:b3:b9:7f:cc:ff:db:69:7e:ce:79:84:36:
0c:e8:93:10:1d:cd:96:b0:b3:8a:4f:5b:3a:35:9c:
8c:a0:f7:4f:91:9c:af:7e:3e:b4:d6:17:6d:2a:92:
ea:87:f2:86:1f:31:b1:3b:9c:13:72:14:82:fc:83:
65:93:b4:ff:f8:89:a9:eb:40:b5:aa:90:9b:be:d7:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:B8:20:F7:65:B5:04:70:29:99:FF:2A:B0:C5:96:B3:04:F4:25
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:00:8c:05:ca:28:5f:f8:71:c9:a6:36:33:f8:76:8d:8d:42:
f9:02:31:9f:ea:f7:e1:d1:3c:cb:c1:d7:30:fc:c5:43:1d:a8:
37:21:c2:f7:43:3e:78:df:9e:59:a2:18:33:57:f2:c8:09:1a:
37:cc:73:93:a4:01:59:e7:36:34:49:22:fe:23:14:30:f4:9d:
9b:0f:04:b4:87:d0:cf:eb:ef:b9:76:ee:31:16:63:e1:d2:b5:
f8:6e:5b:d0:80:d5:60:a3:28:d3:47:3f:be:ef:63:c4:14:aa:
a1:50:e5:92:9a:2e:bd:cc:28:1c:f6:42:05:fc:26:8e:47:f2:
50:98:e5:62:0f:02:0a:a7:5c:70:bf:4a:40:8f:2c:36:89:a5:
ad:41:73:ba:5f:7c:9d:02:70:91:32:20:b6:e6:9c:1a:da:f5:
94:2e:81:3d:3f:b4:9a:4d:db:41:f5:e5:d7:04:2f:c2:ff:97:
6a:50:2b:03:ad:22:34:0f:8f:3b:d9:82:d9:91:8b:62:51:ca:
ca:3d:86:88:f6:04:66:2c:7d:7d:5e:13:c1:bd:e1:10:14:5a:
6a:d6:55:54:5c:aa:af:6a:8b:77:de:5a:c4:fd:d2:5c:85:3b:
4f:9e:d2:d7:e2:b9:11:04:8a:44:09:c9:56:9d:18:e8:41:b6:
57:10:a4:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2tbxhjfNnbhbfAH4v9JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5
ZjRmNGMwHhcNMjYwNzI0MDIwMTA1WhcNMjYwNzI1MDIwMTA1WjAzMTEwLwYDVQQD
EygxZmZmYjgyMGY3NjViNTA0NzAyOTk5ZmYyYWIwYzU5NmIzMDRmNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEJlNvbZbpes/tAG2ccG5YlbF5Pd
pap0qotVc3V20MGSpsUrMq/ZAASdX1yekqjhBT8Ggcmr2SDeTpD8zFnxocfxJ+Lz
bVy4QOemUMT0YFF3txlZ0AK4w5soqzw8SSzOtAIwO/LJU7LmcuxytBHl+POqHLuv
O3z95x2dTHrzHBL3z32fe+u6QC+QTEYuK5v10DXLtoYJzR33MwlNpJ2ADHAN1RTN
DswQMbXCAVkodq2V80j+rq+zuX/M/9tpfs55hDYM6JMQHc2WsLOKT1s6NZyMoPdP
kZyvfj601hdtKpLqh/KGHzGxO5wTchSC/INlk7T/+Imp60C1qpCbvtcu0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB//uCD3ZbUEcCmZ/yqwxZazBPQlMB8GA1UdIwQY
MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt
MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh
LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApACMBcoo
X/hxyaY2M/h2jY1C+QIxn+r34dE8y8HXMPzFQx2oNyHC90M+eN+eWaIYM1fyyAka
N8xzk6QBWec2NEki/iMUMPSdmw8EtIfQz+vvuXbuMRZj4dK1+G5b0IDVYKMo00c/
vu9jxBSqoVDlkpouvcwoHPZCBfwmjkfyUJjlYg8CCqdccL9KQI8sNomlrUFzul98
nQJwkTIgtuacGtr1lC6BPT+0mk3bQfXl1wQvwv+XalArA60iNA+PO9mC2ZGLYlHK
yj2GiPYEZix9fV4Twb3hEBRaatZVVFyqr2qLd95axP3SXIU7T57S1+K5EQSKRAnJ
Vp0Y6EG2VxCkEQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:21 2026 by rpki-client