Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: lk7KFT95Vsa766wiPxXL8RLl7lLm3TvhbKOSzj2s2qE=
Subject key identifier: 3D:61:18:4E:65:E9:1B:91:93:4A:BD:58:C4:BE:19:DC:4C:F8:97:4A
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019F940007EE68D9E6EFECEE2BE531FAC076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1949
Signing time: Fri 24 Jul 2026 12:00:57 +0000
Manifest this update: Fri 24 Jul 2026 12:00:57 +0000
Manifest next update: Sat 25 Jul 2026 12:00:57 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: LZpugmLWNTv1Q+PPxfQhbcIcHGs514dyKynX0KUy6VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:07:ee:68:d9:e6:ef:ec:ee:2b:e5:31:fa:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Jul 24 12:00:57 2026 GMT
Not After : Jul 25 12:00:57 2026 GMT
Subject: CN=3d61184e65e91b91934abd58c4be19dc4cf8974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:02:9a:ef:4f:16:b4:c7:36:40:ec:f8:28:
52:af:f7:5a:62:eb:37:95:b7:a3:c4:ec:bb:16:0a:
44:0d:18:f5:b4:fd:95:a3:4c:3a:a1:2f:90:86:dd:
dd:5e:94:be:78:db:a7:65:60:33:cf:06:42:76:5c:
62:4b:13:96:d0:c0:ae:31:a1:c2:e8:16:01:64:d4:
38:4f:01:2d:02:5b:af:a9:64:58:99:3c:e6:9b:e6:
e0:32:38:b5:59:63:1e:51:14:88:92:c6:ff:39:61:
33:e7:9b:7f:b0:ce:e5:9d:20:da:6b:c4:1f:18:a9:
a5:14:62:e0:78:c1:db:52:53:78:98:e1:1c:87:35:
af:40:a5:1a:91:30:02:1a:20:4b:0d:f9:15:e9:5a:
41:98:1e:b1:7c:f4:32:3c:00:cc:c6:9e:4f:45:fd:
ed:5e:4b:33:cb:e2:54:e7:d8:72:12:94:ba:bb:1d:
c6:0d:14:76:08:f5:6b:a9:19:d5:b5:3f:25:7f:85:
6f:ce:a6:d3:87:7d:e6:59:28:38:11:f3:48:c1:b5:
42:ac:c9:c8:a4:ff:25:59:3f:29:ed:fc:89:31:1f:
74:a0:59:61:db:95:ce:f4:0e:b2:6e:90:20:a5:37:
00:ad:08:be:42:b1:c4:f2:00:e3:d0:2f:08:3c:f5:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:18:4E:65:E9:1B:91:93:4A:BD:58:C4:BE:19:DC:4C:F8:97:4A
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f3:78:b3:88:0a:a4:3f:a4:ff:59:24:f2:7b:9a:77:d1:c9:
9c:ae:6e:cc:94:1f:23:a8:ff:a4:7a:7c:57:fe:bb:84:48:5a:
92:d1:f5:9f:df:68:11:cd:80:2b:a8:82:ac:29:7b:ce:0a:e9:
19:59:a8:20:fc:bb:2a:c2:6e:cd:a6:71:e4:a4:87:01:b7:86:
89:82:8a:a6:e0:6f:ae:90:5c:ec:7e:cd:0c:39:a3:68:e2:69:
fb:b0:2c:9e:3c:a9:a4:3a:6b:8e:69:99:aa:69:a2:c0:a0:d9:
af:35:a9:63:a7:29:21:46:4f:0b:7a:36:d2:75:7c:1a:31:59:
23:03:ab:0d:26:67:05:f6:14:54:68:5a:6b:23:4b:3f:5a:88:
d3:bd:9c:66:51:1b:de:2d:f3:f2:e9:a9:d2:d6:bc:03:66:b2:
68:52:04:79:dd:17:1e:51:25:63:03:aa:7f:ca:84:57:b1:b9:
2f:ec:c8:4f:55:42:f5:23:cd:64:0f:5f:09:bc:4e:d1:d7:3d:
da:d1:64:73:91:79:0d:c2:de:95:43:26:66:fd:c3:6c:48:70:
db:33:87:72:86:55:b4:b2:7d:df:20:60:92:cb:45:ef:2f:1d:
10:ee:a4:35:4f:7a:a3:12:6d:88:69:e1:8a:6f:7c:7f:af:27:
f7:7f:ec:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UAAfuaNnm7+zuK+Ux+sB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1
ODhlOGMwHhcNMjYwNzI0MTIwMDU3WhcNMjYwNzI1MTIwMDU3WjAzMTEwLwYDVQQD
EygzZDYxMTg0ZTY1ZTkxYjkxOTM0YWJkNThjNGJlMTlkYzRjZjg5NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM0Cmu9PFrTHNkDs+ChSr/daYus3
lbejxOy7FgpEDRj1tP2Vo0w6oS+Qht3dXpS+eNunZWAzzwZCdlxiSxOW0MCuMaHC
6BYBZNQ4TwEtAluvqWRYmTzmm+bgMji1WWMeURSIksb/OWEz55t/sM7lnSDaa8Qf
GKmlFGLgeMHbUlN4mOEchzWvQKUakTACGiBLDfkV6VpBmB6xfPQyPADMxp5PRf3t
Xkszy+JU59hyEpS6ux3GDRR2CPVrqRnVtT8lf4VvzqbTh33mWSg4EfNIwbVCrMnI
pP8lWT8p7fyJMR90oFlh25XO9A6ybpAgpTcArQi+QrHE8gDj0C8IPPVuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1hGE5l6RuRk0q9WMS+GdxM+JdKMB8GA1UdIwQY
MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt
MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl
LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvN4s4gK
pD+k/1kk8nuad9HJnK5uzJQfI6j/pHp8V/67hEhaktH1n99oEc2AK6iCrCl7zgrp
GVmoIPy7KsJuzaZx5KSHAbeGiYKKpuBvrpBc7H7NDDmjaOJp+7AsnjyppDprjmmZ
qmmiwKDZrzWpY6cpIUZPC3o20nV8GjFZIwOrDSZnBfYUVGhaayNLP1qI072cZlEb
3i3z8ump0ta8A2ayaFIEed0XHlElYwOqf8qEV7G5L+zIT1VC9SPNZA9fCbxO0dc9
2tFkc5F5DcLelUMmZv3DbEhw2zOHcoZVtLJ93yBgkstF7y8dEO6kNU96oxJtiGnh
im98f68n93/sew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:37 2026 by rpki-client