Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: TWqi31IBuxlF77JRpqqb6xJbwLfm0QpDnBapNxOEQfI=
Subject key identifier: 45:DE:BB:4C:1A:66:A0:36:1F:00:96:75:77:47:98:29:B7:28:58:F4
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019F93C886EAB44F78F2E2B3F126D4FAA2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 08FC
Signing time: Fri 24 Jul 2026 11:00:20 +0000
Manifest this update: Fri 24 Jul 2026 11:00:20 +0000
Manifest next update: Sat 25 Jul 2026 11:00:20 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: J3Nj5fADYL4SUkddOTVjrz2rLVx9/mtHvRVsQiHQBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:86:ea:b4:4f:78:f2:e2:b3:f1:26:d4:fa:a2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Jul 24 11:00:20 2026 GMT
Not After : Jul 25 11:00:20 2026 GMT
Subject: CN=45debb4c1a66a0361f00967577479829b72858f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:5a:b7:c7:a8:65:6b:72:a9:a7:a0:50:05:
6a:88:97:c6:69:d5:75:7c:8b:67:49:00:9e:e4:84:
4c:97:7a:91:c3:0f:56:33:c6:09:aa:c8:c1:dd:95:
cd:1e:e2:18:c9:82:2c:11:d6:4f:e3:3a:7f:e2:e0:
83:3a:13:90:70:33:00:26:31:3b:cc:06:fd:ac:c2:
c4:36:f8:5d:6d:b4:0a:1e:66:24:d3:af:c1:86:0a:
5b:64:c0:5c:96:5f:46:1c:25:c5:ed:92:04:4a:b5:
cc:75:c0:1f:53:81:49:32:0c:f6:74:51:c9:e2:4c:
f0:c5:f8:ce:4c:fa:73:88:03:ba:ac:b2:16:a2:98:
61:9a:fd:62:45:fd:cb:d6:3d:12:54:fe:a0:9c:4a:
08:17:f8:fa:92:cc:a9:51:0d:ef:1f:af:fd:0c:6f:
5c:f3:e8:ac:de:95:de:5d:53:de:a7:5e:d5:46:3a:
f1:54:7e:18:55:f9:4a:39:be:d2:c4:02:28:38:e6:
ea:2c:fd:9d:b7:f7:3d:79:cd:db:6e:3b:26:ff:9c:
67:dd:89:b1:03:0a:b3:1a:01:a3:e2:dd:82:d7:74:
cc:3f:2d:05:bf:93:a8:dd:ca:b6:4b:eb:a3:90:f7:
a0:d8:7d:72:c7:2b:ba:09:0f:44:16:9c:48:5a:ad:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:BB:4C:1A:66:A0:36:1F:00:96:75:77:47:98:29:B7:28:58:F4
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c3:90:b0:ef:0b:09:12:2f:ac:bb:0d:a2:b4:fc:e5:7b:ac:
b6:87:74:5f:02:18:05:4f:4b:3f:0f:61:67:23:74:94:45:12:
a7:62:66:d6:7b:2b:da:03:ff:41:2f:18:8e:cf:89:ac:8a:77:
6b:49:ad:0b:04:86:16:01:50:55:8e:14:1c:4b:b9:34:11:47:
08:42:43:30:fb:93:f5:e3:90:35:d0:17:5a:9d:4b:1a:8c:d5:
bf:15:7b:a9:f3:59:30:b6:52:62:97:5b:b2:97:fb:f3:74:46:
95:f1:3a:bd:ac:f1:6f:6a:a6:5a:54:1f:13:39:2d:62:16:01:
1a:a2:fc:a4:1e:8f:1a:8f:2f:4b:18:f1:f1:2b:56:bf:79:c9:
87:fa:86:b1:14:4c:1a:4b:70:60:19:61:ac:34:ba:35:e6:ed:
64:10:b3:06:de:d1:bd:6f:8b:71:96:8b:e6:ac:fd:63:ae:1c:
89:6e:a8:f2:e7:5b:04:d9:16:22:6c:a4:f5:93:d6:4d:d6:fe:
be:53:76:35:5a:ff:94:65:d4:d2:f4:8c:a9:3f:b7:19:e4:9e:
89:39:b6:fb:bd:a6:e0:7c:7d:a7:e3:1e:b4:1d:c6:b7:23:c4:
ba:14:07:fc:26:1e:5f:63:86:93:fc:23:90:66:64:48:a0:4f:
a2:83:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:25:55 2026 by rpki-client