Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: fhrs/iqvB9OKhAoDH/n+bXUPCP0cCa/IPpyHGNh2PUg=
Subject key identifier: 24:0F:B1:69:AF:A5:16:91:3A:1A:5C:8E:77:F4:71:BE:8A:66:35:41
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019FA7188EFCB8695B3963D9F07077A1E728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 05:00:32 +0000
Manifest this update: Tue 28 Jul 2026 05:00:32 +0000
Manifest next update: Wed 29 Jul 2026 05:00:32 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: 5WoSUIUepOoCP9TdrZONNcOuv1HoHgE00007PURuUR8=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:8e:fc:b8:69:5b:39:63:d9:f0:70:77:a1:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jul 28 05:00:32 2026 GMT
Not After : Jul 29 05:00:32 2026 GMT
Subject: CN=240fb169afa516913a1a5c8e77f471be8a663541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:21:2e:09:c3:04:53:59:1a:3f:64:aa:f5:
40:80:ec:78:f7:55:a9:1b:08:03:f2:20:c8:8f:73:
eb:3c:f9:39:ec:62:50:48:92:dd:80:35:0c:4d:63:
8b:a9:3d:6d:05:ed:87:6b:78:09:a3:d1:b4:00:f6:
ab:67:db:77:20:f5:d4:5a:3a:bb:36:41:69:5c:32:
56:38:9f:da:2e:ca:89:29:14:5a:8f:a0:78:a2:4c:
ea:e8:e8:12:52:d9:75:cc:7b:85:09:c4:2a:e7:24:
32:38:65:6b:d6:13:38:50:65:a7:af:1c:0e:ee:a8:
db:e6:3b:76:51:8b:9b:76:fe:f0:9a:50:a9:94:eb:
fd:fe:b6:99:75:c9:6a:5f:a1:8f:0a:39:c2:17:27:
59:a4:ac:e6:0e:e0:22:ab:16:ec:a8:4a:ac:1e:0b:
b8:e7:63:ce:75:27:d1:23:05:0b:7d:ba:78:8b:1d:
b1:60:37:46:6a:78:48:3d:c2:dc:41:53:b0:31:53:
2b:e2:d4:ad:9c:f9:3e:4e:85:c8:71:f6:62:38:f3:
d5:67:6c:e0:14:1e:01:b7:eb:dc:59:07:e3:29:72:
d4:36:72:6b:7e:2c:a8:3f:c9:f3:44:d2:74:6a:73:
4d:04:f8:6a:10:bb:97:3b:7b:44:2a:e7:51:07:e5:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0F:B1:69:AF:A5:16:91:3A:1A:5C:8E:77:F4:71:BE:8A:66:35:41
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:2a:79:77:8e:ff:c9:17:6a:c7:09:c7:a5:62:b6:55:2e:1a:
72:e5:15:a8:e7:90:96:c9:f0:9e:50:0f:ec:29:83:e2:c8:c9:
02:69:07:3a:aa:ad:b9:a1:86:f3:f4:be:fe:6f:5d:24:33:3a:
ab:3c:68:4f:18:12:e5:b8:f2:69:c3:9e:e5:71:55:39:bc:ca:
b6:80:59:e2:d6:13:a3:26:f9:60:e1:9e:47:cb:a2:30:45:af:
75:95:e0:cd:02:16:25:a2:49:81:f0:9f:bf:8c:3f:ed:ce:0d:
78:fc:4f:8f:93:11:6d:f9:f4:83:77:cf:9e:70:81:95:4c:f7:
04:65:58:b9:ce:6d:06:b4:aa:90:98:38:9a:23:f7:8c:17:2d:
85:cd:74:2a:cb:c0:51:3e:a0:ab:70:b7:f8:a3:7a:66:d1:c9:
9d:14:b1:55:04:ce:53:67:a6:5c:20:05:f2:15:0a:3a:0a:19:
2e:b4:a2:e5:f3:1d:64:1a:f3:06:e4:41:22:be:cb:7b:ab:c4:
da:75:b0:85:6f:73:de:27:c5:74:c4:02:a2:ae:2a:1e:77:26:
1d:d6:92:85:6e:df:e7:44:d2:7e:26:22:12:7e:e1:69:b0:e0:
1a:a4:bd:bc:33:8b:86:1f:a2:4d:29:93:56:62:81:b4:6e:f5:
a2:e4:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:36 2026 by rpki-client