Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: tfm8TCF2VKDGxCiBCVX5XTBOe+KQKHB4DgOqqlewnnA=
Subject key identifier: E4:97:57:51:5B:4F:E6:9C:FE:00:CA:F4:16:0C:00:2E:CF:C2:CF:B3
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019FAD524A52A8C8D7840B2371A8B0D17877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 19DD
Signing time: Wed 29 Jul 2026 10:01:19 +0000
Manifest this update: Wed 29 Jul 2026 10:01:19 +0000
Manifest next update: Thu 30 Jul 2026 10:01:19 +0000
Files and hashes: 1: GOIVhBnn15XT5eXlASEvxn2hNDw.roa (hash: AmDJ5Odj0fdYze4B6QAdyi2ODpezKvZwj7zUISc+vO0=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: Ky2wIe2lfVGxKeANF2L0szROuPATar8SV82fmb+CamM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:4a:52:a8:c8:d7:84:0b:23:71:a8:b0:d1:78:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jul 29 10:01:19 2026 GMT
Not After : Jul 30 10:01:19 2026 GMT
Subject: CN=e49757515b4fe69cfe00caf4160c002ecfc2cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:10:87:66:24:69:4e:19:41:ab:9b:80:40:
d6:8f:ee:cd:39:21:83:56:6d:f6:17:7a:da:a3:c0:
71:82:c3:3c:c2:80:28:f3:c1:36:37:5b:e5:99:15:
b8:da:56:ca:04:bb:fe:9a:ed:09:8d:1d:39:25:07:
73:15:86:52:84:bf:1b:a9:33:b2:14:89:63:21:4b:
52:eb:13:3d:96:c1:15:13:95:3a:9a:d8:fb:b5:15:
6c:3f:aa:f5:ee:b5:67:3e:9a:69:35:6c:c4:42:96:
bc:d4:24:e5:c7:99:64:eb:b5:8d:f8:fb:49:5e:a0:
7e:d4:a0:cc:cb:21:7f:9f:f3:c6:67:10:5e:2b:8c:
b3:e1:54:61:f2:b0:75:68:72:d2:71:d6:1b:fd:6d:
3e:4b:fe:35:3f:e5:63:9b:8d:a4:e1:5a:cb:bb:22:
ad:34:68:91:95:bd:7f:0d:50:49:3c:a1:d0:8f:08:
16:a4:29:64:eb:ed:7f:ef:65:ff:fb:94:02:e1:68:
16:54:18:8f:a7:f9:26:07:5f:7b:13:bf:16:9f:5c:
3a:a5:24:ec:26:e5:79:b0:c6:39:52:23:75:a7:cc:
ce:c3:5d:b2:7c:89:dc:24:c3:5f:f5:24:69:93:3e:
3d:d4:94:3c:52:3e:c4:a3:df:71:1d:76:76:9e:ab:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:57:51:5B:4F:E6:9C:FE:00:CA:F4:16:0C:00:2E:CF:C2:CF:B3
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:59:07:29:c0:cc:80:f3:64:3c:5a:21:d4:8a:82:32:c2:86:
3e:8d:1f:90:76:91:dc:ad:08:13:b6:bd:c6:4a:37:97:7d:d6:
40:d4:db:1f:be:0f:c1:cc:f8:7c:9c:1f:72:d9:81:ae:34:db:
a6:f1:a6:5e:5a:01:0f:db:fa:96:76:2c:ea:9a:3f:fe:8e:03:
75:34:b1:fe:41:f0:af:74:a3:40:e1:18:b0:ee:b7:e2:94:1e:
a7:79:c3:f4:8b:16:d9:33:7d:92:85:4c:af:bf:cf:22:53:a8:
32:e2:d8:fd:d3:5f:e1:1c:41:24:d8:d4:46:96:02:fc:81:bc:
63:9c:68:3f:a1:3e:aa:09:30:43:da:38:86:da:b7:3a:db:4c:
e9:c6:99:df:09:5d:37:4a:0e:49:98:db:8f:8a:68:8f:1c:11:
d5:39:87:31:e8:e8:96:91:f3:73:96:fd:fb:29:6c:6e:ce:10:
bd:5f:1c:18:d7:07:51:d0:dd:4f:bb:3d:df:a5:37:86:51:b2:
ba:be:7f:bf:3d:fa:de:27:c3:05:e3:62:38:e7:47:d1:df:b0:
5b:78:4a:cd:0e:cc:9c:26:e6:f4:6d:79:5e:41:c8:b2:d7:bc:
23:39:2d:da:8d:7b:cf:1b:77:e2:7c:62:83:c0:0c:c5:3f:17:
53:0b:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:26 2026 by rpki-client