Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: pabzz7JyT8+62axqyUsm90QJqVUdbhdgdCHf5g1XoJM=
Subject key identifier: 9A:FF:9D:7D:40:3F:DC:29:C7:C0:5F:89:B0:A5:47:8F:2F:18:7A:EF
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019ED386E0276DE30D0E7052BB9C56500F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1571
Signing time: Wed 17 Jun 2026 03:01:32 +0000
Manifest this update: Wed 17 Jun 2026 03:01:32 +0000
Manifest next update: Thu 18 Jun 2026 03:01:32 +0000
Files and hashes: 1: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: 0G0KaxWkxU658k4HGzSlw7knHofcq1jgTwO3soGtC90=)
2: lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa (hash: d0roMsqX9vnomDLuPDxCBkqVZxb8IXHny4aGCS66Mnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:e0:27:6d:e3:0d:0e:70:52:bb:9c:56:50:0f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Jun 17 03:01:32 2026 GMT
Not After : Jun 18 03:01:32 2026 GMT
Subject: CN=9aff9d7d403fdc29c7c05f89b0a5478f2f187aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2f:4e:3c:e7:be:c5:32:4a:0f:fd:3b:79:e1:
d5:1b:c9:c0:b2:42:ba:3e:b1:a6:6e:61:9d:b6:64:
e4:47:94:08:4a:69:d7:2b:b4:d1:ad:89:23:79:cc:
60:29:90:f5:24:18:d2:c6:11:f2:14:e1:bc:87:9c:
db:a2:1b:50:38:c7:5c:26:94:5f:d1:f7:1e:72:9d:
68:cb:e1:37:f2:32:a3:8b:32:17:da:b4:74:ff:1e:
9b:43:7e:10:87:33:80:a9:20:b6:e9:35:3a:fc:25:
b8:3c:e9:6e:92:ca:31:9b:ea:ec:48:3e:fc:24:b0:
49:11:18:86:ab:77:77:60:55:ff:16:92:7b:74:39:
06:61:8f:5c:44:eb:c2:ad:b3:11:63:ce:72:af:a5:
1f:b6:65:16:bc:18:89:d9:5f:82:4a:88:49:03:10:
e2:27:8d:4e:e4:d5:77:37:d7:d9:b8:0b:89:2a:43:
c6:0c:43:ce:7b:19:c8:fd:04:05:f0:9a:ae:6a:af:
b8:af:14:26:42:e3:15:fd:da:04:36:61:fe:65:a7:
18:bb:6e:6a:1d:41:9a:d2:19:22:ec:d1:f0:e5:d7:
3d:52:01:d4:3a:6d:44:d0:39:f0:01:c5:be:1a:5f:
0f:cb:2e:9c:59:7c:de:0f:fe:9f:a1:78:06:c7:37:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:9D:7D:40:3F:DC:29:C7:C0:5F:89:B0:A5:47:8F:2F:18:7A:EF
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:a4:bd:2f:12:56:8c:2b:53:fb:f0:ea:8b:9d:99:68:1c:
39:e5:45:ec:fb:8d:ac:ce:eb:fd:4c:aa:17:a9:d7:28:cc:d1:
bc:4b:dc:b5:86:57:15:0e:ed:bd:b0:0c:99:6a:89:84:75:af:
30:92:53:58:f5:1a:78:9b:26:64:7b:62:37:d5:14:20:fc:f3:
80:3b:f5:a9:4e:ca:ba:b9:fa:c6:dc:15:9e:07:cc:26:a5:f9:
82:25:b3:ae:07:09:9f:15:4f:62:18:7b:66:c2:6b:bb:5e:4a:
25:09:6a:69:b0:1e:5b:f2:5b:6a:bd:30:9c:b8:27:ea:99:ff:
a8:d8:a6:08:c5:4c:46:dc:3a:b5:5c:f4:16:7e:8c:f1:fc:62:
fe:15:3e:f9:2b:2b:83:1e:93:d5:8e:af:ce:1e:de:c3:1f:2e:
78:da:29:97:34:55:4c:93:3e:1d:f4:5e:d0:57:cb:9f:f4:9f:
74:a1:b5:57:a9:58:04:4c:7e:86:ff:29:ae:d9:7c:a6:4a:ac:
24:a4:c9:ee:cb:80:d4:11:c6:f6:71:1b:26:71:70:fe:ae:a2:
69:34:9f:0f:1a:7b:b6:f4:15:80:94:fb:da:bb:74:c6:0d:6c:
65:42:2f:b6:4e:1b:05:0b:51:ad:77:0c:f1:c6:3a:99:a4:9d:
b4:f9:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:37:15 2026 by rpki-client