Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: KSCqg9c2YGNmZKEXPoQ1dRLStoGVJl+Da36ZWNAF5+4=
Subject key identifier: 3D:CF:8A:D9:7E:BB:77:2E:AA:F0:F7:02:4F:79:78:90:32:AE:60:63
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019FAAF572A3ECFCE57EA753EB6FF5197FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 23:00:39 +0000
Manifest this update: Tue 28 Jul 2026 23:00:39 +0000
Manifest next update: Wed 29 Jul 2026 23:00:39 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: 4x6ZiHMj63Pvp9FKExGHoNhjV++prgp8moPff0NYSZw=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:72:a3:ec:fc:e5:7e:a7:53:eb:6f:f5:19:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jul 28 23:00:39 2026 GMT
Not After : Jul 29 23:00:39 2026 GMT
Subject: CN=3dcf8ad97ebb772eaaf0f7024f79789032ae6063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:c5:02:4f:4e:88:e2:b3:ea:0a:11:49:9c:
43:88:4c:b0:e3:49:e7:44:48:58:57:67:04:27:de:
73:97:28:60:55:f4:17:19:9f:74:7e:db:65:79:9e:
cf:2b:ff:3d:ef:b3:1f:4a:da:e4:f6:77:81:3e:c9:
ec:ab:dd:49:3f:41:c6:83:6d:3f:c3:de:2f:90:12:
fe:1c:b9:ac:14:b2:24:11:4c:af:0e:24:d7:d2:2e:
26:3b:22:74:0d:6c:33:e9:ff:ed:18:1a:ad:c9:52:
a4:27:15:0a:5a:bb:5e:08:f2:4e:e7:44:f2:83:c8:
93:34:f3:d3:05:1e:9f:41:00:24:99:99:e3:91:0c:
0b:e6:18:e3:a8:32:8b:4c:03:26:ba:f5:87:1f:ad:
db:e9:52:0f:a9:15:d2:a6:29:ab:8c:26:f3:19:6d:
79:6b:1e:16:be:42:28:4d:73:fb:13:4e:19:ce:8e:
22:45:4c:97:c2:d2:7c:0b:55:78:33:39:b4:c5:7c:
b5:de:78:35:a6:6f:78:38:b2:91:5d:92:30:b9:4e:
18:85:f9:82:82:d5:71:31:ce:90:1e:14:91:d2:58:
c8:ea:d9:fb:0a:83:37:17:fe:2d:2b:11:57:7a:b2:
a6:ea:95:c7:1c:9a:cd:06:0c:78:c8:ba:90:69:ee:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:8A:D9:7E:BB:77:2E:AA:F0:F7:02:4F:79:78:90:32:AE:60:63
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:07:58:10:30:45:32:34:6d:e3:33:01:07:f1:4e:b8:46:
e2:fc:5b:b2:86:e1:ca:18:ad:21:46:2c:70:1f:47:aa:95:7e:
cd:72:3a:eb:ae:40:f2:66:01:79:83:00:1d:27:b7:37:c9:28:
16:5a:02:b4:66:b1:81:ae:4f:ab:17:ae:95:61:46:1f:09:21:
98:1e:b9:88:6c:e7:15:32:80:1f:29:9d:35:43:bc:2b:7a:28:
75:84:48:d4:ea:c8:2b:b8:4a:3b:8f:4f:df:3d:ce:91:73:3c:
cf:30:7b:df:b1:01:d9:de:21:d8:b3:3c:c7:0f:eb:c9:36:b6:
c9:83:ad:89:67:b7:a9:6e:6a:dc:57:ed:bf:da:aa:c8:8b:ef:
58:71:86:7b:40:2f:56:6a:4e:8c:38:dc:25:16:4c:6f:f7:e1:
22:11:d8:b2:05:d3:9e:68:e1:ec:5c:5b:36:d9:4f:ed:d7:d8:
17:9e:4c:45:d4:7a:3d:f7:09:97:e8:df:f9:b9:73:50:5e:af:
5f:73:c6:20:01:06:14:9f:76:5c:e1:70:b4:e4:45:5e:80:e4:
ef:5d:2d:d4:20:26:bd:75:3f:2e:bf:f1:65:77:7f:ac:ee:02:
a6:df:2d:ab:9e:ca:5e:a5:86:8d:79:bc:cf:75:dc:32:3e:2f:
99:d0:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:46 2026 by rpki-client