Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: Vl+2J6hT/nQkyqyISyM4EBpnwU9d5IYd1EdO3sYUdio=
Subject key identifier: FD:B3:EC:1B:E3:CD:66:11:C6:E0:E4:52:32:EF:7B:B6:65:92:9E:D2
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 019FAAF54E0BA84C34D390E16D3D54BB46B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 0387
Signing time: Tue 28 Jul 2026 23:00:30 +0000
Manifest this update: Tue 28 Jul 2026 23:00:30 +0000
Manifest next update: Wed 29 Jul 2026 23:00:30 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: zzlIGHhimIyjoFHPanZuD2CkiEFRgrID6oDQrr7YDbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:4e:0b:a8:4c:34:d3:90:e1:6d:3d:54:bb:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Jul 28 23:00:30 2026 GMT
Not After : Jul 29 23:00:30 2026 GMT
Subject: CN=fdb3ec1be3cd6611c6e0e45232ef7bb665929ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:1c:91:f4:77:04:2a:c3:0d:8b:25:e9:00:
9b:00:39:81:b1:2a:7f:ac:42:c1:26:6c:2e:6a:02:
8d:cf:e9:8a:f4:47:c7:a9:03:2c:7c:54:68:e5:3f:
38:94:89:94:84:83:a2:72:0d:4e:c4:b6:05:da:8b:
7e:31:a0:11:4f:57:de:42:95:43:3f:25:27:e3:17:
d0:a6:7e:4e:2f:2a:bb:7c:c1:c4:a7:6e:61:c5:33:
7e:40:d5:a3:a6:7e:38:94:e7:3f:69:9d:b0:42:be:
97:64:47:36:27:c4:af:cd:2e:2d:76:cc:71:94:b0:
39:38:4e:f0:da:0d:c4:7e:a4:6b:bd:23:6e:64:27:
5a:0e:1e:95:c2:b5:fb:11:20:91:d8:10:70:18:8c:
c6:2f:34:bb:f2:a5:6a:59:cf:24:4c:16:af:f3:b7:
11:1c:75:78:c8:e1:ec:2f:42:ae:8b:3c:16:9c:29:
ea:c6:81:c2:57:59:1e:82:09:6c:a0:08:a0:ab:ef:
da:0b:f1:b1:b6:e1:ed:71:bf:c4:c8:cd:0d:c2:8a:
c2:3f:44:ab:a6:35:d7:d1:58:7a:f3:9d:88:ab:76:
8e:6b:24:8f:d1:d9:11:ac:78:75:b9:53:d9:b7:af:
45:6e:73:19:36:c1:e4:07:09:0e:fd:85:72:b2:47:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:EC:1B:E3:CD:66:11:C6:E0:E4:52:32:EF:7B:B6:65:92:9E:D2
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:05:44:b3:b5:52:2c:24:3d:2d:35:88:ed:54:75:87:6c:ed:
61:3a:8d:30:ca:4d:da:f6:88:58:48:04:3f:a7:02:ce:50:88:
4b:26:60:71:61:6e:cc:5e:d9:46:04:82:29:11:37:bd:a0:60:
a9:28:12:a9:af:14:22:bd:a7:8c:aa:b7:18:f7:87:9a:5d:0f:
12:90:38:35:62:c5:57:0c:fe:3b:ed:0d:4f:15:57:27:64:64:
15:a1:cb:93:7c:ae:ae:7c:8f:e4:7e:96:d5:7d:49:1c:23:6b:
55:be:a3:d6:bf:43:24:1e:3f:56:9e:4b:9b:85:0f:e3:bd:b8:
79:a2:2f:de:f0:93:64:91:70:ba:f8:0e:3d:55:56:7b:4b:69:
ee:40:b7:bd:2f:6e:7e:13:70:a0:5e:8d:ad:c5:6a:52:d6:7c:
48:ec:41:b1:10:3f:9e:a1:82:ce:a8:51:95:ab:05:0c:5a:9a:
20:70:82:fc:08:de:08:e7:97:3c:db:aa:b5:07:34:9e:06:86:
ad:2f:31:bf:ad:3b:52:af:19:0d:e5:14:1b:84:ee:ac:f3:ff:
6e:e6:62:eb:1c:97:af:77:c2:bb:57:c3:53:f7:d8:29:f0:eb:
85:46:a4:61:0e:fe:ac:45:63:b4:02:c3:9c:c2:e0:ae:58:43:
96:da:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:55:37 2026 by rpki-client