Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: 5Nk46/H3frfukG7BbFzaNJAzVVKVkNfMVWYXD/kIf9I=
Subject key identifier: A8:53:09:54:E0:E7:54:28:9D:EE:6C:A2:90:80:16:5E:D3:EB:80:C6
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019FA8625AC599D33D6B0C1FE3A00BC79E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 11:00:45 +0000
Manifest this update: Tue 28 Jul 2026 11:00:45 +0000
Manifest next update: Wed 29 Jul 2026 11:00:45 +0000
Files and hashes: 1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: IQxtb4q2dIdfDsFOTUwqYj3ngA5pWWgOopINmb21jHA=)
4: cHAv-hR4aTG77AYkITXkfyjkv7w.roa (hash: Thgd06WEq033xim/iur0tbIXmRSvmjPC3WOYOjzBIpY=)
5: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:5a:c5:99:d3:3d:6b:0c:1f:e3:a0:0b:c7:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jul 28 11:00:45 2026 GMT
Not After : Jul 29 11:00:45 2026 GMT
Subject: CN=a8530954e0e754289dee6ca29080165ed3eb80c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:c0:78:6f:3a:5d:dc:05:b6:25:54:2b:24:
22:b3:9d:f3:58:60:12:43:86:a5:94:53:8d:21:a5:
1f:1a:bb:8c:c5:a0:8f:1d:e5:ae:ed:45:b4:88:84:
bc:17:5a:72:0d:4c:88:3d:d1:85:98:0a:15:08:85:
be:3e:95:29:18:b4:a7:c4:23:42:9c:3e:4e:b9:b3:
12:83:6b:7b:fe:1d:50:14:f5:67:df:0b:36:24:ea:
ab:fe:f4:3c:be:d3:52:f5:ba:13:f3:a7:a9:e6:57:
ba:3d:ff:3e:7f:81:66:e3:5f:79:ba:0e:bf:39:3b:
5e:9e:61:71:50:d9:d6:34:40:9b:f7:9e:c7:2a:7b:
5e:ba:af:ef:0c:61:69:e5:5b:ca:6d:31:51:2c:ca:
d9:a2:d0:21:b2:75:78:c8:ce:d3:d8:49:95:93:35:
0f:76:4e:0f:38:03:84:d3:e3:06:d5:a6:9f:50:00:
26:d3:13:65:22:cb:42:61:5f:e5:e6:05:e9:87:9a:
c1:0e:89:18:6c:2a:4a:28:aa:da:72:b3:b8:76:2b:
1f:c6:cc:cd:fd:cc:b6:ac:9e:7e:cd:92:c9:3e:c5:
b7:22:9d:57:d9:4b:26:d9:ce:7a:28:3c:57:d7:a0:
cb:be:e2:5c:c4:1a:90:a2:9d:8a:79:12:22:88:bf:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:09:54:E0:E7:54:28:9D:EE:6C:A2:90:80:16:5E:D3:EB:80:C6
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cc:15:59:d2:6c:dd:c5:c1:74:6b:bb:8f:8c:55:96:de:c0:
e6:44:60:1d:83:4e:c3:ad:19:66:7c:65:91:ed:53:aa:60:9f:
bc:c2:08:94:2e:54:cf:ad:60:f1:24:04:68:5f:b4:6d:2b:96:
56:c1:0f:41:3d:87:0e:fa:e1:37:0c:02:16:d1:d8:19:b6:05:
2c:48:ab:13:cf:0b:0b:0f:5d:5b:9e:2e:56:07:23:e2:57:49:
24:42:01:61:6d:78:1a:fc:3a:a5:27:4b:36:50:a2:72:54:0c:
2f:1d:eb:cc:e9:1f:06:f6:6d:fd:2a:99:14:c9:e5:2d:33:86:
01:3f:9c:b9:85:a0:de:e7:fb:13:86:0e:02:0a:2a:e0:1d:64:
2e:a7:70:3e:06:da:a5:72:76:b7:1e:87:da:6c:a1:68:e6:04:
1e:f3:ab:04:48:e6:03:32:15:02:2c:b1:dd:b5:a1:a4:cc:68:
c2:c6:34:51:92:35:92:8a:47:a9:e8:6b:dd:61:0d:17:87:9c:
e9:ac:be:cc:4d:76:ed:a6:5d:ab:2b:b2:27:07:87:f1:60:ed:
09:ff:fc:eb:43:74:81:3d:4e:22:a1:b9:bd:35:b7:35:dc:05:
a0:34:0e:58:9c:61:71:65:c1:bc:39:ff:7a:ff:df:fd:92:56:
37:6d:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:29 2026 by rpki-client