Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: ROth6Ji/z2mjARk/P+//3V56cyEJnHD0K4wnW/7V8y8=
Subject key identifier: 04:3C:CE:01:46:EF:5A:7B:90:88:02:7F:B8:1F:C3:92:DF:17:98:D6
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019F916D6DAED74F183FC673D705951233F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:01:35 +0000
Manifest this update: Fri 24 Jul 2026 00:01:35 +0000
Manifest next update: Sat 25 Jul 2026 00:01:35 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: cbT3eTBUllrf0ikObTS3o9ImNHQJeNmOk5FHsOBb+20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:6d:ae:d7:4f:18:3f:c6:73:d7:05:95:12:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Jul 24 00:01:35 2026 GMT
Not After : Jul 25 00:01:35 2026 GMT
Subject: CN=043cce0146ef5a7b9088027fb81fc392df1798d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:26:b5:6d:50:00:3a:82:43:9b:8e:ee:32:
22:eb:75:86:87:c5:01:90:fb:40:ba:77:3c:58:a5:
a9:90:47:05:62:37:d7:87:16:38:55:56:bf:3b:68:
a9:68:06:e1:52:34:34:41:8b:9f:61:45:2b:92:90:
4a:3e:dd:ba:43:88:78:e5:1f:0f:63:7e:9e:a3:29:
9d:48:7a:f9:9a:5a:51:43:01:49:f6:cc:7a:ac:37:
00:1c:70:17:2c:01:62:61:3e:48:d2:8c:a0:48:ef:
28:de:47:1f:4c:b1:89:e2:a3:9c:f1:fc:0f:98:bc:
9e:b4:b4:61:a8:44:86:2a:f9:e0:dc:fb:fd:63:48:
c8:de:fc:e3:1d:e9:ec:65:66:f9:4d:e4:93:3b:9f:
f3:75:aa:51:a3:cd:b4:0a:27:6e:eb:4e:27:9a:76:
31:26:4a:33:cd:d8:85:15:5a:20:8c:7c:72:c0:42:
02:35:43:e3:5b:6b:6e:61:ce:7d:1d:75:00:dd:3a:
e4:f4:43:61:1b:80:63:7c:7e:60:6a:5a:84:2f:9c:
ad:c2:0e:58:6e:e8:0f:b6:ad:b6:a2:5b:a0:4c:e3:
4a:44:94:39:a9:a6:3e:59:26:fb:bc:54:02:6c:dc:
7b:eb:32:49:11:a2:f7:71:fd:6c:9c:f5:71:0b:16:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3C:CE:01:46:EF:5A:7B:90:88:02:7F:B8:1F:C3:92:DF:17:98:D6
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bf:1b:c3:ce:cb:4d:61:1d:86:1e:a4:a8:38:8a:29:f2:b1:
d0:46:22:a4:4e:10:29:e2:94:00:a6:c4:ef:5a:56:c7:80:c2:
b2:59:2f:ab:3a:91:95:5e:84:7a:c4:90:0e:30:ec:2e:5b:b7:
f1:06:b4:64:80:d1:4b:78:04:a3:05:79:db:5c:46:9b:f4:c7:
00:dc:39:22:ba:cb:20:57:86:fb:29:6f:66:d4:65:18:65:d4:
d1:99:18:b9:99:71:d0:12:a1:a6:c3:0f:74:37:92:4e:bb:80:
bf:90:58:ea:7c:f6:c0:36:45:d8:04:84:cf:91:76:c9:f0:20:
39:4d:8b:08:d5:af:fb:11:6d:76:02:af:4b:29:dd:ec:10:7c:
92:f0:b8:71:35:ed:01:67:1f:f8:51:c5:69:33:51:f3:6a:c3:
f5:d3:3f:c7:21:b3:92:a0:77:ea:5d:73:b4:c5:21:76:83:9d:
03:46:0f:ac:2f:8e:9a:40:1f:5f:10:8b:aa:3a:ba:61:6c:9b:
34:69:75:9b:bd:c5:f6:c0:68:de:81:35:64:ad:2a:57:60:da:
5f:a6:50:03:f4:c5:6e:85:e2:56:6b:ba:62:a8:71:d8:06:c9:
18:71:8b:f2:38:7e:e0:a0:ac:3c:27:95:ad:be:fd:9a:fc:fc:
93:e5:3f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:24 2026 by rpki-client