Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: FJ696EFNyCeKwA7ZXvzKWydZlAWx44SZiI/TlNqYR8Y=
Subject key identifier: 73:3B:84:3C:DC:FC:41:8E:80:C7:20:18:D9:59:48:CC:56:0B:96:B3
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019FABD1A591FD26C25DA486E89A6D6836CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 158F
Signing time: Wed 29 Jul 2026 03:01:11 +0000
Manifest this update: Wed 29 Jul 2026 03:01:11 +0000
Manifest next update: Thu 30 Jul 2026 03:01:11 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: oIHCgYSIo7ph2c+7Ak8MtT4Qs8PQUSCLDaCkuF/jtsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:a5:91:fd:26:c2:5d:a4:86:e8:9a:6d:68:36:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jul 29 03:01:11 2026 GMT
Not After : Jul 30 03:01:11 2026 GMT
Subject: CN=733b843cdcfc418e80c72018d95948cc560b96b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:72:7f:ca:9b:09:aa:bb:b3:f0:ee:75:0f:
64:29:d2:1a:5c:66:fb:e1:c8:0e:5a:9a:93:7f:fd:
88:0b:18:b3:92:bd:c1:d4:85:1e:63:cd:2d:8d:40:
3c:8e:67:73:de:73:4b:95:94:ff:b8:02:9a:b5:fb:
3c:1c:6a:9c:1a:91:11:68:a4:47:eb:e1:b6:1b:97:
43:b0:12:07:8a:b0:46:0b:c7:c2:50:83:49:cd:cd:
ae:68:da:b0:9e:ba:03:48:14:ab:dd:fc:17:50:0d:
a2:c6:68:23:05:f2:5b:2a:63:22:eb:0b:b3:d6:c9:
63:35:25:d9:cb:2b:aa:76:72:fc:e9:89:0a:1a:a7:
bb:64:02:d4:ed:50:4c:59:e9:f0:98:63:25:4d:88:
c4:b4:b0:bb:f0:11:2d:c5:f6:78:ea:09:0d:ba:3c:
1a:17:3c:02:13:41:18:8c:b5:b5:8b:5f:23:a2:41:
12:6b:97:28:f2:90:6a:6f:f1:7b:50:9a:b7:01:0c:
7a:47:30:73:8e:46:7f:d6:24:6b:fe:6e:b5:79:4c:
60:46:a2:6e:80:66:db:91:79:06:bb:54:0c:0a:a1:
c5:56:20:09:00:a3:0a:d4:24:38:2f:02:37:b1:2b:
a0:30:5b:9c:bb:da:61:42:b0:9f:05:72:f5:70:27:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:84:3C:DC:FC:41:8E:80:C7:20:18:D9:59:48:CC:56:0B:96:B3
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e2:f2:75:cf:d1:d3:ce:4e:a8:0d:0c:41:83:de:64:f6:c7:
8d:2b:75:f3:44:bb:4e:b1:e5:c3:79:91:3b:43:31:f6:d0:75:
be:36:8f:aa:bd:7c:c6:ba:8a:d7:ca:a9:fa:dd:a8:6e:91:de:
7f:fa:31:7c:2b:be:1a:5d:f3:27:4c:b3:6f:f8:7b:86:7f:76:
60:cb:6d:9e:04:8a:f2:77:02:60:7b:26:3a:95:1b:d3:bc:28:
6e:26:8b:e3:18:84:63:67:e2:43:9b:c7:2f:dc:88:ba:5f:5b:
90:c2:4d:28:ef:7f:5d:a7:75:0f:27:6c:f8:2d:32:60:ed:cf:
f1:62:a4:26:b4:1b:bc:ab:5d:16:98:81:62:f5:03:37:35:04:
9f:51:c9:e0:85:7e:cf:90:d8:07:95:b4:97:e2:75:8e:25:e3:
76:3c:04:98:4c:8f:d1:e5:dc:98:4e:44:3d:f4:56:e9:44:ac:
f7:b1:71:0b:62:7d:4c:76:e2:ce:67:6d:15:41:63:0e:eb:18:
11:ef:e6:bf:bc:d4:e2:0c:95:49:25:fd:31:cd:21:ab:5a:50:
ff:7b:88:b7:92:b9:6c:77:66:00:e8:48:b5:7e:3d:30:7e:d0:
ee:d6:fd:bb:6f:6b:50:f9:37:3d:d4:38:d4:88:c3:11:ba:fb:
d4:e1:ab:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0aWR/SbCXaSG6JptaDbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5
MGExYWQwHhcNMjYwNzI5MDMwMTExWhcNMjYwNzMwMDMwMTExWjAzMTEwLwYDVQQD
Eyg3MzNiODQzY2RjZmM0MThlODBjNzIwMThkOTU5NDhjYzU2MGI5NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2tyf8qbCaq7s/DudQ9kKdIaXGb7
4cgOWpqTf/2ICxizkr3B1IUeY80tjUA8jmdz3nNLlZT/uAKatfs8HGqcGpERaKRH
6+G2G5dDsBIHirBGC8fCUINJzc2uaNqwnroDSBSr3fwXUA2ixmgjBfJbKmMi6wuz
1sljNSXZyyuqdnL86YkKGqe7ZALU7VBMWenwmGMlTYjEtLC78BEtxfZ46gkNujwa
FzwCE0EYjLW1i18jokESa5co8pBqb/F7UJq3AQx6RzBzjkZ/1iRr/m61eUxgRqJu
gGbbkXkGu1QMCqHFViAJAKMK1CQ4LwI3sSugMFucu9phQrCfBXL1cCdDDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM7hDzc/EGOgMcgGNlZSMxWC5azMB8GA1UdIwQY
MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt
Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll
LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOLydc/R
085OqA0MQYPeZPbHjSt180S7TrHlw3mRO0Mx9tB1vjaPqr18xrqK18qp+t2obpHe
f/oxfCu+Gl3zJ0yzb/h7hn92YMttngSK8ncCYHsmOpUb07wobiaL4xiEY2fiQ5vH
L9yIul9bkMJNKO9/Xad1Dyds+C0yYO3P8WKkJrQbvKtdFpiBYvUDNzUEn1HJ4IV+
z5DYB5W0l+J1jiXjdjwEmEyP0eXcmE5EPfRW6USs97FxC2J9THbizmdtFUFjDusY
Ee/mv7zU4gyVSSX9Mc0hq1pQ/3uIt5K5bHdmAOhItX49MH7Q7tb9u29rUPk3PdQ4
1IjDEbr71OGrfg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:30:39 2026 by rpki-client