Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: /CbTAcYQiPSRTeHgYv6y/OLsvvLFUFQn/GonZZkpZM4=
Subject key identifier: EE:09:DC:64:CA:A1:61:06:83:7D:66:D1:C8:23:F0:DA:D7:18:14:40
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 019FA9E2CAD1BB913E83639889A106AE2A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0E55
Signing time: Tue 28 Jul 2026 18:00:40 +0000
Manifest this update: Tue 28 Jul 2026 18:00:40 +0000
Manifest next update: Wed 29 Jul 2026 18:00:40 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: JrSRkR5jpsir0vwWavtmc9qoGxHi2ySzx7h6SLX+ySA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ca:d1:bb:91:3e:83:63:98:89:a1:06:ae:2a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jul 28 18:00:40 2026 GMT
Not After : Jul 29 18:00:40 2026 GMT
Subject: CN=ee09dc64caa16106837d66d1c823f0dad7181440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:46:b3:cc:f3:22:62:7a:dc:2a:ef:b3:7f:
46:9e:32:c1:e5:be:9f:64:f0:6c:67:b2:56:46:4a:
c5:60:7c:b9:db:76:86:56:77:f1:c5:70:ad:ce:be:
81:18:d4:8d:8a:e3:bf:22:e0:58:a3:a1:6e:0d:18:
8a:cc:d4:83:5a:82:2c:2c:1d:36:31:25:ea:00:d8:
c2:9f:66:82:9f:0c:46:dc:4c:b2:d5:72:47:c9:60:
4a:7f:d8:e2:5e:00:e0:9f:09:f3:88:4a:9e:0f:f5:
68:c9:40:3a:e4:1e:ba:a6:45:10:db:af:97:6e:17:
b4:e4:9d:0e:89:35:64:59:5d:11:b3:74:7b:91:f5:
3e:b4:4b:e1:d6:18:85:4a:88:fa:6f:d8:7e:5b:c0:
34:56:df:79:7b:32:fb:4f:d4:d9:fb:da:ac:ab:b0:
79:f7:63:5c:e0:fa:c7:b4:74:f0:53:18:7a:f9:3e:
c0:36:c9:65:ac:6c:d2:1f:03:d3:8c:56:2b:d0:7d:
94:62:eb:f7:94:c2:f0:e9:38:26:d2:d3:9d:63:71:
04:c0:c8:b7:94:2e:e5:04:ff:fb:68:5a:b8:cd:2d:
0d:7a:d4:33:25:9c:87:64:6b:28:43:5f:61:c2:94:
de:ee:3a:6d:b8:b6:ff:2d:29:c7:07:12:6e:f8:83:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:09:DC:64:CA:A1:61:06:83:7D:66:D1:C8:23:F0:DA:D7:18:14:40
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:04:c0:a0:fb:5e:ed:df:74:96:0b:c4:4b:c0:80:64:d6:4e:
25:53:cb:3a:ea:b5:a2:76:a2:43:07:6a:e0:80:d8:0e:77:05:
63:0c:27:88:f2:e1:dc:fa:a2:ab:bd:5c:95:96:27:6c:3e:9e:
c8:84:5b:44:c2:0b:29:c0:d8:a8:6f:12:3d:2e:32:23:a1:86:
30:08:d3:b8:d5:19:08:bc:6d:6a:17:9b:4c:c7:bb:4c:9b:2f:
60:df:ef:5b:62:4b:d7:07:6e:51:7b:bc:2f:f0:f8:3f:7b:a9:
32:b6:89:ef:dd:97:98:08:27:15:3e:4f:cd:25:bb:9a:d7:34:
46:bf:86:a9:0f:56:c4:8d:d8:7e:35:bc:76:74:66:6d:20:eb:
dd:70:02:0f:6d:2f:8f:ef:30:b7:5f:bc:83:09:f2:f2:df:25:
82:39:b4:31:e6:17:40:0e:3b:5c:96:a8:e4:bd:ea:0d:7e:09:
12:52:c9:f8:da:73:e4:09:36:8e:7a:3f:98:2f:10:d6:25:4d:
b4:74:6a:86:ed:8d:4c:b5:2a:7d:18:d1:87:36:a1:f0:45:e2:
5a:0f:7a:ff:c4:b1:01:9b:c7:1e:2e:03:5d:ec:26:ae:fe:12:
9a:12:bd:3b:d5:15:db:23:17:38:bb:06:3c:fe:e1:b4:f4:3e:
06:ff:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:15 2026 by rpki-client