Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
File: lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft (raw, json)
Hash identifier: S4UJZNrmMCcyBO94YbMsxkiyYRatH4ccDZVbPzdkPCg=
Subject key identifier: 24:31:F9:FC:1A:C2:2D:59:1E:91:63:70:50:16:84:54:AA:6A:2A:99
Authority key identifier: 94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
Certificate issuer: /CN=94bd5921933292a2f93e049f8b81fb7650301c67
Certificate serial: 019ED34F5CC1CD40B6215756B53FE1CD98A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:00:54 +0000
Manifest this update: Wed 17 Jun 2026 02:00:54 +0000
Manifest next update: Thu 18 Jun 2026 02:00:54 +0000
Files and hashes: 1: lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl (hash: hhBvcKiwS9/Ty53/WfD9kFk6scLcQRuLNzGorP4203A=)
2: xITKiIhMJqr64QWowOp5Oos94Ts.roa (hash: 0jGjhsogZ02DOgH0lYdyo4DGk9IGywTmUiv2U/qvPr4=)
3: zzQCv-E1bq6Vad6HBjZl3qZJnBs.roa (hash: GpwoA2VX03zH2zUpZrOb1rRxnrDXnBgehj8lNRuizXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:5c:c1:cd:40:b6:21:57:56:b5:3f:e1:cd:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bd5921933292a2f93e049f8b81fb7650301c67
Validity
Not Before: Jun 17 02:00:54 2026 GMT
Not After : Jun 18 02:00:54 2026 GMT
Subject: CN=2431f9fc1ac22d591e91637050168454aa6a2a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:c7:d1:b5:e7:59:e2:40:a1:4f:c7:34:5c:
98:1a:18:04:7b:09:21:1f:2d:02:5e:89:49:74:63:
44:0f:9f:23:8f:50:68:f1:a9:55:9a:87:9d:c6:70:
5b:da:2d:ea:2f:16:34:e5:1a:84:e5:47:de:94:dc:
fd:31:b3:97:c0:d6:77:93:c7:c5:ba:76:46:80:9a:
13:a8:4a:a6:54:a8:a2:6c:22:91:42:c6:f6:f9:ac:
c3:21:6d:ac:58:18:9d:ec:04:24:48:db:76:d6:14:
ae:6e:ca:75:61:7e:b4:f6:bc:0f:3b:28:fe:64:18:
df:e0:82:1c:f7:88:15:44:86:8a:35:c8:0d:9d:42:
65:76:4f:96:4e:8f:b8:98:ab:07:fd:fe:c8:f7:6d:
6c:6a:be:5f:d3:6d:08:ca:ea:49:d4:0d:84:1a:77:
bf:36:08:ef:4b:13:c3:11:51:9c:ea:e4:a7:35:29:
bc:c9:64:25:cb:5c:49:cd:c3:63:bd:77:0b:95:b7:
f4:4b:59:8c:f4:c7:d2:86:d3:64:82:d7:2d:d8:b9:
b7:2a:34:1f:44:47:48:b9:08:b5:63:e9:a5:ff:d4:
76:3d:c6:ed:73:8f:a2:67:3a:12:79:14:40:3a:5e:
d2:1f:c1:97:1d:43:e8:02:72:2b:16:48:6f:c9:50:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:F9:FC:1A:C2:2D:59:1E:91:63:70:50:16:84:54:AA:6A:2A:99
X509v3 Authority Key Identifier:
keyid:94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:bb:d3:58:c0:c9:18:18:a4:85:b9:ba:79:68:09:38:5e:be:
32:63:69:cc:a3:de:3b:bd:34:b3:46:b1:45:13:e3:2a:99:5e:
ea:f0:d4:2c:2b:a5:84:6f:a5:51:8b:15:75:cf:e2:f3:4d:0d:
ee:5b:f8:61:0a:2b:61:b2:03:5c:8f:2e:23:17:87:da:98:8e:
06:97:bd:d1:ad:64:ab:76:86:2f:e5:03:61:1a:bb:30:c3:73:
99:40:1d:66:dd:81:98:68:f3:f6:8f:d2:d3:c4:e0:d3:7a:71:
60:0c:9a:9a:45:c5:87:45:ef:07:7c:86:18:dd:79:ed:a1:cc:
19:c6:46:1b:97:0c:d1:8b:e5:1e:ea:c3:bf:65:56:75:bb:ff:
c6:f8:3a:14:16:c8:39:46:9d:be:f9:ce:df:99:4f:b4:88:8f:
a2:1f:80:8f:9a:1e:2e:00:ca:26:a0:ab:a8:32:64:4a:df:0e:
f1:cc:85:64:51:2e:7b:43:ec:63:8b:e9:a5:20:57:26:1b:e4:
70:68:d6:4d:af:7a:a4:80:52:49:bf:25:c1:e0:e2:4b:51:30:
b5:ce:0b:3f:6b:d1:b8:72:20:e2:6b:79:19:36:79:07:c1:ef:
66:41:0e:92:f8:b2:d4:45:91:b9:fc:35:9d:19:9e:18:63:ae:
54:35:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:25:37 2026 by rpki-client