Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: TAG6JEt1lnFOoGtYoPPm0Nfu0xqnIkCOeqIfmmosSpk=
Subject key identifier: 83:86:98:91:34:93:1E:71:7E:06:EC:4F:1C:2B:9B:E6:8C:E9:B6:8D
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019FAD51F7FB879C6734C8FB60C898B2DF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 19DF
Signing time: Wed 29 Jul 2026 10:00:57 +0000
Manifest this update: Wed 29 Jul 2026 10:00:57 +0000
Manifest next update: Thu 30 Jul 2026 10:00:57 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: +LmdR1SHidfjtBVWjv7mIt2HPuDe6k2nNcyo2kYJ4XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:f7:fb:87:9c:67:34:c8:fb:60:c8:98:b2:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jul 29 10:00:57 2026 GMT
Not After : Jul 30 10:00:57 2026 GMT
Subject: CN=8386989134931e717e06ec4f1c2b9be68ce9b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:d8:88:6a:a7:9d:d9:fd:c7:bc:ac:3a:ec:
4e:8d:f3:08:b7:a5:3e:c4:24:11:f6:89:48:de:92:
95:61:2e:6e:c4:a0:1c:3f:13:54:6d:44:81:bb:00:
99:05:fb:04:73:2e:40:35:e1:2f:0c:d5:cb:3b:ee:
d4:56:0c:b1:a4:79:93:34:79:20:ab:d2:8a:f2:4b:
92:a8:bb:8e:1a:0d:c3:93:06:e8:c6:b4:de:c6:39:
5e:71:7e:1e:49:5f:01:81:57:e5:ef:7f:64:48:a0:
02:1c:4d:ce:56:28:96:66:c5:87:20:b3:8d:2c:7e:
85:81:ab:03:90:93:db:24:9d:8b:bc:61:b0:15:40:
c7:d0:d3:b0:ee:b6:0d:5c:8e:7a:50:26:b8:3f:b8:
50:65:32:cf:4c:0d:3d:f9:17:c2:d0:ed:1f:37:c1:
ce:a5:5f:77:7c:9f:6e:f3:a7:7b:1a:75:d6:a1:3e:
4b:ca:0c:7c:0a:c0:2a:34:cc:5b:3f:47:1d:42:7c:
03:5e:70:00:42:62:41:79:06:ed:a6:5d:84:83:47:
98:b9:b6:2f:e7:cb:7c:fd:f3:8b:c4:c2:6c:78:50:
bb:57:d0:70:41:3e:7c:35:1e:78:4c:8c:fa:88:ca:
15:6d:7f:a8:c6:21:69:de:d4:ca:42:32:f0:07:63:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:98:91:34:93:1E:71:7E:06:EC:4F:1C:2B:9B:E6:8C:E9:B6:8D
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:70:b6:16:8e:bf:a5:f8:bc:62:a1:81:9f:8e:24:dd:25:75:
bb:83:63:49:a7:1b:b7:f2:88:d4:ab:d8:4e:f9:dc:e4:2b:93:
60:56:2c:62:88:86:aa:d2:b7:09:0a:29:47:dc:ef:00:32:5e:
a2:ac:02:1a:9b:3c:3e:ee:f9:4b:aa:d1:ef:e8:25:f1:0d:fe:
4c:4d:2f:1e:04:f0:ca:ea:96:d2:18:76:5f:90:ff:2f:8c:d6:
54:03:40:60:1d:5e:89:1d:94:f3:25:ea:f9:0b:32:be:21:b3:
d2:69:2b:0f:c1:4f:51:9b:9f:d5:19:9c:7e:44:a4:29:7e:f1:
b1:eb:9b:dc:7c:7c:59:ba:b3:cf:9f:41:9d:26:b9:91:3c:82:
36:5d:36:6f:aa:b7:71:dc:ba:8c:3f:9f:ec:6d:d6:08:eb:bb:
d7:d8:b3:a2:6b:36:2f:49:01:33:10:ee:82:86:9f:30:94:76:
10:15:47:97:ce:4a:89:dc:c5:d6:65:99:b3:ff:88:d1:1d:5f:
14:3a:09:c0:71:bc:6f:56:d9:c7:4b:9f:c0:2c:db:9b:2a:77:
ca:f4:73:e2:36:90:16:37:29:49:02:05:a0:cc:74:21:ab:a6:
c0:2d:a2:1b:cf:19:31:de:50:62:b2:b6:2e:9b:30:98:02:84:
0d:b9:aa:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUff7h5xnNMj7YMiYst9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx
NWE0ZWIwHhcNMjYwNzI5MTAwMDU3WhcNMjYwNzMwMTAwMDU3WjAzMTEwLwYDVQQD
Eyg4Mzg2OTg5MTM0OTMxZTcxN2UwNmVjNGYxYzJiOWJlNjhjZTliNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXzYiGqnndn9x7ysOuxOjfMIt6U+
xCQR9olI3pKVYS5uxKAcPxNUbUSBuwCZBfsEcy5ANeEvDNXLO+7UVgyxpHmTNHkg
q9KK8kuSqLuOGg3DkwboxrTexjlecX4eSV8BgVfl739kSKACHE3OViiWZsWHILON
LH6FgasDkJPbJJ2LvGGwFUDH0NOw7rYNXI56UCa4P7hQZTLPTA09+RfC0O0fN8HO
pV93fJ9u86d7GnXWoT5Lygx8CsAqNMxbP0cdQnwDXnAAQmJBeQbtpl2Eg0eYubYv
58t8/fOLxMJseFC7V9BwQT58NR54TIz6iMoVbX+oxiFp3tTKQjLwB2PB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOGmJE0kx5xfgbsTxwrm+aM6baNMB8GA1UdIwQY
MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt
OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx
LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHC2Fo6/
pfi8YqGBn44k3SV1u4NjSacbt/KI1KvYTvnc5CuTYFYsYoiGqtK3CQopR9zvADJe
oqwCGps8Pu75S6rR7+gl8Q3+TE0vHgTwyuqW0hh2X5D/L4zWVANAYB1eiR2U8yXq
+QsyviGz0mkrD8FPUZuf1RmcfkSkKX7xseub3Hx8Wbqzz59BnSa5kTyCNl02b6q3
cdy6jD+f7G3WCOu719izoms2L0kBMxDugoafMJR2EBVHl85KidzF1mWZs/+I0R1f
FDoJwHG8b1bZx0ufwCzbmyp3yvRz4jaQFjcpSQIFoMx0IaumwC2iG88ZMd5QYrK2
LpswmAKEDbmqtA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:41 2026 by rpki-client