Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: ov0CcyM8viDANs/GSdJ8K7DBc/FqytEDNn99wte/shg=
Subject key identifier: E8:C5:D4:B3:72:A6:1C:F3:A1:C7:58:D3:7D:9D:A9:A0:F3:C9:8C:DF
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019FACE3DD072A7FE3EDA887D5FBA2B6BDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 17B4
Signing time: Wed 29 Jul 2026 08:00:41 +0000
Manifest this update: Wed 29 Jul 2026 08:00:41 +0000
Manifest next update: Thu 30 Jul 2026 08:00:41 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: CFItHvJ87q0DJZ8DZouvXenrgtG2W3eNN2y6nMiDkyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:dd:07:2a:7f:e3:ed:a8:87:d5:fb:a2:b6:bd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jul 29 08:00:41 2026 GMT
Not After : Jul 30 08:00:41 2026 GMT
Subject: CN=e8c5d4b372a61cf3a1c758d37d9da9a0f3c98cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:b3:7d:83:78:5d:c3:de:e5:de:74:d8:3f:
2e:29:81:68:5d:f6:e7:0e:70:2c:fb:d2:12:f6:ba:
49:de:7b:97:74:25:85:00:07:72:04:bb:f9:66:1c:
72:f8:f6:bf:ad:9d:22:69:a0:28:a6:2c:ca:86:17:
ca:24:18:43:8d:56:46:99:b8:08:dd:c0:c0:b0:b0:
60:9b:7e:d4:f8:ec:82:c3:56:31:97:d2:15:ce:6a:
c3:8b:27:f9:df:8f:c7:b9:78:61:2e:2e:ae:18:bc:
06:1e:bb:c5:38:f6:cb:fb:42:8f:e2:7d:4d:af:3b:
1e:1b:b0:b5:db:e0:62:fd:53:8b:c2:92:7b:07:4a:
b1:e5:db:aa:47:b7:fb:06:cc:6d:18:a1:52:91:bc:
25:50:a6:7a:7d:bf:a3:56:8c:99:f5:30:05:47:11:
07:2a:6b:80:9c:b3:d5:0b:c3:ec:33:8b:4f:b6:ac:
4b:4d:b6:d6:ca:28:03:b1:24:a0:02:c4:06:8e:ae:
83:d1:d3:3d:c2:da:7a:a5:67:76:ad:6b:f4:80:86:
5e:29:a2:de:e3:41:2e:92:6c:ec:98:ca:b1:7a:a3:
41:c6:ba:8d:f7:e3:ae:cc:96:7e:0d:0e:79:47:b0:
fa:7e:52:22:1d:99:b4:d8:50:55:2c:71:6b:0a:fc:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:D4:B3:72:A6:1C:F3:A1:C7:58:D3:7D:9D:A9:A0:F3:C9:8C:DF
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a7:26:e1:8a:6f:a5:b5:0d:ee:f5:9e:58:b1:5c:15:d0:61:
61:c9:cd:66:60:22:27:98:05:7c:98:f2:91:4a:8d:e5:de:1f:
69:59:55:df:b5:35:6d:10:b8:ad:94:77:be:e6:25:64:b5:69:
f5:83:59:25:b1:8b:8c:04:42:f7:1e:31:a6:5c:51:29:b8:14:
fe:06:a3:c9:d0:6b:49:7c:02:4e:15:af:6f:60:0f:2f:a8:e0:
6f:80:2b:5d:3b:e1:a8:8f:48:69:44:dc:3d:7b:85:1a:1d:fb:
a0:34:b6:e6:ea:2b:83:55:ab:05:aa:d1:1d:86:d1:a4:d6:bb:
fd:0f:0e:ce:0d:e4:98:0f:75:f3:3d:f2:5a:31:0b:a1:5c:b3:
09:13:89:36:3d:24:f3:e3:8f:ad:7a:72:d3:61:9a:96:b7:0a:
a7:e4:9f:bc:bc:9a:8a:82:7d:1d:40:6e:2a:e0:5d:fd:d6:37:
e8:74:82:43:8a:cc:58:a7:84:a3:0d:55:3f:39:27:69:bf:e3:
94:1d:61:4c:25:37:3d:d3:f6:0f:ca:f0:8a:90:a8:aa:78:8d:
b5:f7:f9:1d:8a:d4:c0:a8:a2:d5:45:55:cd:98:32:90:e5:be:
04:36:cb:79:6d:e5:08:95:2d:c5:ca:04:87:ca:5c:90:1e:ee:
99:42:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:42:03 2026 by rpki-client