Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: 3M9b6VB6bcnYZiklr0TZKEQizIP6ZSTTJfQGiy0Anqw=
Subject key identifier: CB:E5:5F:79:6A:D5:D9:9E:81:7D:FE:A8:B0:1A:AA:1C:8E:46:4C:78
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019F93FFF9273F47DDA2E76B76C364E3F89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 0812
Signing time: Fri 24 Jul 2026 12:00:53 +0000
Manifest this update: Fri 24 Jul 2026 12:00:53 +0000
Manifest next update: Sat 25 Jul 2026 12:00:53 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: tx2b/ZDixe9L6qY48+pjBTvWQpCEZ3ieIMC+CXIQ1OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:f9:27:3f:47:dd:a2:e7:6b:76:c3:64:e3:f8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Jul 24 12:00:53 2026 GMT
Not After : Jul 25 12:00:53 2026 GMT
Subject: CN=cbe55f796ad5d99e817dfea8b01aaa1c8e464c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:b9:b9:89:24:a4:4f:bc:ac:23:62:ec:18:
43:38:03:04:8f:87:68:06:71:d5:c9:30:d0:b8:ab:
15:61:f1:70:ea:75:1b:ab:61:56:c2:7d:42:cf:d7:
24:95:bc:5e:6a:4e:6c:db:16:bd:9d:81:2d:b1:02:
ee:1c:22:bc:f1:e9:29:86:d4:cf:97:86:0a:98:48:
ae:a7:e3:ac:23:c5:aa:8d:cb:12:0e:98:c9:32:2e:
5a:65:b8:11:2c:52:89:e4:a5:a2:b7:2e:84:6a:e9:
17:90:26:c2:2a:43:f8:05:c7:58:25:7c:6b:18:4f:
64:50:d2:b4:3e:b0:0e:4d:eb:a3:73:c8:9e:88:a6:
43:93:ad:8a:da:46:fe:0a:c0:84:b7:7d:60:12:b8:
79:4f:28:58:ca:ca:86:37:f1:75:7a:1a:55:43:8b:
34:d2:9f:9e:71:75:65:87:84:2c:58:e3:bb:52:4e:
a9:da:dd:d3:d1:20:84:ac:17:07:26:c8:a3:17:53:
9e:0e:80:aa:a3:35:65:7f:42:7c:d4:01:cf:0d:90:
a7:e2:9b:ee:3a:3c:eb:eb:67:48:14:62:78:b2:a0:
8a:90:c9:c9:01:b7:1b:3d:5a:1f:4b:33:94:31:57:
8f:ab:53:e5:a5:b6:3f:d0:c6:4a:ff:7c:87:52:8b:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:5F:79:6A:D5:D9:9E:81:7D:FE:A8:B0:1A:AA:1C:8E:46:4C:78
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:92:66:27:6b:84:15:a3:3b:5d:35:ad:3c:fe:bb:65:48:
ad:b9:a3:f5:f3:f1:d7:58:d5:09:a9:a0:0e:b1:c0:ed:40:ad:
3b:76:2d:b9:9d:76:c4:cb:5b:17:1e:2c:be:c8:e9:6a:15:e4:
8c:3b:fd:02:b0:32:59:57:7b:b0:f1:cc:60:2d:b7:d0:44:ae:
e2:27:11:dd:61:55:59:c7:5c:af:32:12:03:2c:00:ac:ee:c3:
f5:6e:13:1b:2d:7c:8c:fa:55:80:11:e5:97:66:ca:31:c7:80:
fb:98:be:f4:d3:9c:d7:ae:66:35:42:d2:37:7e:0c:f3:83:3e:
07:c7:ae:d2:7e:de:ad:25:89:71:87:12:df:1f:f0:e3:5f:f8:
4b:f7:fd:e8:08:8c:94:d0:09:dc:82:29:f6:e4:3c:1e:5f:a9:
67:1c:e3:10:de:a4:ca:f2:bf:59:64:bb:3a:a0:04:d5:e5:fb:
b2:8b:7a:a8:a9:0e:4b:98:fd:e6:7a:8a:45:44:5e:66:8e:c1:
5c:63:d1:19:6a:01:85:fa:ff:b7:36:40:b4:d0:18:9f:19:fa:
a2:71:39:b3:db:b9:a3:13:ec:75:56:60:a3:6e:ed:53:85:ca:
1d:14:4b:43:7c:7c:52:69:07:7e:24:e5:6f:6d:26:ec:60:a6:
89:84:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:56 2026 by rpki-client