Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: zg5htmNmk5IIEaXdJkPVgu2lb1y2V9SqECYqreJm3c4=
Subject key identifier: 57:3A:7C:B6:41:50:FC:61:B4:21:30:9C:FA:55:D3:AC:A4:9F:D4:08
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019FAB99E74F335FE3A9FADF850F3F9CC928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:00:17 +0000
Manifest this update: Wed 29 Jul 2026 02:00:17 +0000
Manifest next update: Thu 30 Jul 2026 02:00:17 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: 3PKmIfW3I3amtbTWgvCfQbVzhXDSk+tBxLgtFgKU1HY=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:e7:4f:33:5f:e3:a9:fa:df:85:0f:3f:9c:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jul 29 02:00:17 2026 GMT
Not After : Jul 30 02:00:17 2026 GMT
Subject: CN=573a7cb64150fc61b421309cfa55d3aca49fd408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:cc:99:72:72:23:42:28:77:8a:3b:7f:ac:
f9:a6:98:f1:7d:c3:34:99:99:da:f5:06:12:9c:3f:
00:2c:a2:31:ea:a9:e5:3b:89:35:7c:98:de:28:55:
a5:b3:11:f2:f1:85:b7:88:9e:14:af:70:a5:44:a8:
ae:21:24:64:8d:9a:7f:23:62:89:95:6c:f5:ab:7c:
b6:cc:1b:7d:37:13:5c:ae:31:61:e5:d6:8c:de:c3:
2c:4f:c6:06:2c:23:ea:8a:58:38:70:c4:f0:22:24:
f3:84:be:2b:ad:2d:ca:e2:d6:60:be:21:f5:93:60:
51:0b:c8:4a:ea:cf:45:56:dc:80:31:86:62:96:6d:
0a:28:6a:74:95:63:a6:13:9b:c4:6d:da:1b:fa:13:
98:48:a2:2e:3c:ae:77:6d:1f:20:bc:2d:30:98:5c:
73:ca:64:65:0e:d1:38:69:30:72:04:0c:fa:dc:dc:
44:07:a8:39:cf:c4:e9:60:61:f4:bd:8e:cf:28:13:
65:6b:f0:90:26:87:b8:3b:55:ca:5a:d2:7b:d7:79:
22:cf:a7:14:13:d0:90:01:eb:60:cd:38:81:fa:6e:
99:37:cc:c0:5d:9c:b7:4b:ea:d7:46:66:07:2b:8c:
30:ac:12:c4:74:21:be:bb:31:09:9a:db:08:79:3d:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:7C:B6:41:50:FC:61:B4:21:30:9C:FA:55:D3:AC:A4:9F:D4:08
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:8c:34:48:5d:48:99:10:95:f4:83:30:0b:e5:62:4b:29:
0a:fe:87:33:a4:e1:48:68:c1:13:20:fa:49:0c:25:6c:2a:2f:
af:86:7f:72:95:a9:e7:8e:dd:3e:b8:57:d5:2f:76:3a:b9:a9:
d7:a3:16:20:58:f9:19:47:e8:12:e8:b1:78:f6:3d:09:c7:3f:
3e:aa:ab:6d:b7:83:44:c6:40:ca:77:80:2d:b1:6b:ff:ef:d2:
c7:9c:1e:4f:6b:80:f1:63:17:f7:ea:5c:45:6c:88:ba:4e:a4:
ff:97:da:9b:34:2d:0d:ef:c2:a1:fa:cf:f4:4b:9e:1f:83:bd:
10:d9:e0:1c:a9:94:9e:39:f4:70:9d:88:d9:22:ba:87:4d:e7:
6c:3e:44:e0:c8:30:16:32:ee:16:49:b1:8f:a9:e0:28:8d:d6:
c6:f0:7d:e8:c6:9d:80:2e:e9:8a:23:d2:d4:42:f1:b9:1f:84:
fb:1b:33:9b:b1:62:ce:29:e2:c7:63:da:83:9b:38:a6:31:12:
8b:ee:b9:cf:6a:6d:90:5d:92:7b:5b:77:31:e6:bc:db:94:da:
69:2f:4f:30:a4:04:53:3f:8b:d2:c0:b0:72:a8:71:62:d7:74:
75:fc:a1:28:93:6d:37:ab:2f:fb:74:65:92:03:e7:48:c8:a7:
94:f2:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:26 2026 by rpki-client