Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: vaZVtiwPZNuNGJIrob+bnFwWYFjI7BHZn9y07vHNvRc=
Subject key identifier: BD:A3:FE:A9:58:29:E3:13:E7:AC:F9:0E:AB:A2:0C:1B:71:B7:D4:26
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019FACE38AD2104C9ED9E55486D39B2C7A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1965
Signing time: Wed 29 Jul 2026 08:00:21 +0000
Manifest this update: Wed 29 Jul 2026 08:00:21 +0000
Manifest next update: Thu 30 Jul 2026 08:00:21 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: Rz36A9nF1MltNUdQogwosMt+GAYSpXIOhBYMa6/GlXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:8a:d2:10:4c:9e:d9:e5:54:86:d3:9b:2c:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jul 29 08:00:21 2026 GMT
Not After : Jul 30 08:00:21 2026 GMT
Subject: CN=bda3fea95829e313e7acf90eaba20c1b71b7d426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:ba:74:9a:2f:69:e8:2f:6a:c3:7d:6f:30:
c6:e6:48:e9:4a:0a:e3:ab:8f:64:6f:43:f8:57:6d:
1d:8c:52:7b:8c:8c:30:6e:0e:42:89:e8:2d:c6:f5:
fd:39:8b:de:37:e5:df:16:c5:da:b6:b1:bb:0d:5c:
e1:56:e2:be:f7:76:da:30:15:ca:ca:bc:21:34:d9:
0d:89:7f:5c:b1:b0:5a:bc:a7:d1:5b:1b:13:90:c8:
0e:74:af:cb:d3:6a:7b:0c:69:a1:0c:4a:db:45:13:
bb:0a:3a:44:7f:c6:fe:c4:c2:c2:c7:bc:fc:a9:f5:
44:81:61:ce:c4:96:a3:ce:b4:cd:8d:c4:c8:87:f9:
7f:f8:85:00:94:c0:e7:6d:9e:b8:49:18:25:3e:8c:
c8:c9:3d:79:2f:1e:61:86:76:9c:6b:5b:10:b0:59:
dc:56:58:88:43:f9:18:78:b4:7f:0a:7c:ae:e6:1e:
2b:2a:dd:21:24:ba:68:17:03:ba:60:7e:1e:93:e8:
ca:5d:60:f8:16:9c:43:f8:6e:3d:aa:36:5d:d1:28:
76:71:bb:ec:23:c5:71:d6:07:05:cb:c9:e8:04:bb:
30:8b:4b:7c:73:db:f6:ce:21:d8:1d:b1:a2:cf:83:
9b:0a:cb:3b:e9:67:9d:89:c2:10:8e:4d:7b:12:b9:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:FE:A9:58:29:E3:13:E7:AC:F9:0E:AB:A2:0C:1B:71:B7:D4:26
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:43:82:24:96:2b:ff:35:67:f0:fc:ee:0b:e0:29:fe:2e:b0:
41:77:fe:4f:e3:3b:69:75:1f:c9:23:d0:0c:20:a6:d9:cd:54:
0c:06:a9:7a:af:b3:10:96:29:f0:dd:a9:16:1e:ce:07:b3:91:
53:91:13:d5:2e:6a:7f:34:1e:ad:32:56:ea:8a:56:47:5a:84:
07:c1:22:69:66:ae:dd:92:78:1e:8a:fe:71:ba:98:e8:9f:42:
cf:f6:bd:86:74:37:b0:4f:94:e3:66:62:d2:cd:4b:cd:74:78:
f3:4a:26:1d:55:26:f8:bd:5a:52:f1:15:32:e8:f1:43:79:0c:
81:9d:ed:a1:d5:ae:08:44:5e:ef:29:37:e5:89:56:b3:e2:8b:
1d:73:aa:7a:3d:48:37:d8:d4:80:35:cc:1c:4d:87:ac:ab:bd:
59:c7:34:f2:36:cc:0e:2a:28:ab:df:8f:6f:2b:47:e3:fa:76:
62:04:7c:9f:ce:3d:2d:6f:aa:8b:4f:ae:6d:e8:b9:e3:fd:17:
81:e5:6a:92:fa:08:70:f7:f3:6e:82:f9:17:ed:bd:0f:8e:1f:
3d:4a:7f:6b:eb:25:80:6d:1f:00:ef:d9:b7:e7:15:81:40:05:
5b:06:70:1a:f6:ec:ac:e0:5c:23:e6:e4:97:4c:4e:aa:d2:4c:
0c:aa:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:15:13 2026 by rpki-client