Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: qNHn4VMFqLJ4Db0b1GMOE0oUZ6+JhAcyPMD4WGZtPgo=
Subject key identifier: F5:40:9C:A0:51:9F:7D:2B:AE:A8:86:4C:04:31:16:B9:A9:5D:EE:B0
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019FA786E4B09D99379BFB9B5EAAA88ADD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 01B7
Signing time: Tue 28 Jul 2026 07:01:02 +0000
Manifest this update: Tue 28 Jul 2026 07:01:02 +0000
Manifest next update: Wed 29 Jul 2026 07:01:02 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: neGmORnpHOQFOuVsjpjPe0YGpbCukfhEMkRQTURFKGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:e4:b0:9d:99:37:9b:fb:9b:5e:aa:a8:8a:dd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Jul 28 07:01:02 2026 GMT
Not After : Jul 29 07:01:02 2026 GMT
Subject: CN=f5409ca0519f7d2baea8864c043116b9a95deeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:62:08:b8:7f:66:62:3c:98:53:0e:9b:b1:
7d:08:44:f7:6e:4c:67:a7:13:4b:a5:8f:80:ff:72:
71:b9:9c:35:fd:3d:31:9a:70:2f:c6:b0:08:c1:1d:
f2:87:93:f1:48:29:a2:cf:95:97:49:c3:a6:c3:44:
24:5a:1b:b6:f8:cd:01:30:e6:f9:1d:b4:45:a1:1f:
ae:fc:33:1e:f6:ef:5b:34:12:d5:a7:c0:c6:41:e7:
ce:df:9d:b6:a1:00:b6:7f:ac:6e:ce:0d:e6:cf:07:
7e:36:af:ad:8f:10:88:1b:5f:fa:21:03:97:7f:ee:
96:e7:c7:39:4b:f8:55:c8:8e:07:b7:09:0b:80:db:
bc:de:1e:eb:cd:c4:39:af:1e:74:b5:f3:12:29:48:
2b:4b:63:b9:22:dc:0d:99:5e:9f:c2:de:a3:f5:eb:
d6:82:9c:a8:ce:29:4c:f9:58:81:1f:7a:01:7b:73:
10:3a:ef:fa:28:ae:c2:95:34:1c:51:30:6a:89:85:
50:0c:cb:55:76:08:18:ab:9a:3c:0b:c0:d7:6b:f6:
95:79:25:7d:a7:7d:fc:12:97:f5:15:b7:bd:a0:fe:
80:77:bc:3f:e8:8b:10:9c:8b:bf:9e:78:6a:9a:b1:
79:48:ad:7c:15:7f:63:c0:01:51:49:a9:8b:ce:8d:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:40:9C:A0:51:9F:7D:2B:AE:A8:86:4C:04:31:16:B9:A9:5D:EE:B0
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:85:c3:1e:51:68:fb:29:2b:74:02:c8:f1:87:33:0d:ee:96:
ad:61:de:b7:32:35:d1:c3:20:be:13:63:d9:a1:6e:77:e0:b3:
67:f3:57:4a:d4:51:da:16:5a:56:17:f4:bd:55:c2:36:c1:ca:
af:b7:03:af:aa:d8:19:ec:b8:a9:7a:20:11:54:12:4e:34:f3:
9d:d1:cc:ad:d9:99:85:46:20:81:1b:45:93:a0:20:08:38:65:
40:8a:97:54:5e:71:73:e0:fd:7a:d7:76:29:11:68:91:3e:9b:
85:b4:3e:d4:0c:6c:c8:eb:a8:d2:f4:a0:13:e0:87:24:2c:d3:
be:dd:d3:bf:2f:85:2b:86:39:04:0f:59:bc:58:2b:dc:6d:a6:
ff:a1:0f:a6:95:d7:0f:78:70:03:93:61:35:61:e4:22:f4:f7:
0d:92:51:8a:d0:7b:5c:01:ea:a9:83:15:cd:97:09:dd:66:cb:
42:a3:21:f0:a7:c6:29:65:65:b5:ce:92:88:85:a8:3e:5c:e4:
6b:e7:f3:3f:d2:ed:1e:b0:42:5b:63:73:21:d9:41:f4:f2:f1:
e3:41:3e:de:85:ec:b1:e6:a8:02:af:4f:56:03:17:af:6f:9a:
28:53:f3:06:c0:6f:df:f3:fb:49:39:b7:7f:87:fb:d7:f7:cf:
8a:69:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:20 2026 by rpki-client