Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: sLaQBtmPBARL9TUc1A7bjkmEMLlwL58eTBs7+8u6hMU=
Subject key identifier: CE:9B:78:AA:2B:E2:D7:D7:39:57:FF:A1:AC:23:66:C2:EE:A5:54:86
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 019FAB9AA1070FCEA0712CD5FA8229FC9337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 16E7
Signing time: Wed 29 Jul 2026 02:01:05 +0000
Manifest this update: Wed 29 Jul 2026 02:01:05 +0000
Manifest next update: Thu 30 Jul 2026 02:01:05 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: 4ceynwAPlIjVIHM3u2xMN9wua1Q+YhgZxzRs7I5w3jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:a1:07:0f:ce:a0:71:2c:d5:fa:82:29:fc:93:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jul 29 02:01:05 2026 GMT
Not After : Jul 30 02:01:05 2026 GMT
Subject: CN=ce9b78aa2be2d7d73957ffa1ac2366c2eea55486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:2d:3a:f0:f1:6d:9b:80:ae:eb:dc:8c:1a:
66:a1:7e:d0:87:2d:a0:ca:6f:4e:ac:43:f0:47:0c:
48:61:d7:67:6e:e7:a4:4b:10:5a:08:c4:96:fe:86:
5c:fa:20:38:24:22:dc:7c:fc:95:b0:99:88:de:11:
c3:72:9a:89:e5:97:11:7f:34:d6:e5:0d:63:40:07:
88:3f:3e:27:ce:8e:28:65:78:87:a7:89:e4:ab:11:
00:2c:a2:e9:11:dd:22:6f:e2:c0:7c:97:73:f2:2c:
85:2f:34:fe:bc:39:aa:d2:09:58:12:1e:11:b0:27:
c5:b4:1f:26:15:e9:b7:ae:6d:7a:7d:b2:49:7f:15:
5e:16:d1:03:53:ad:c7:45:89:a3:e0:7a:96:bd:29:
90:55:f3:c0:1d:9c:2b:71:d2:9d:6e:ca:f6:7d:7e:
39:1a:06:60:8e:4d:7c:33:94:54:79:3a:00:0c:d9:
97:65:b5:9a:7a:ae:88:93:64:13:13:94:1d:57:7d:
7d:a8:c1:a5:98:2e:5c:df:14:49:2e:1b:32:55:74:
1c:77:2e:64:fd:fb:55:72:c0:d5:e0:cb:4f:28:17:
5f:75:74:7c:61:b2:91:0e:ff:16:01:3d:55:46:cd:
39:c1:50:45:a8:5c:fa:e1:2d:44:4f:0c:ce:7c:54:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:78:AA:2B:E2:D7:D7:39:57:FF:A1:AC:23:66:C2:EE:A5:54:86
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:4b:25:eb:0e:d2:f7:72:53:33:79:ab:58:c0:03:08:f4:
58:d1:b0:d4:01:2b:a8:9f:3e:7a:fc:33:71:ff:bc:95:b5:e6:
ce:e4:0d:e9:7c:97:0e:00:50:c3:74:f8:ed:fd:4c:bd:d0:ac:
a3:28:f7:8a:31:86:03:bc:4d:8b:07:6e:37:83:8f:fd:18:b2:
46:cc:69:a3:7e:d0:78:24:9a:84:c2:64:8d:6f:fd:f2:e7:6a:
b7:71:4c:48:96:fd:f4:ab:0d:b5:de:cf:7d:c7:fd:ae:2d:0a:
9c:6d:8c:41:3a:ba:ea:78:b3:3e:00:94:89:8b:3f:87:e7:67:
3b:4e:88:75:aa:d9:be:86:8e:66:79:0a:79:ec:a7:b2:e3:e9:
b8:e7:85:c3:df:84:88:29:77:bc:48:82:f4:09:a1:84:cd:58:
01:ae:5f:8d:c5:81:62:50:4a:8a:6f:6e:7f:3f:be:9a:cb:46:
98:7b:d8:4a:58:1e:df:1c:c4:f4:1b:f1:4b:af:22:2d:6a:c1:
29:90:56:07:bf:c1:8d:b9:67:0e:90:eb:b4:e6:8f:d7:15:8a:
67:07:62:37:3f:fa:61:78:b9:72:4f:67:d4:3e:ae:d7:d6:55:
98:15:fc:8c:d2:50:d2:23:d5:5a:60:4c:c4:49:73:18:cb:86:
3f:df:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:32 2026 by rpki-client