Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: M69kZyO5Q1gEzrDrOuzQVs/qFwnFAaUA8PKoEyNof0g=
Subject key identifier: BA:87:A5:D9:6F:9F:D3:EE:5F:00:0E:C7:EC:43:E8:ED:51:F3:BB:9C
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019FAABEBE82FBB99EB1EF373D527C689E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 045F
Signing time: Tue 28 Jul 2026 22:00:55 +0000
Manifest this update: Tue 28 Jul 2026 22:00:55 +0000
Manifest next update: Wed 29 Jul 2026 22:00:55 +0000
Files and hashes: 1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: iIvxSGlAzrZAmuVnjxrw6ExUOIrFu/+Y1Yc5WrtzkbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:be:82:fb:b9:9e:b1:ef:37:3d:52:7c:68:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Jul 28 22:00:55 2026 GMT
Not After : Jul 29 22:00:55 2026 GMT
Subject: CN=ba87a5d96f9fd3ee5f000ec7ec43e8ed51f3bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:fd:90:5b:27:89:77:df:e9:f6:f7:80:4e:
a8:e9:d1:d3:e1:ec:13:70:24:b4:83:da:80:9e:08:
b2:a6:53:33:66:75:7b:2c:0f:16:d6:7c:57:69:96:
17:d0:dd:ed:84:f6:53:0c:3f:fa:7a:dc:19:51:b6:
e3:a6:5f:5c:d4:ba:2c:17:0d:af:9a:7c:d6:21:50:
e4:1a:0e:2a:74:ed:2a:10:ee:d6:93:13:99:29:a1:
25:e3:5f:3a:dd:78:2f:5d:03:52:6c:7f:27:2e:6c:
d9:69:e6:eb:57:f7:45:5d:22:72:cc:4f:4b:fe:10:
5b:7e:0a:d4:53:ce:df:1c:f5:ab:db:63:bd:6f:e8:
73:d6:d2:b8:a0:43:17:37:92:5e:19:d5:3c:a1:a7:
60:93:c2:a5:d7:e4:65:9a:c6:a3:00:47:9c:2a:4b:
fe:6a:fa:8a:ab:36:48:ce:83:e0:47:e5:60:de:50:
61:02:de:f3:3b:f4:f7:09:52:5b:8b:8c:6b:4d:19:
9d:53:c1:b9:bf:b7:69:4b:0f:73:7c:5f:8c:e0:70:
51:6f:a7:26:97:7e:2d:9d:dd:fb:43:3d:b0:2b:a1:
16:bf:d1:83:74:c4:ad:9e:49:cd:b1:10:b9:96:41:
b0:95:92:2e:29:c4:0e:72:d2:2d:f9:18:32:65:22:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:A5:D9:6F:9F:D3:EE:5F:00:0E:C7:EC:43:E8:ED:51:F3:BB:9C
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:20:4f:01:95:34:a7:0e:53:48:91:02:0b:98:75:85:60:20:
7a:f8:d3:c9:5e:c6:ad:41:ae:23:d5:7e:a1:48:36:b5:2b:74:
e3:ea:3e:7c:2e:66:92:1f:23:21:dc:33:93:e6:4f:a8:60:81:
66:73:32:86:1f:f3:38:be:7f:fb:7e:25:1b:3a:9c:b6:a7:80:
08:9d:27:32:c1:85:dd:4d:37:b4:5f:e5:06:8c:72:32:5a:f0:
d2:be:28:e2:dc:79:3c:ce:76:ec:2f:34:b1:99:2f:4f:24:eb:
17:db:86:30:bf:4c:95:0b:a6:98:2d:90:f0:ad:2d:11:16:f4:
41:d2:60:ce:d1:1b:80:cb:6d:32:ba:3d:47:07:3b:ac:55:0f:
aa:98:c0:02:46:08:fb:ff:8b:53:e9:72:a9:b1:bf:61:4f:f9:
44:73:cc:97:0b:25:ba:16:c5:2c:c6:7c:d1:2b:fb:53:3d:55:
4a:4f:57:6d:d7:36:67:04:fd:67:c6:7d:99:3a:19:9f:09:56:
1a:8c:2e:f7:ed:5a:a3:c9:e1:9f:6e:8e:6a:4a:9f:8f:2f:a5:
81:bd:70:0c:f8:2a:dc:79:78:64:9f:16:e2:f3:52:84:65:54:
d5:33:01:88:86:ac:5c:2f:a6:d5:07:3d:16:fd:23:db:93:1c:
08:f8:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:28 2026 by rpki-client