Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: BksEjS4cYxoiY854juQ3u0BwWMBsJRPhsTuyU+nejAE=
Subject key identifier: 37:9F:B5:E1:4E:C5:0C:86:BA:D8:1F:22:AD:21:C2:18:29:3D:69:C0
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019F94DB2F599660A7E04A857CF40A17E5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 16:00:20 +0000
Manifest this update: Fri 24 Jul 2026 16:00:20 +0000
Manifest next update: Sat 25 Jul 2026 16:00:20 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: 4XITKkRzsbRFM7YQHDmvJc94BNBEKVnn+axmeFrbAfM=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:2f:59:96:60:a7:e0:4a:85:7c:f4:0a:17:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Jul 24 16:00:20 2026 GMT
Not After : Jul 25 16:00:20 2026 GMT
Subject: CN=379fb5e14ec50c86bad81f22ad21c218293d69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:36:c8:d6:a5:11:54:5b:2e:3a:93:e5:b5:
0f:ff:ef:0c:8f:94:3a:86:53:23:64:38:86:b7:0e:
a8:c8:24:7d:80:ab:17:8b:b4:20:13:f8:1a:dc:83:
4a:65:4f:10:36:00:b9:d9:48:e0:a0:e2:52:ee:d6:
d0:41:30:b7:fb:7e:93:b1:66:ce:ba:de:39:a4:7a:
99:de:01:76:a4:10:73:a7:9e:0d:bc:61:99:a2:85:
4f:de:28:56:59:2e:fe:9a:65:53:2a:71:be:8a:11:
43:84:21:39:f0:43:78:cb:a2:24:9e:fc:5a:ac:7d:
83:85:6c:c3:75:86:23:b0:34:e2:f3:61:71:ce:d6:
ea:f6:07:1b:7c:f0:19:08:ca:59:35:44:b6:a7:10:
25:ac:c3:7b:d9:c0:df:21:fe:f1:c3:c7:fb:3c:6c:
eb:2f:7b:92:f3:60:4d:ff:fc:8b:f4:46:cc:0d:5d:
0f:95:93:fd:05:7a:32:3d:54:64:80:9f:af:c4:ea:
cc:53:94:b7:07:18:81:24:e3:0f:4d:ad:7a:73:ed:
00:6d:70:95:0b:09:b2:e7:68:f9:c2:3c:5b:13:37:
c9:a4:49:16:09:5b:7a:e6:54:fa:f9:70:ff:43:5b:
aa:a0:8c:b8:ba:ff:c5:c6:04:c6:78:74:62:ae:8b:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:B5:E1:4E:C5:0C:86:BA:D8:1F:22:AD:21:C2:18:29:3D:69:C0
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2b:fd:10:3f:c9:71:1e:58:a1:62:ad:f6:9d:ab:05:61:e8:
0d:e3:57:09:93:91:50:8f:80:4e:21:2e:8d:4a:9e:6c:a5:d3:
73:3b:8b:dd:bf:2e:26:b5:a2:25:09:63:ac:67:b1:0b:97:31:
70:d9:cf:5f:73:c2:e5:bd:81:34:a7:b6:d5:bf:3c:61:f0:33:
92:3b:e3:83:dd:d1:6a:74:86:38:a5:33:80:6c:9e:bd:cb:ec:
4f:a7:d9:10:32:b4:4f:a7:0b:e2:8c:f0:9a:8a:a4:1d:0e:d2:
55:c1:1a:df:ce:fd:22:eb:18:72:ae:7c:5f:f0:ab:05:f1:5c:
e6:36:fb:2e:0a:20:6b:e0:87:72:1d:31:7f:91:fa:df:0a:30:
c5:5a:cf:2b:57:12:ea:83:79:43:1d:56:67:d8:b9:bb:1e:35:
62:43:57:de:d7:79:80:7f:b1:46:59:e9:f3:75:cc:3a:d7:50:
ab:aa:a7:3d:ca:ea:1e:1f:a1:e9:88:5b:c6:8d:6e:14:34:fb:
b5:31:ba:5d:64:fc:36:88:dd:39:36:1b:bd:e3:57:ed:56:52:
7f:36:14:0f:1f:68:a8:79:35:cb:80:3d:53:7b:09:94:09:14:
02:62:85:46:f1:35:22:ff:40:6f:6a:a0:58:2c:a4:db:55:61:
d9:d1:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:59 2026 by rpki-client