Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: T4iS2OM99M1PW1T7YBIh3K2jlVKjKU5cHMeC2Uzn4jk=
Subject key identifier: 76:54:EC:50:B4:71:BE:7C:C3:3C:18:5E:A0:D2:7F:07:41:83:87:FD
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019F90C8417E09664C22D5098EBEDB302AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:01:10 +0000
Manifest this update: Thu 23 Jul 2026 21:01:10 +0000
Manifest next update: Fri 24 Jul 2026 21:01:10 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: SHiQi0/BxZRGonQ9FMnU11tyawK9cLe6YNTZToz1SCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:41:7e:09:66:4c:22:d5:09:8e:be:db:30:2a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jul 23 21:01:10 2026 GMT
Not After : Jul 24 21:01:10 2026 GMT
Subject: CN=7654ec50b471be7cc33c185ea0d27f07418387fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:71:33:79:b3:d8:84:6a:8c:a1:f7:b3:48:
75:0a:b3:26:40:ec:18:89:d6:af:ab:7e:63:44:75:
58:c6:94:c0:12:ac:f8:0c:fd:54:17:fa:b4:11:43:
25:45:ea:f5:a7:e1:57:7a:39:ce:64:67:98:bf:e3:
49:c5:13:75:05:80:0a:0b:69:1b:69:5c:9f:2f:9a:
f2:ab:bb:e9:1a:c3:8e:ff:9b:41:a8:af:d6:9d:1b:
aa:b8:66:00:44:b1:a9:45:b5:89:26:eb:bb:a8:7b:
41:78:d0:4f:ce:05:98:94:c8:39:f8:34:d0:5e:ab:
b6:06:67:7e:3c:55:4f:54:d1:1d:71:8d:fa:40:3b:
f6:1b:23:0a:6b:7f:06:cb:6a:c2:d0:f9:54:37:07:
30:34:2b:c4:5a:83:10:7d:fc:96:03:dd:23:cf:92:
e7:9b:35:ed:3a:61:d9:52:f0:24:82:c1:e0:42:9b:
ca:b2:0c:75:e0:7e:30:5c:97:6d:da:2a:78:d9:8a:
08:51:7c:20:d3:ba:d1:2d:d5:4f:e2:dc:de:7e:d4:
38:74:ba:31:93:8a:54:3d:2d:de:46:33:38:75:67:
53:5f:5d:d2:f9:63:fe:22:bf:5a:fe:3c:3f:31:e5:
9e:63:77:7b:c5:67:09:3a:c8:37:96:48:8c:d1:94:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:EC:50:B4:71:BE:7C:C3:3C:18:5E:A0:D2:7F:07:41:83:87:FD
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:58:be:b5:17:18:fa:fa:ac:99:31:0a:51:27:f3:d5:05:5e:
72:97:05:ea:37:27:11:1c:35:a1:15:fe:bb:c9:73:ce:7b:ac:
cb:39:1c:42:d7:2c:5e:d2:2e:e6:2c:ee:79:e3:fc:de:66:da:
d8:36:65:eb:b3:a0:17:05:9c:27:fc:72:30:17:fa:89:e6:cd:
9d:d8:d4:c6:a8:ff:3b:b8:6b:7d:e0:62:48:2b:0d:c2:f9:89:
48:a1:3a:cc:e4:24:45:1d:b6:ca:1e:ea:9d:49:bd:c2:78:d7:
cf:60:e7:7a:f9:12:2f:d3:c6:9c:37:24:9c:fc:9e:d3:b4:49:
3d:03:c3:c7:90:13:5e:29:c4:b6:b6:56:84:f6:5d:6d:d2:51:
33:86:f8:04:c2:3b:6a:06:d4:00:2d:fe:bd:a0:a6:bc:7a:d2:
4d:1d:87:23:c6:f9:dd:a8:cf:60:9b:b8:ab:6d:85:f2:d1:8c:
39:a8:66:a7:3d:d5:f4:50:4d:db:6e:f7:1c:c1:bf:a2:82:93:
9d:a1:53:5e:82:53:20:97:6e:c0:d3:da:54:92:be:54:a2:2c:
76:65:be:35:04:a0:ae:de:b2:3f:5c:30:10:c8:97:77:58:1d:
cb:d9:e4:01:80:9b:8a:ce:88:2a:73:2f:98:70:04:6b:33:f3:
c3:f9:bd:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyEF+CWZMItUJjr7bMCrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njg2NjU2MmQ5ZjI1ODMxZWMwYWNlOGE5ZDhjZDBlNTk0
ZDcxZmMwHhcNMjYwNzIzMjEwMTEwWhcNMjYwNzI0MjEwMTEwWjAzMTEwLwYDVQQD
Eyg3NjU0ZWM1MGI0NzFiZTdjYzMzYzE4NWVhMGQyN2YwNzQxODM4N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23txM3mz2IRqjKH3s0h1CrMmQOwY
idavq35jRHVYxpTAEqz4DP1UF/q0EUMlRer1p+FXejnOZGeYv+NJxRN1BYAKC2kb
aVyfL5ryq7vpGsOO/5tBqK/WnRuquGYARLGpRbWJJuu7qHtBeNBPzgWYlMg5+DTQ
Xqu2Bmd+PFVPVNEdcY36QDv2GyMKa38Gy2rC0PlUNwcwNCvEWoMQffyWA90jz5Ln
mzXtOmHZUvAkgsHgQpvKsgx14H4wXJdt2ip42YoIUXwg07rRLdVP4tzeftQ4dLox
k4pUPS3eRjM4dWdTX13S+WP+Ir9a/jw/MeWeY3d7xWcJOsg3lkiM0ZQeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZU7FC0cb58wzwYXqDSfwdBg4f9MB8GA1UdIwQY
MBaAFJVoZlYtnyWDHsCs6KnYzQ5ZTXH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmIt
OWQ3Zjg2ZjBkNDc3LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmItOWQ3Zjg2ZjBkNDc3
LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVi+tRcY
+vqsmTEKUSfz1QVecpcF6jcnERw1oRX+u8lzznusyzkcQtcsXtIu5izueeP83mba
2DZl67OgFwWcJ/xyMBf6iebNndjUxqj/O7hrfeBiSCsNwvmJSKE6zOQkRR22yh7q
nUm9wnjXz2DnevkSL9PGnDcknPye07RJPQPDx5ATXinEtrZWhPZdbdJRM4b4BMI7
agbUAC3+vaCmvHrSTR2HI8b53ajPYJu4q22F8tGMOahmpz3V9FBN2273HMG/ooKT
naFTXoJTIJduwNPaVJK+VKIsdmW+NQSgrt6yP1wwEMiXd1gdy9nkAYCbis6IKnMv
mHAEazPzw/m9xw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:52 2026 by rpki-client