Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: kcdie44llaRKo5/P0j0SyGA6xePixdeVtA1czwDUMhA=
Subject key identifier: D5:0A:44:A4:07:82:C4:73:4A:D8:13:F5:4A:DC:47:06:DC:84:F4:BA
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019FAD1AD2E8B63166891A2806B6EEA3E763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0ED1
Signing time: Wed 29 Jul 2026 09:00:43 +0000
Manifest this update: Wed 29 Jul 2026 09:00:43 +0000
Manifest next update: Thu 30 Jul 2026 09:00:43 +0000
Files and hashes: 1: ROiLNRCdCfapmISBEXTrcvll9pY.roa (hash: N5VEUMxgqC79yW3KyixiCLmTn73YopaqScdC2P51yq4=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: AeYzXdhZyY6SXfY8wy7kNCFmzF+2rn4KI9EpPoAs5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:d2:e8:b6:31:66:89:1a:28:06:b6:ee:a3:e7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jul 29 09:00:43 2026 GMT
Not After : Jul 30 09:00:43 2026 GMT
Subject: CN=d50a44a40782c4734ad813f54adc4706dc84f4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:b5:8b:ae:5d:0d:59:c0:01:44:9e:99:45:
05:4b:9e:da:8f:91:ad:bd:c1:f1:00:8d:60:ef:44:
4d:f0:49:b1:3e:9d:e8:91:0d:52:5a:86:eb:43:05:
f9:4a:2c:54:63:f8:cc:20:62:50:18:8e:83:52:00:
84:eb:f5:b4:a4:fa:95:f2:a9:b4:e8:8e:51:dc:5c:
b2:a6:6f:63:97:e3:bc:2d:4e:46:90:ed:06:09:28:
6d:14:e4:35:a3:97:9e:4a:98:a3:1b:6c:5c:44:79:
57:32:be:fb:28:15:25:49:bd:c1:a6:a2:84:29:9d:
18:b3:8c:61:b3:26:f3:f1:ff:35:c0:a8:9e:7e:88:
48:fc:7e:ec:a1:14:1b:52:24:e2:ca:41:d9:7b:92:
06:b6:df:a8:b8:4c:d3:3e:ee:4c:1a:c3:25:44:e6:
ed:3e:2c:ff:96:92:3c:d2:0a:62:93:ce:e2:d5:e2:
32:e8:0e:89:ea:ad:a5:6d:1f:b5:b8:f8:ab:e1:56:
49:4d:82:7f:ff:80:68:28:6c:23:68:78:a1:db:1f:
fe:76:df:43:e8:3b:c4:71:15:8d:e5:20:03:84:de:
6f:46:e6:1d:94:c5:87:e0:24:34:27:30:b5:72:34:
91:0c:60:1c:8a:10:ff:63:97:d0:25:19:7b:34:fb:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:44:A4:07:82:C4:73:4A:D8:13:F5:4A:DC:47:06:DC:84:F4:BA
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:2a:34:19:ff:d6:6e:f2:42:d8:6e:4c:8e:6e:d0:a1:20:
74:38:04:09:d8:fd:29:81:20:9f:b8:12:f3:14:55:1c:b4:e6:
7c:d9:dc:96:40:09:c3:a2:ba:eb:c5:b3:2c:12:d7:24:8c:16:
4c:03:27:6c:45:d4:ca:da:f1:df:34:a3:7d:4f:b2:db:7d:07:
36:2d:c1:5f:70:27:c3:05:19:e1:ef:f5:42:10:53:41:70:79:
ff:80:79:c2:b8:73:f7:5f:2a:79:0b:98:a5:5c:35:e9:75:32:
66:66:80:71:4e:7c:6b:09:01:6d:d1:1b:23:86:ae:eb:e9:30:
c7:30:7e:c7:5d:e3:90:e4:a5:ce:b3:07:be:78:ef:8c:05:7b:
3f:ed:85:9f:63:b3:64:8c:e0:e0:22:d4:12:a8:9f:4f:27:a3:
51:5e:2f:20:14:99:83:2c:0b:80:9b:ce:f5:2d:e1:ac:2f:a6:
b8:60:ba:63:b0:ae:06:59:da:ab:55:30:6a:d0:39:0c:fc:a4:
b2:e8:89:4e:83:b0:a0:4f:12:17:08:3e:6b:b8:7b:ca:4a:6d:
e2:ea:23:46:06:d2:2e:0a:1b:a3:70:4c:e0:88:85:fe:28:71:
28:de:fb:5e:6a:af:7c:80:de:5e:fd:87:ee:09:a2:14:13:02:
7f:63:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:46 2026 by rpki-client