Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: PO3Lj6VM1w/j2RwqDNpvpEC9EPNS09jlpc7a+tIUvEs=
Subject key identifier: 38:32:CE:53:14:FA:8E:D7:9C:51:72:CD:0A:FA:6F:1C:CA:C5:B1:2F
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019EC412DEB5980C3406CD5157F0ED54038C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1517
Signing time: Sun 14 Jun 2026 03:00:31 +0000
Manifest this update: Sun 14 Jun 2026 03:00:31 +0000
Manifest next update: Mon 15 Jun 2026 03:00:31 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: j450DFk9S8PUY3DR7qh1mallimkYSqANBvD/NuJKLYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:12:de:b5:98:0c:34:06:cd:51:57:f0:ed:54:03:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jun 14 03:00:31 2026 GMT
Not After : Jun 15 03:00:31 2026 GMT
Subject: CN=3832ce5314fa8ed79c5172cd0afa6f1ccac5b12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7c:dc:67:b5:44:15:16:44:9a:98:6b:0f:0b:
74:4c:02:fd:fc:59:56:b3:cf:e3:84:15:30:13:67:
d9:5f:51:4f:64:82:66:75:6f:cd:d5:4d:c8:38:01:
a1:c8:16:f2:dd:93:09:ee:6e:50:f5:aa:54:b1:07:
75:7f:d5:15:10:19:c0:db:3a:52:8a:a3:2b:e8:80:
65:84:fc:42:2c:3f:e4:52:b7:80:3d:56:12:05:a2:
eb:34:fc:c3:ff:c6:35:06:03:43:3f:09:ab:a1:2c:
cd:3e:c6:2a:17:e2:5b:16:aa:69:c1:ef:59:f6:f3:
9e:9e:d7:11:53:55:1a:d4:1b:c1:bd:92:70:b8:a0:
81:54:75:f4:53:fa:c3:a4:3e:6a:81:88:da:54:77:
fc:31:48:6b:06:83:f3:d2:70:c4:d8:9c:91:b1:be:
17:11:48:e8:dc:91:79:8f:ad:76:72:3f:f5:39:38:
72:66:26:d4:ad:fa:09:76:b3:de:0b:60:12:d8:89:
ef:28:16:b8:17:ae:71:08:89:e0:34:16:f4:7f:16:
fb:1e:c3:f6:f4:96:63:50:1c:ab:e9:04:a1:35:ff:
fd:4f:04:5c:c5:cc:b9:e5:79:ff:16:bc:d7:77:11:
69:ea:95:00:63:12:79:03:48:9c:31:51:33:6f:be:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:CE:53:14:FA:8E:D7:9C:51:72:CD:0A:FA:6F:1C:CA:C5:B1:2F
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:0a:2a:d8:62:18:8a:2a:26:70:0b:77:55:62:8f:e8:13:
12:8d:24:27:44:db:77:22:cf:20:0e:20:e1:e4:0e:a9:6e:0a:
17:e4:26:6e:a4:c1:4c:23:1a:5d:1d:ef:9d:4d:ae:ae:04:a9:
8b:74:f4:df:d5:4e:9a:27:b4:53:0c:07:df:73:ce:bb:1d:4e:
49:a5:33:c6:94:2f:de:b3:a2:d6:6c:25:69:46:36:bc:b2:d2:
ce:83:54:48:f7:2f:b5:76:3f:7a:0d:3e:13:12:db:a4:b4:87:
f3:ff:d1:22:6c:01:6f:b6:1d:e2:da:ba:06:c5:f2:92:54:e5:
a2:91:3e:51:a8:ba:82:9a:7b:ad:ed:c0:ed:24:a7:84:ff:0a:
21:38:f0:28:c1:ea:6e:cd:a8:70:40:4a:4c:82:02:06:41:77:
bc:57:df:86:06:b2:c4:60:32:57:a1:b4:98:81:45:69:44:1c:
23:c9:58:8d:ad:f2:35:ed:52:08:85:36:87:da:96:a7:77:83:
f1:a8:55:e6:14:b2:ce:bc:d8:72:a0:93:a1:7d:26:f2:ea:22:
81:2c:59:1e:f6:69:aa:bd:9a:c3:94:bc:ba:a9:e7:3e:4f:86:
11:9d:37:e0:a5:8c:bf:9c:d3:4e:16:7c:95:d6:a2:42:04:d5:
f3:18:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:26:53 2026 by rpki-client