Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: X2KFhj3Jn2o4QVk+buLgyOarBFsTMxWwPx/RhMQcGzc=
Subject key identifier: 0B:C7:55:6E:42:03:52:43:63:E6:EE:13:C7:7A:CA:37:21:60:C4:33
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 019FA8CFBD725953ACE5ADA1EBB823E74CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 04F0
Signing time: Tue 28 Jul 2026 13:00:14 +0000
Manifest this update: Tue 28 Jul 2026 13:00:14 +0000
Manifest next update: Wed 29 Jul 2026 13:00:14 +0000
Files and hashes: 1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: Hv9B/IegjzauGavtlpeVyTPwhIesKYq2QhHtk8pf6XQ=)
5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:bd:72:59:53:ac:e5:ad:a1:eb:b8:23:e7:4c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Jul 28 13:00:14 2026 GMT
Not After : Jul 29 13:00:14 2026 GMT
Subject: CN=0bc7556e4203524363e6ee13c77aca372160c433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:73:30:7d:67:82:f4:51:47:c3:f7:a5:2f:
1d:f3:e5:b7:e5:15:53:86:bc:99:22:05:36:30:30:
6d:fd:21:92:d4:fc:23:05:a8:d4:02:0c:c2:8c:67:
37:23:31:df:94:ac:53:fb:5a:7e:1f:0b:c8:93:c0:
c3:02:2f:3f:33:0a:f1:34:ac:f7:aa:3c:12:9a:4e:
89:c3:15:30:86:37:17:b1:08:3e:b6:b3:43:ad:74:
2c:9c:f1:c3:78:d3:d7:f2:70:7b:04:64:a6:8d:5f:
54:12:8d:9b:81:4e:78:7b:b5:a2:a1:fa:7f:53:5e:
f1:1b:60:71:98:d4:d3:ef:27:1c:f2:ca:ff:62:8b:
5f:1a:20:68:eb:5e:80:ef:74:7b:22:40:2b:a3:59:
b6:95:75:55:92:b2:07:68:8c:57:33:a8:aa:e6:ad:
7d:8e:a2:47:c1:56:f1:97:04:8d:86:04:75:0e:d7:
22:17:24:bd:b8:96:dd:65:5a:ec:59:ce:3c:43:3f:
6c:7f:0d:42:78:13:94:8b:f9:39:0d:c4:21:54:d0:
df:57:58:e3:94:01:f4:5d:6c:6f:9f:f7:35:21:22:
8d:73:51:e3:b0:a1:cf:38:ba:22:0f:5b:48:ea:78:
43:1c:0b:a2:30:ed:2f:49:84:db:a9:3f:1d:4b:09:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C7:55:6E:42:03:52:43:63:E6:EE:13:C7:7A:CA:37:21:60:C4:33
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:d0:2e:e9:87:c2:0d:15:f1:53:a4:fb:24:88:27:37:44:
3d:52:9e:aa:3f:24:04:fa:e7:8e:05:93:ca:a1:df:0f:80:5f:
30:e5:5c:f3:e4:66:19:d2:69:91:6e:a7:9a:a6:12:58:66:f2:
33:b3:fd:6d:46:21:e4:a4:b7:06:5d:eb:b2:da:2f:e9:ce:6f:
a5:ba:57:a7:3e:75:71:bb:26:97:80:e8:7f:6f:0a:2a:76:20:
4f:13:21:62:e4:ca:8a:a3:a3:07:57:30:c4:92:98:4d:dc:b5:
a4:42:71:54:01:31:d5:46:03:ac:cf:2e:3a:fd:92:c1:3f:09:
c6:82:a6:3c:19:c3:b6:d9:27:32:e2:c6:ed:f6:98:d1:ac:f0:
db:02:41:64:0a:b2:db:e8:55:8d:4f:d5:e9:f7:f0:3a:1d:d5:
29:9b:fc:d3:b5:18:ef:1e:c3:b1:5c:2a:ee:1b:b3:f9:e6:62:
1a:21:02:00:65:f4:a9:b2:65:9b:6c:60:2a:0b:90:c4:c0:10:
77:59:43:d6:e6:78:8a:cc:13:9c:4a:0c:40:c3:65:e5:6e:a3:
ff:4c:6a:28:35:53:50:de:40:c1:64:1c:ac:e2:50:79:0e:09:
6a:6d:52:3b:7a:97:37:18:0a:4b:93:c3:cb:2c:d9:8d:5a:da:
48:1f:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:03 2026 by rpki-client