Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: We/BFC/LcGGF5YI6cgIVSrcTdRvyL9m/npxh8M7aJkU=
Subject key identifier: DA:DC:38:33:C4:84:68:46:5B:49:28:5E:0B:22:CD:3C:0C:73:9C:27
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019FAB9A233F304ED4482AA984EE0CA343C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 19A8
Signing time: Wed 29 Jul 2026 02:00:33 +0000
Manifest this update: Wed 29 Jul 2026 02:00:33 +0000
Manifest next update: Thu 30 Jul 2026 02:00:33 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: nMX5v2EPaOUdA90JhduK0uSQaGNSekivVSoupRUnFYE=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:23:3f:30:4e:d4:48:2a:a9:84:ee:0c:a3:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jul 29 02:00:33 2026 GMT
Not After : Jul 30 02:00:33 2026 GMT
Subject: CN=dadc3833c48468465b49285e0b22cd3c0c739c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:36:3a:e3:ac:82:95:b2:5b:53:f7:45:23:
3c:ac:b0:99:3c:f4:b6:80:b5:9a:d5:9a:2e:93:f7:
50:1b:de:a9:e9:89:75:4c:dc:ce:99:8a:ab:89:83:
43:48:ec:a6:d9:24:bf:a5:69:df:19:73:9c:5f:1f:
41:b9:bb:09:51:42:27:82:3e:a0:13:f6:45:6e:c1:
9b:1e:f3:9d:46:4f:09:3a:51:79:e0:76:67:71:25:
7b:6a:e9:ed:62:72:a0:54:45:76:09:b0:31:97:da:
86:59:46:ac:60:7c:7a:50:cf:6f:41:c4:d7:ad:04:
5f:56:3f:fb:8e:77:4f:36:31:93:13:a9:5b:43:02:
bb:05:67:c9:6e:98:5a:17:dd:84:f1:4d:f6:a0:ce:
0c:ad:ce:ec:1d:ad:17:9d:00:0a:b7:e6:df:da:23:
14:73:e7:56:e9:3e:85:18:f3:b6:69:e3:8c:fa:c4:
5a:5a:1f:3c:21:0d:59:86:85:19:b7:76:40:82:07:
09:2a:2d:3c:ad:66:b8:6f:f0:d3:d0:63:a2:e0:8f:
92:e0:4e:9b:ef:fb:a5:d1:75:04:78:b8:c9:30:cc:
02:1b:84:3b:55:7f:59:74:80:08:1c:5b:94:ee:76:
32:e5:49:bf:f7:cc:cd:d4:aa:61:1b:e8:f6:86:7d:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:38:33:C4:84:68:46:5B:49:28:5E:0B:22:CD:3C:0C:73:9C:27
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:6c:60:b9:46:17:7f:11:b9:ac:98:45:1f:09:ca:fd:60:
66:9b:43:ef:97:b0:0e:ee:cf:41:17:2f:d9:a8:f3:d1:8f:fe:
3d:92:76:57:19:ff:75:fe:7f:39:fc:93:59:ed:4b:48:01:1b:
25:a7:3d:21:f4:71:fe:d9:50:4e:f7:3a:89:2a:f7:10:2f:ad:
dd:84:9b:88:54:7a:10:32:34:fd:a3:6e:e2:b1:b7:18:44:1b:
a5:54:52:85:ac:56:7e:6a:1f:08:07:06:c1:55:2f:49:ca:aa:
40:df:c4:fe:55:54:4c:d6:93:9f:78:e6:dd:3e:b9:7f:ec:f3:
e0:13:82:d3:50:59:e3:62:10:67:b8:46:d5:25:a5:9d:74:8d:
e6:5a:d9:0f:36:9c:ad:a1:93:0a:bd:ff:9c:de:c2:66:a8:8b:
d5:9b:dc:d4:53:5e:51:38:bc:e4:36:5f:54:e6:21:28:8b:5f:
13:7e:68:3c:c1:6a:47:86:7d:24:5e:3d:36:1a:a3:7f:1a:c8:
36:6b:b3:45:c1:24:d1:d7:69:24:2b:2c:ac:7b:11:96:85:61:
8e:be:5e:a5:39:2b:88:d1:4c:96:aa:fc:1e:99:35:de:b2:6d:
c3:14:56:b8:5e:3e:12:fd:59:05:0e:90:a3:b2:95:c5:1e:fa:
0c:91:f2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmiM/ME7USCqphO4Mo0PHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjYwNzI5MDIwMDMzWhcNMjYwNzMwMDIwMDMzWjAzMTEwLwYDVQQD
EyhkYWRjMzgzM2M0ODQ2ODQ2NWI0OTI4NWUwYjIyY2QzYzBjNzM5YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fQ2OuOsgpWyW1P3RSM8rLCZPPS2
gLWa1Zouk/dQG96p6Yl1TNzOmYqriYNDSOym2SS/pWnfGXOcXx9BubsJUUIngj6g
E/ZFbsGbHvOdRk8JOlF54HZncSV7auntYnKgVEV2CbAxl9qGWUasYHx6UM9vQcTX
rQRfVj/7jndPNjGTE6lbQwK7BWfJbphaF92E8U32oM4Mrc7sHa0XnQAKt+bf2iMU
c+dW6T6FGPO2aeOM+sRaWh88IQ1ZhoUZt3ZAggcJKi08rWa4b/DT0GOi4I+S4E6b
7/ul0XUEeLjJMMwCG4Q7VX9ZdIAIHFuU7nYy5Um/98zN1KphG+j2hn2fowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrcODPEhGhGW0koXgsizTwMc5wnMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcb1sYLlG
F38RuayYRR8Jyv1gZptD75ewDu7PQRcv2ajz0Y/+PZJ2Vxn/df5/OfyTWe1LSAEb
Jac9IfRx/tlQTvc6iSr3EC+t3YSbiFR6EDI0/aNu4rG3GEQbpVRShaxWfmofCAcG
wVUvScqqQN/E/lVUTNaTn3jm3T65f+zz4BOC01BZ42IQZ7hG1SWlnXSN5lrZDzac
raGTCr3/nN7CZqiL1Zvc1FNeUTi85DZfVOYhKItfE35oPMFqR4Z9JF49NhqjfxrI
NmuzRcEk0ddpJCssrHsRloVhjr5epTkriNFMlqr8Hpk13rJtwxRWuF4+Ev1ZBQ6Q
o7KVxR76DJHyMw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:04 2026 by rpki-client