Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
File: lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft (raw, json)
Hash identifier: d9cljrxZECdCF0VNKMTQBIb1n/tUWjkDd61zvmoi0kw=
Subject key identifier: CA:5E:EA:C1:3C:AD:E3:17:17:76:F2:1F:F9:43:07:57:81:F5:33:8C
Authority key identifier: 94:3B:40:BB:78:3C:AC:94:54:E7:D5:4B:DE:5E:6D:8E:21:A2:31:94
Certificate issuer: /CN=943b40bb783cac9454e7d54bde5e6d8e21a23194
Certificate serial: 019F94DBC108FDBF35670C6EC30546774D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
Manifest number: 17
Signing time: Fri 24 Jul 2026 16:00:57 +0000
Manifest this update: Fri 24 Jul 2026 16:00:57 +0000
Manifest next update: Sat 25 Jul 2026 16:00:57 +0000
Files and hashes: 1: OysY4nioAaKrGqetn-RaUnYXgmY.asa (hash: Ye8EtwPz+uC1ZzZz8qFsT6NC/SCbeU8qHxA+5xPb8m0=)
2: lDtAu3g8rJRU59VL3l5tjiGiMZQ.crl (hash: 46Gn92Iapynl9nE8glBZs8y/I9q6YFudhqdjtEj8NZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:c1:08:fd:bf:35:67:0c:6e:c3:05:46:77:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943b40bb783cac9454e7d54bde5e6d8e21a23194
Validity
Not Before: Jul 24 16:00:57 2026 GMT
Not After : Jul 25 16:00:57 2026 GMT
Subject: CN=ca5eeac13cade3171776f21ff943075781f5338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:69:88:39:da:1b:7c:aa:40:91:ce:4a:df:
4e:e0:d6:28:ec:3e:08:4a:87:18:fb:f6:9e:a3:54:
a2:c3:2f:f9:f4:2d:ca:f0:13:38:63:3c:7e:23:e5:
1b:a4:33:52:98:cf:3c:48:a3:d8:18:ed:4d:0b:0f:
f6:84:d0:12:3d:0e:3f:79:7a:63:08:9f:60:eb:e2:
48:16:91:e0:04:a9:f4:f3:44:a6:10:db:21:ce:1d:
28:18:73:08:47:3d:79:4c:3c:e1:b8:c3:35:79:c8:
27:f6:e7:11:e6:dd:d0:c4:9e:ce:21:91:cb:de:ea:
64:b7:11:3b:76:28:a6:b5:43:22:40:ac:82:30:82:
bc:af:0b:01:8d:3b:7f:ed:9a:87:95:ed:4a:9c:89:
9b:3f:2e:b1:7a:d5:9c:10:cb:a0:56:b9:81:75:b7:
60:bb:7e:62:ee:0b:96:c4:9a:c9:27:7f:8f:3b:c3:
61:fc:39:cd:54:26:16:00:c0:73:76:92:be:9a:bc:
e8:5a:e0:37:9b:e6:a8:83:5c:df:c7:69:f3:df:05:
ba:c0:ea:14:32:ca:1b:d3:c5:e9:4c:fd:77:0d:66:
a3:a1:90:f8:de:b9:dc:5b:7b:74:72:75:6d:11:08:
5d:a7:6f:fb:a9:78:5a:ec:20:cb:da:c5:56:d2:e0:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:EA:C1:3C:AD:E3:17:17:76:F2:1F:F9:43:07:57:81:F5:33:8C
X509v3 Authority Key Identifier:
keyid:94:3B:40:BB:78:3C:AC:94:54:E7:D5:4B:DE:5E:6D:8E:21:A2:31:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c6:0f:f5:38:4c:e6:95:c8:f9:71:9e:5b:a0:10:43:29:b2:
cb:11:9c:ba:58:8c:ff:8e:22:73:2a:a6:a4:c3:d1:df:8a:9a:
b8:70:2f:35:12:b9:9f:38:33:75:e5:eb:6d:5a:ba:e9:5a:7c:
3c:bd:b7:96:69:bb:57:53:97:13:b0:9c:38:b7:35:cb:db:23:
3d:5f:0e:fd:3e:d0:6e:55:5c:b8:4c:ae:a2:0f:77:73:01:7b:
ed:6f:75:b3:9d:51:b6:fd:a7:8a:aa:c8:27:bf:18:71:19:8f:
38:51:4c:b9:f0:0d:83:cc:5b:a1:3d:43:55:63:1e:9b:47:70:
12:3c:05:3a:5a:8f:ee:71:35:d6:c1:8e:5e:69:f2:e3:8e:8e:
c8:1e:6b:2f:0b:11:f5:d8:f8:58:b0:06:ef:74:6e:e0:80:2d:
90:a5:67:ac:cb:06:cb:99:9f:7e:28:7e:d4:0d:ea:2f:e5:87:
c3:2e:78:0e:e5:d8:7d:f4:b3:51:b3:c5:fe:24:8c:22:07:f6:
10:ee:b9:4c:ba:2c:e4:dc:59:9d:50:2d:60:ed:27:27:89:f9:
d3:ab:32:03:73:dd:65:a6:8f:b9:04:14:23:bd:41:b5:d3:f3:
93:87:a0:4a:72:88:f0:fb:57:0d:37:2e:31:5a:d3:ce:4b:f6:
55:8e:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:56:47 2026 by rpki-client