Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: r78QF2PtMyLQUhXYwAyHdKERQClq1gkqwyTgN/eRp5c=
Subject key identifier: C5:C4:9D:5B:2B:70:09:65:9F:69:25:62:FC:16:2D:60:C4:3D:1B:FB
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019FAAF56322F9E31DF53A7F06CCE6E6B43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 08CB
Signing time: Tue 28 Jul 2026 23:00:36 +0000
Manifest this update: Tue 28 Jul 2026 23:00:36 +0000
Manifest next update: Wed 29 Jul 2026 23:00:36 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: 0Pvm8uO8GO52vyxIr3YvLyQRH5QWRZHpf3qJeOc/bss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:63:22:f9:e3:1d:f5:3a:7f:06:cc:e6:e6:b4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jul 28 23:00:36 2026 GMT
Not After : Jul 29 23:00:36 2026 GMT
Subject: CN=c5c49d5b2b7009659f692562fc162d60c43d1bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:a9:33:38:36:6b:ab:a0:84:f4:88:bf:9f:
d2:48:c4:73:de:dd:17:3a:09:9a:44:6f:fd:b8:fd:
1c:86:a0:7f:81:f7:9a:14:0e:f2:76:9b:27:b2:9b:
84:c4:f2:f0:d4:4e:f3:01:cd:cd:fc:ba:69:dc:bf:
e4:d6:50:43:65:cf:f5:e4:a9:58:ff:dc:cf:85:a2:
53:08:8a:19:67:d7:ec:66:92:19:ab:bd:2c:ae:39:
bd:9e:ac:43:bf:17:1f:88:56:39:47:9c:19:18:2e:
0e:a6:fc:18:e3:64:6c:0a:71:f0:03:56:10:ce:b3:
99:d7:24:b5:f5:c9:d8:12:58:90:31:f0:76:7e:28:
d6:ab:2a:5e:cc:60:f5:ca:f6:6e:8e:c7:53:7f:52:
12:a4:af:39:40:d9:41:b9:19:cf:bd:5d:89:85:fc:
e1:7b:e5:42:d3:9a:ef:cb:36:3b:f9:05:7e:f2:6a:
e7:4b:ec:fb:2f:50:44:ed:d1:ee:9a:d8:b8:b0:50:
46:ca:5d:45:34:dd:66:25:f2:f0:18:3f:18:a0:55:
d7:5e:06:25:0b:33:54:d4:61:a0:de:43:ac:cc:c9:
30:80:9f:d2:69:d6:dd:fa:32:47:83:18:b8:be:63:
20:cc:80:4c:42:f8:e7:df:45:84:e7:1a:f0:18:af:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:9D:5B:2B:70:09:65:9F:69:25:62:FC:16:2D:60:C4:3D:1B:FB
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:07:d3:2a:88:1f:0b:61:00:13:bc:e7:57:ba:5a:ac:87:
aa:e0:a2:03:10:d3:60:3d:20:15:f0:e9:68:27:b0:e8:4f:48:
fa:d1:2d:da:fb:0b:2e:78:e2:5b:39:ec:81:cb:c7:31:4a:a2:
c7:f9:13:20:5a:d8:36:3c:fd:7a:d4:25:08:1a:41:41:c7:6e:
39:90:16:b1:5b:5f:ff:68:c6:93:6c:d9:f3:a0:98:d2:37:2c:
97:dd:fc:0f:c4:54:0c:9e:37:08:e5:59:4b:1e:92:98:66:9b:
e1:6c:8b:f1:88:51:0e:ce:c4:22:4e:73:0c:fa:1f:1a:65:a5:
d3:bd:a9:8d:82:d6:3e:bc:2a:31:54:e7:af:a5:98:58:8b:b1:
1d:c8:0d:e1:6e:5a:e4:48:ac:2f:24:98:a5:0a:18:14:19:69:
f8:25:3b:d1:8a:15:f0:63:db:27:57:f6:7a:68:6e:f3:f2:75:
ac:ab:6d:aa:d0:73:00:c3:69:fe:ce:2d:8b:cf:67:aa:f7:db:
e9:08:82:ba:eb:b1:ff:4b:12:fc:1d:60:8e:04:0c:1b:ef:bd:
92:07:c3:ab:44:fa:7b:f9:23:9f:99:1f:c4:7f:79:c9:16:d9:
d7:76:2d:b1:6d:a5:e5:a4:04:ab:e0:da:c3:75:7c:f5:9e:1e:
51:8e:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:19 2026 by rpki-client