Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: Apt1UM/4R/Am4KSDN4m2XB2Iq6o1jAj9VRmVLk7ybn0=
Subject key identifier: 16:2C:7D:CC:C3:15:E2:D4:80:7F:E2:A3:9A:F0:73:1D:77:79:50:61
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019FAA50463EC500269A9C6A5717E4271228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 058B
Signing time: Tue 28 Jul 2026 20:00:15 +0000
Manifest this update: Tue 28 Jul 2026 20:00:15 +0000
Manifest next update: Wed 29 Jul 2026 20:00:15 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: 20whhFeyqdtbgQywmgSM+U2ZPRGvSEF3LjosbUDJhzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:46:3e:c5:00:26:9a:9c:6a:57:17:e4:27:12:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Jul 28 20:00:15 2026 GMT
Not After : Jul 29 20:00:15 2026 GMT
Subject: CN=162c7dccc315e2d4807fe2a39af0731d77795061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:84:7e:6d:ac:6e:6d:8c:a4:e2:fa:06:db:
4c:e4:d8:64:9e:68:e0:7d:ea:02:60:55:36:32:25:
43:46:1f:41:5c:1f:a3:05:74:c8:30:40:a5:f8:cc:
23:62:2a:65:a3:43:fc:6d:24:ee:e8:3a:90:eb:8c:
7f:c1:0d:a4:36:4c:5b:1e:9e:2b:cd:13:6a:3d:03:
db:85:ad:a1:1a:d8:eb:fc:ff:31:e7:83:ca:f9:23:
71:f9:07:12:7b:78:98:b3:cc:85:19:2b:fe:d6:dd:
c7:b1:ba:a4:86:03:2f:bd:0a:26:68:26:36:b5:79:
73:95:97:ce:bc:72:85:2b:de:57:fe:38:9a:68:3a:
b0:bf:10:97:54:e5:d9:b9:aa:a8:39:8b:3d:03:74:
62:ad:51:87:1a:fa:06:f7:aa:4a:66:04:31:03:72:
cf:1f:7f:ec:b9:47:f2:77:bc:08:be:00:5a:9e:d9:
38:c7:35:2d:0b:f8:66:b2:f8:dc:01:c7:67:1d:66:
b7:8e:34:eb:1d:6e:58:0c:47:db:86:05:77:42:dc:
26:94:9d:e8:25:1a:30:e3:a2:b6:78:e5:b3:5b:7e:
63:ec:9a:16:bc:57:65:cf:56:66:06:0c:75:ee:07:
b0:68:b7:fe:3c:c2:2b:b4:e1:ec:69:69:2a:e7:13:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:7D:CC:C3:15:E2:D4:80:7F:E2:A3:9A:F0:73:1D:77:79:50:61
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:02:11:8c:de:77:23:3d:5d:21:96:79:7b:f2:97:41:4b:e4:
e5:bf:4c:e8:02:c7:a6:39:dd:f7:86:b4:a8:08:57:56:61:21:
81:10:6d:9f:11:e8:20:72:27:b8:73:7b:09:12:ae:4d:e3:e3:
c9:c8:25:06:6e:28:04:88:0d:b0:59:60:24:c8:cb:2b:fd:0c:
7c:2a:77:ab:b8:d4:cb:7f:9c:09:a5:32:da:d8:54:3e:dc:13:
4f:f5:0c:55:53:11:31:fe:69:50:f1:7a:50:66:01:c5:2c:33:
5c:61:bb:ab:15:bc:ac:92:18:ad:36:87:97:8b:6c:be:8a:19:
69:98:1c:ea:f0:11:d7:76:a3:49:ff:e1:cb:e4:76:73:c0:c9:
08:57:a0:65:37:f1:90:63:75:60:4f:84:bb:3f:d5:c6:db:28:
f2:37:12:f2:ba:98:d5:5c:d4:7b:d1:9a:52:73:7f:8c:59:41:
e0:d1:30:20:91:f4:e2:e7:a3:0b:0a:8f:ca:a8:d6:16:bd:cc:
38:21:74:6a:9e:28:f7:d8:10:e6:c3:35:db:36:9c:c0:9a:05:
f4:cd:78:d2:01:0d:7f:0a:9d:5c:c0:00:8e:99:08:d6:b2:49:
d1:e1:e8:d6:16:6c:2a:20:96:d7:eb:e1:94:a5:1b:a0:0a:68:
95:21:5a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUEY+xQAmmpxqVxfkJxIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGE5MzUxZWI2NmQ4ZDg2MjRlMjBkMTY5Zjc2NmI3MmY1
OGFjYzAwHhcNMjYwNzI4MjAwMDE1WhcNMjYwNzI5MjAwMDE1WjAzMTEwLwYDVQQD
EygxNjJjN2RjY2MzMTVlMmQ0ODA3ZmUyYTM5YWYwNzMxZDc3Nzk1MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHKEfm2sbm2MpOL6BttM5Nhknmjg
feoCYFU2MiVDRh9BXB+jBXTIMECl+MwjYiplo0P8bSTu6DqQ64x/wQ2kNkxbHp4r
zRNqPQPbha2hGtjr/P8x54PK+SNx+QcSe3iYs8yFGSv+1t3HsbqkhgMvvQomaCY2
tXlzlZfOvHKFK95X/jiaaDqwvxCXVOXZuaqoOYs9A3RirVGHGvoG96pKZgQxA3LP
H3/suUfyd7wIvgBantk4xzUtC/hmsvjcAcdnHWa3jjTrHW5YDEfbhgV3QtwmlJ3o
JRow46K2eOWzW35j7JoWvFdlz1ZmBgx17gewaLf+PMIrtOHsaWkq5xP+8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYsfczDFeLUgH/io5rwcx13eVBhMB8GA1UdIwQY
MBaAFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMt
MDJmM2RkYmExOTQyLzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMtMDJmM2RkYmExOTQy
LzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQIRjN53
Iz1dIZZ5e/KXQUvk5b9M6ALHpjnd94a0qAhXVmEhgRBtnxHoIHInuHN7CRKuTePj
ycglBm4oBIgNsFlgJMjLK/0MfCp3q7jUy3+cCaUy2thUPtwTT/UMVVMRMf5pUPF6
UGYBxSwzXGG7qxW8rJIYrTaHl4tsvooZaZgc6vAR13ajSf/hy+R2c8DJCFegZTfx
kGN1YE+Euz/Vxtso8jcS8rqY1VzUe9GaUnN/jFlB4NEwIJH04uejCwqPyqjWFr3M
OCF0ap4o99gQ5sM12zacwJoF9M140gENfwqdXMAAjpkI1rJJ0eHo1hZsKiCW1+vh
lKUboApolSFaww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:06 2026 by rpki-client