Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: o1Aft0u5r6KIEVl+4xqzB0L7pTXWAcSP96H5cKpsY34=
Subject key identifier: B2:06:55:85:A6:9A:31:3C:07:5D:23:7F:85:84:63:D6:C9:0D:D4:9C
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019EC11260ADDF8F7982E4A80179743C5B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 067B
Signing time: Sat 13 Jun 2026 13:01:07 +0000
Manifest this update: Sat 13 Jun 2026 13:01:07 +0000
Manifest next update: Sun 14 Jun 2026 13:01:07 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: vdlAz0IhBaGJK/SoXR8o/ZakyGn1zArHGZMGbh8vx3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:60:ad:df:8f:79:82:e4:a8:01:79:74:3c:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Jun 13 13:01:07 2026 GMT
Not After : Jun 14 13:01:07 2026 GMT
Subject: CN=b2065585a69a313c075d237f858463d6c90dd49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:78:9f:7a:50:dc:42:f6:35:c5:25:43:88:
5c:a4:99:84:c7:ef:fb:d2:16:bb:07:fd:ee:91:02:
e6:ca:44:c7:1f:fa:26:10:84:4b:29:38:2d:3d:13:
b2:74:81:33:dd:b0:e6:2e:05:36:39:02:98:0c:29:
3f:5f:10:59:df:60:54:2e:68:80:f9:3d:34:9e:e9:
06:e5:e8:f7:80:4c:cd:f1:4b:8e:29:4b:b0:8b:0d:
ef:04:2e:45:08:5a:df:d1:98:bc:54:f9:90:51:c6:
9d:0e:90:98:57:8e:ed:bb:5a:b3:0b:42:41:05:cc:
da:6a:2b:16:1c:9d:15:f1:90:e6:01:3b:8b:73:a2:
d1:5e:e3:c8:7c:02:b8:4a:73:40:a6:54:fd:2f:db:
48:8a:b2:9e:19:b8:2b:b0:4e:e6:64:b8:b0:d6:17:
73:29:1b:54:25:d4:39:b6:cf:4e:6d:89:22:71:e8:
9b:2b:68:75:10:2d:11:35:40:07:83:53:7d:db:09:
d2:2a:d4:e7:82:1f:3f:26:f2:98:b4:1f:d6:8f:d7:
82:c8:49:5b:e1:4b:ba:4c:b3:b3:24:8a:0e:71:b6:
7c:8f:6e:93:53:27:e7:ca:fa:c5:77:42:6f:b7:13:
35:b0:7d:ef:2a:85:14:aa:f9:95:13:5b:99:f3:e0:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:55:85:A6:9A:31:3C:07:5D:23:7F:85:84:63:D6:C9:0D:D4:9C
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bd:29:84:19:ab:0b:2e:22:12:f1:c8:2e:4f:67:58:49:19:
64:cb:95:6f:0c:f5:aa:41:c4:22:22:c5:87:6a:f7:1a:10:9b:
23:bf:06:05:64:bc:49:d5:89:fa:34:8e:d3:7b:6b:6f:be:fe:
a1:20:4d:76:e9:78:f7:10:a7:b4:0e:3b:65:54:a1:ba:c9:20:
4b:6e:cc:60:05:9b:4c:52:30:a1:a3:d0:e4:62:4b:fe:37:4c:
51:82:1d:56:22:6d:c1:bb:04:28:12:32:c5:4a:60:a0:b5:18:
c7:22:9d:12:96:e3:94:07:9d:d5:25:f2:f4:bd:a4:de:07:31:
18:e6:47:85:f4:33:fe:72:91:29:02:eb:8d:1d:8a:51:0f:d8:
2f:d6:84:7d:2f:4f:79:df:40:aa:bb:b7:8b:ca:75:2f:19:4b:
84:e3:d2:df:08:a4:6f:0e:08:7e:41:5e:48:a3:5a:f9:89:3e:
b0:7f:83:bb:1f:05:40:72:7d:a8:7c:e5:d7:98:29:ac:99:66:
69:7a:03:b8:1f:e6:9a:4b:39:60:92:37:05:6f:8f:e3:39:41:
09:46:27:85:26:65:a9:df:f2:66:dc:72:c4:2e:b0:e5:1a:e4:
ab:5f:a0:01:cd:57:55:73:5c:33:c7:16:74:f6:3b:91:fc:7c:
f6:59:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:30 2026 by rpki-client