Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: 3cPNWscv4KQAs8SQwvIL6eLtOMairAzZeSxXboQYoyw=
Subject key identifier: F9:8E:0C:6A:3F:36:9C:03:28:7C:EC:B2:FA:58:3C:50:E7:81:41:8B
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019F965C04FE676934888CDAD8FFE7EC4559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 067A
Signing time: Fri 24 Jul 2026 23:00:40 +0000
Manifest this update: Fri 24 Jul 2026 23:00:40 +0000
Manifest next update: Sat 25 Jul 2026 23:00:40 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: Q2ryZ1NNoQ3+IkqhQgRCuUeWuyfBMvNWAadYq3kcjdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:04:fe:67:69:34:88:8c:da:d8:ff:e7:ec:45:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Jul 24 23:00:40 2026 GMT
Not After : Jul 25 23:00:40 2026 GMT
Subject: CN=f98e0c6a3f369c03287cecb2fa583c50e781418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:f8:36:be:7a:f3:4f:4f:fa:17:d3:1f:2f:
c4:66:a8:25:bd:b6:49:b1:e7:60:65:44:6e:e3:35:
3c:0e:0e:9e:97:78:b0:6b:b6:51:2e:59:3a:c9:b5:
ca:07:32:06:8f:79:7c:aa:c5:89:06:77:7b:0a:7b:
4b:56:c5:ba:9f:af:81:ee:86:a4:4e:fa:92:fb:56:
85:d3:29:42:f5:e7:05:2d:21:7e:e6:b3:66:0f:98:
6d:ec:0d:e9:02:52:81:92:1e:74:9d:a6:6f:5e:88:
7a:06:a7:36:a3:e5:ff:86:e1:fb:c3:be:c7:0a:e1:
a1:32:3b:2e:52:87:df:c6:8a:7d:43:8e:c5:77:d2:
90:bb:9a:64:9d:1b:52:85:24:b0:97:c2:0a:27:c8:
cc:bb:f3:ba:1b:bb:7e:a4:cb:a2:40:ef:83:8a:c7:
82:83:19:55:15:4c:0c:75:4e:01:5c:c3:a6:d3:7f:
cd:d4:28:65:66:54:05:8b:74:90:44:c6:2f:f4:de:
5e:52:42:e0:96:c1:03:a2:41:74:ae:90:22:08:d1:
4f:ec:68:42:41:d0:08:36:be:d0:1a:a4:8b:b1:1d:
08:5f:cc:ba:70:f0:fe:47:5b:89:a2:49:32:3d:0c:
ee:8e:12:36:b5:c7:f7:da:bf:26:ca:40:48:ee:eb:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:0C:6A:3F:36:9C:03:28:7C:EC:B2:FA:58:3C:50:E7:81:41:8B
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:67:2e:05:0f:dd:cc:71:28:1e:01:4e:ce:73:b8:7b:2b:
36:6f:50:c9:2f:68:4f:33:c5:73:07:6f:fa:95:90:f8:c7:20:
02:f7:56:a5:70:22:38:1a:8e:11:89:c0:b9:b7:64:9e:57:3d:
ec:4d:8f:5c:25:16:f9:fe:5c:40:f4:3f:89:fb:25:55:57:09:
14:6f:49:15:d2:9d:cf:25:bf:54:e2:bf:fa:68:e9:97:7e:b8:
54:d1:88:2a:fc:20:82:47:d1:3d:6d:d3:37:77:9d:56:0a:64:
82:0a:9b:45:6f:1b:2e:ee:18:cd:00:3e:de:81:ba:77:6e:fd:
e9:f0:13:cc:e7:0e:99:0a:4a:4e:54:07:cb:55:79:be:5a:b5:
28:d1:9d:cf:85:53:14:45:27:78:86:f4:cc:3d:8a:b4:71:99:
1e:8e:1d:4c:53:1d:c5:f6:e8:a7:96:a5:07:15:d4:12:e5:7b:
d5:86:c4:ad:57:82:11:4b:64:c5:96:cd:40:80:03:be:a2:d5:
0f:5d:43:22:25:d8:4a:d9:43:ca:25:78:6b:c2:1a:8f:4c:62:
f5:85:c0:ef:3c:02:bd:25:71:00:62:1a:eb:08:93:b7:f1:d5:
44:54:4e:58:8f:47:33:bf:35:7c:e2:24:68:72:f4:80:7c:29:
25:d4:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:48:42 2026 by rpki-client