Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: 9Kc/ZXgwA8l6AiIi7jCpD8isa5fL5fNZkbNHOQhKFs4=
Subject key identifier: 76:34:2D:09:6F:80:0E:3F:2B:64:92:22:BF:E3:28:63:10:60:46:59
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019EBF5A692698DDF96DF7644FC50E4D46A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 05:00:33 +0000
Manifest this update: Sat 13 Jun 2026 05:00:33 +0000
Manifest next update: Sun 14 Jun 2026 05:00:33 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: eqz8nn0pe3y2xV7v/TcUNdvp7bLqc1akPP5QNtsJiKI=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:69:26:98:dd:f9:6d:f7:64:4f:c5:0e:4d:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jun 13 05:00:33 2026 GMT
Not After : Jun 14 05:00:33 2026 GMT
Subject: CN=76342d096f800e3f2b649222bfe3286310604659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:95:1c:69:1a:e9:ac:26:e6:33:16:3e:87:
d5:d5:5d:b5:10:82:63:92:c8:e2:1b:dc:22:58:73:
3f:87:e5:eb:4a:ca:fd:95:8f:54:dc:5e:ce:71:cc:
32:e1:00:02:a4:b1:3b:72:5b:98:13:b5:e3:08:56:
b3:7b:8d:1a:da:53:4e:e5:67:86:c8:b1:b0:05:be:
20:27:48:61:5f:44:00:67:d1:9f:38:44:97:3b:06:
a7:ae:65:96:4e:76:1a:1e:82:7c:b3:aa:aa:b2:d5:
6c:9e:e1:c5:41:73:a8:58:b7:5e:f6:f9:14:88:0a:
99:fb:a3:8d:00:15:f9:23:ec:78:43:65:8c:1e:4d:
7e:ab:7e:9b:70:a1:a9:08:73:8a:71:f9:02:e4:c7:
67:77:48:f3:3d:48:c2:24:b7:be:7c:8a:98:a5:cd:
fb:52:77:bd:b9:5c:48:9f:22:e0:5b:32:9f:7b:93:
02:c0:fe:27:29:ff:82:e0:10:72:03:80:85:72:a0:
37:12:81:1e:76:86:c7:2f:56:b5:19:7d:b8:95:b9:
9e:8b:59:c8:e9:94:de:ca:46:51:0f:ba:59:3b:9b:
16:cb:53:22:af:c5:77:bd:48:08:b7:9d:c0:86:e5:
90:75:54:bf:50:aa:6a:5f:75:bd:25:d6:70:d7:9c:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:2D:09:6F:80:0E:3F:2B:64:92:22:BF:E3:28:63:10:60:46:59
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c2:7f:63:b0:63:33:1d:09:b1:ac:6a:93:26:ee:11:48:3f:
57:76:b4:ba:00:01:20:f5:32:80:e2:1f:18:b1:be:e1:8f:e0:
cb:e0:78:40:11:13:95:d4:6d:54:1c:02:4d:a6:33:5c:1b:02:
cb:b3:40:dc:fb:a7:a0:7b:d3:76:8d:c8:e1:19:c7:db:9d:9b:
86:11:9e:48:43:fb:13:c0:d8:42:73:5f:6d:96:c9:e0:b2:db:
e5:0c:dc:f6:b5:80:ad:70:57:d4:98:f9:f9:ed:e7:98:6d:67:
18:b2:66:fd:f9:7e:a5:c7:11:2d:81:ef:14:6d:28:5b:ba:f5:
91:3f:05:8f:33:51:42:46:71:c9:c9:13:55:5c:e2:62:50:1d:
c6:84:78:88:d2:50:52:54:af:f2:55:7e:68:75:57:0c:cd:55:
64:61:ab:4c:d4:05:bf:59:0a:c7:ae:86:3d:92:f3:08:18:35:
d7:4c:64:4c:1a:ed:15:0c:7f:db:2f:76:f2:10:0d:46:15:c5:
8c:49:f4:d3:6d:f7:b7:aa:0c:e9:56:4e:e0:51:98:d1:15:a9:
38:6a:aa:fc:36:58:8b:95:4f:c1:ed:b3:65:e9:d1:40:b7:36:
34:ef:e3:4d:a4:92:62:9a:4e:20:28:a3:f8:0b:de:8b:76:6b:
7d:8e:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:14 2026 by rpki-client