Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
File: lKszmh2jvU9yxzAm71jQthrSdwU.mft (raw, json)
Hash identifier: QqmTpaUOr5ptwIxDhqBdIBjUTo4sRyyIdDEd980G5Us=
Subject key identifier: 04:E4:4A:F5:D0:D5:19:49:A8:DF:7F:8F:86:09:44:99:46:5A:4B:75
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 019F954902ADBDB5C61A04684A35D0338077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:17 +0000
Manifest this update: Fri 24 Jul 2026 18:00:17 +0000
Manifest next update: Sat 25 Jul 2026 18:00:17 +0000
Files and hashes: 1: lKszmh2jvU9yxzAm71jQthrSdwU.crl (hash: 0pnXPR4AS78jIk4Bn1XfYibY5JEHkjEiUicSicQflmw=)
2: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (hash: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:02:ad:bd:b5:c6:1a:04:68:4a:35:d0:33:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Jul 24 18:00:17 2026 GMT
Not After : Jul 25 18:00:17 2026 GMT
Subject: CN=04e44af5d0d51949a8df7f8f86094499465a4b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:82:02:9d:36:cd:91:09:20:43:7f:3d:5c:
fc:58:6d:07:dc:ef:91:04:56:37:ae:b1:51:3f:e9:
cc:3e:2d:a9:0c:41:e4:ad:09:ce:ec:eb:6b:cd:63:
d7:a5:87:2e:bf:c6:cb:ad:11:49:3b:e3:61:3e:07:
5a:9c:33:7e:6f:86:dd:32:7b:5c:27:ee:ac:e7:6c:
35:ce:98:c5:41:4e:df:e2:6e:89:6b:33:da:27:bc:
42:4b:8b:ad:b0:15:b7:82:28:b5:bb:70:51:ae:31:
fb:47:eb:44:79:ba:d3:e2:a6:af:47:4f:fd:f1:76:
75:1d:38:ea:a1:2a:3b:87:e5:ee:3a:b9:f8:d9:62:
e7:e5:f1:91:c0:28:a1:4b:5c:f2:29:06:ca:06:b1:
08:0b:d5:6e:a8:8a:d8:39:11:a0:c7:5b:5e:ac:24:
93:68:88:d3:a0:9e:bf:37:33:91:79:3d:05:f6:d3:
e4:f9:1c:b5:fc:18:80:78:00:59:fb:1e:c6:7c:70:
77:d2:83:79:f1:c6:dd:a7:e8:a5:4f:ad:9f:73:cf:
52:f8:46:21:17:93:11:e3:e6:a2:d7:0f:54:8a:5d:
ce:43:6c:a3:f7:b5:36:f2:4f:84:df:22:61:e2:83:
c8:24:de:ea:c2:f8:c2:33:85:44:d1:9e:be:19:7f:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:4A:F5:D0:D5:19:49:A8:DF:7F:8F:86:09:44:99:46:5A:4B:75
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ff:99:2a:68:64:b6:e5:00:ea:87:5d:39:f3:56:bc:be:d4:
ae:f7:ec:d3:47:e1:5b:14:e8:f9:9f:1e:1e:40:ba:9a:75:00:
ca:9f:24:44:70:83:3f:6c:47:bb:d6:50:eb:8a:91:15:ac:31:
54:45:6c:23:b8:86:83:9e:07:43:94:6d:e2:ba:27:62:83:3a:
77:11:a0:90:ec:38:6f:bb:d0:60:b4:ad:4f:1d:96:6b:60:ad:
5e:6c:49:49:5f:0b:48:be:64:82:f9:80:b8:8a:28:94:d4:82:
57:66:64:fd:82:80:cd:28:9d:09:03:c4:39:c1:47:94:ea:30:
38:1f:ad:eb:6c:10:51:f6:7d:97:3d:1c:a8:07:64:5f:c8:f3:
01:8a:4f:12:45:b4:f5:fe:c1:14:59:91:54:57:c2:9c:c4:15:
57:89:f7:92:be:20:93:86:e9:6c:3e:92:cd:20:37:4a:d0:85:
6e:10:4d:2d:c7:b3:3d:92:9b:ba:29:f6:80:e2:62:6c:e5:01:
18:60:2e:13:42:a4:6e:69:13:35:7f:ae:e6:70:d1:af:91:3d:
b1:f7:ea:0d:6f:ae:ec:ea:06:08:c1:1d:c5:74:8c:39:6f:de:
e0:91:1a:cc:46:18:92:38:89:c2:1c:14:99:bb:28:cc:01:62:
bc:49:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:23 2026 by rpki-client