Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: DCycKLJTfWmVD5IaFSTAbHOLNqXAIyeVjNEka0TJsOw=
Subject key identifier: 48:2C:CD:FC:F2:62:26:61:75:1B:51:0A:65:1F:E0:DB:77:93:51:E9
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019EBF5A88A7FA6F26AF358BA8038A70C422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 196A
Signing time: Sat 13 Jun 2026 05:00:41 +0000
Manifest this update: Sat 13 Jun 2026 05:00:41 +0000
Manifest next update: Sun 14 Jun 2026 05:00:41 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: LacYkRJ/dNOVw8+kigYV2g/PZTHzZiHM4b+yeRat+cw=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:88:a7:fa:6f:26:af:35:8b:a8:03:8a:70:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jun 13 05:00:41 2026 GMT
Not After : Jun 14 05:00:41 2026 GMT
Subject: CN=482ccdfcf2622661751b510a651fe0db779351e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:67:46:4c:a0:4f:64:4b:f0:6f:de:6a:bf:
08:50:51:d8:3f:b1:50:75:bd:f3:8b:bf:26:9d:1f:
dd:29:ec:2c:9b:fe:59:6e:1d:6c:d5:2a:1b:7c:fd:
5f:47:d2:6a:b4:95:83:85:b9:51:5a:f6:cf:be:fa:
25:e8:16:24:19:90:d5:43:eb:c6:f8:ac:05:34:55:
7f:a6:e2:09:90:1e:a9:e0:f2:df:6e:7c:da:81:42:
89:74:26:de:59:fb:b7:71:a6:c3:89:59:6e:1b:ed:
c4:a6:7d:a1:05:4f:70:55:6b:2c:a4:d4:0b:4a:c4:
ec:e3:86:77:54:58:c1:4b:5b:e5:af:59:5b:e9:8f:
ca:18:e8:8f:ab:ab:9f:ee:26:e8:05:0b:51:f7:70:
f0:a3:0b:33:c5:71:fb:dc:8a:57:41:ff:d6:2e:c1:
7c:e5:4e:1c:ca:75:07:de:a9:e9:eb:7d:72:2f:36:
ab:29:be:1a:e0:34:4b:91:63:b2:fa:4e:b8:a7:05:
d7:48:86:45:3f:8d:c6:cd:a3:54:66:d1:db:08:b1:
d6:69:87:ca:2d:c2:40:3f:12:2b:b2:5a:ee:11:41:
7a:93:a3:f6:39:e8:fe:02:8f:0c:fd:c3:62:08:a3:
4b:6f:cf:4d:80:a7:47:af:df:60:fc:69:c1:3f:f0:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:CD:FC:F2:62:26:61:75:1B:51:0A:65:1F:E0:DB:77:93:51:E9
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:d3:db:08:b4:a2:49:ca:25:7d:1c:06:16:06:3d:25:7c:
5b:66:ea:7a:30:fc:3c:ad:dc:c6:cd:d6:18:39:3d:f9:99:2f:
ce:6c:3a:c8:ea:be:e5:7e:6a:a2:d7:61:3f:b7:64:ea:7d:9c:
d8:0e:99:27:bd:10:10:9d:f8:51:f1:37:88:f3:4f:83:09:ed:
43:8b:55:42:b0:f6:4c:5b:4e:f1:e8:b2:51:7f:59:ac:f6:33:
24:30:6c:f7:c4:4a:b9:58:39:82:c5:a9:7c:0c:33:90:a7:52:
aa:7e:ab:b8:80:13:b2:46:8a:c1:f8:2a:e7:74:65:8d:b3:05:
ca:8b:55:b2:8e:87:6e:0b:70:fa:23:4b:a7:0c:28:64:db:7a:
59:c9:78:15:1d:16:51:35:fa:96:39:ca:e2:12:f0:4f:74:91:
a8:68:a7:69:06:4b:65:c7:9f:89:00:a9:82:e4:3c:78:55:02:
49:90:34:df:d8:a9:14:ee:bc:d7:49:22:47:84:e6:e3:6f:86:
e6:0b:eb:26:f8:d7:24:fd:5f:76:ae:f0:fb:fc:7c:39:b2:aa:
13:72:7b:11:96:18:98:96:1a:7c:28:f5:e0:cc:8c:42:67:df:
31:07:96:07:f8:89:85:4e:07:98:02:5a:2b:9c:5e:2d:f6:14:
93:36:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:58 2026 by rpki-client