Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: zhhRcZ6dnMm8/jHSZDeEhqbFcqyt1V1OZYE5eYLHA9Y=
Subject key identifier: AA:46:1C:B5:DA:0A:5F:B5:DE:CA:FE:59:05:CF:E1:C9:E1:DA:07:8F
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019FA9ABCA3FF84E512BB35E17E2512D4E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1778
Signing time: Tue 28 Jul 2026 17:00:35 +0000
Manifest this update: Tue 28 Jul 2026 17:00:35 +0000
Manifest next update: Wed 29 Jul 2026 17:00:35 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: bvAMuwWuKjutqjBb3cQ/qDTS7i5l5+8vmqRfpR41Uv4=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ca:3f:f8:4e:51:2b:b3:5e:17:e2:51:2d:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jul 28 17:00:35 2026 GMT
Not After : Jul 29 17:00:35 2026 GMT
Subject: CN=aa461cb5da0a5fb5decafe5905cfe1c9e1da078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:05:55:9e:63:f5:c4:03:30:79:13:08:ae:
68:86:d7:ea:82:d7:92:ab:36:87:59:4d:d9:40:94:
de:f8:b8:4b:d3:98:21:86:eb:fe:52:23:57:77:80:
f9:ab:b6:36:d3:86:e3:24:d9:54:28:c8:31:31:5f:
b1:62:53:38:ef:80:9d:ff:51:ba:9a:03:50:3c:f1:
52:ce:f4:91:b4:10:a6:0a:f7:ef:ab:bc:04:9d:47:
e5:8c:f7:3b:c5:8d:00:24:12:f8:4a:d4:36:5f:50:
c7:a2:0d:4b:a2:8d:5e:fa:2d:b1:e7:40:ae:f9:dc:
e5:ba:a8:ef:01:b6:07:83:4e:4d:4d:ac:e9:da:4f:
f8:69:39:ac:57:60:a5:5f:9e:eb:34:a5:fc:1a:ba:
fe:2b:31:e3:cd:fe:62:f8:19:8a:74:1a:2c:96:dd:
92:ab:88:66:a9:72:80:0a:8a:fa:9a:66:64:31:f3:
29:eb:02:6c:30:9d:2b:d0:2f:24:c5:82:1a:f1:e0:
b1:8e:f6:24:09:82:11:7f:7a:d5:ac:48:68:f8:eb:
55:cb:a7:78:f4:bb:d8:a0:bf:9d:ce:f6:7e:88:cd:
41:60:2c:3d:88:b9:cf:2c:5d:6f:32:43:9e:9a:ea:
57:32:7c:17:43:10:fa:57:2c:81:1d:aa:bc:9d:9f:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:1C:B5:DA:0A:5F:B5:DE:CA:FE:59:05:CF:E1:C9:E1:DA:07:8F
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:2b:fa:90:7d:0c:7d:bd:cc:ca:12:20:1d:1b:11:68:b2:
7a:33:4e:e3:94:43:84:f4:d1:4b:85:58:92:47:6b:28:ee:7c:
ef:fb:37:ae:01:58:7b:c3:f5:87:0e:1a:31:73:e2:73:68:51:
dd:f2:81:5e:6c:47:1b:21:19:d7:42:2a:2b:7e:21:58:08:88:
f9:6a:91:98:9e:71:60:88:28:f7:79:3b:c3:6f:05:87:01:75:
eb:fe:78:1c:b5:f0:ad:10:b8:25:7b:d8:1e:20:31:e7:c5:40:
0a:54:7f:22:14:11:35:aa:cc:42:7d:b2:33:99:7d:a3:94:f4:
3b:11:1d:bc:f7:db:b2:be:f4:09:58:31:d4:99:ee:f1:92:db:
96:6f:75:f7:da:05:c5:67:5a:67:f0:f5:8d:d0:4b:dc:d2:62:
bb:7a:54:1a:f7:c1:a0:78:eb:25:d7:47:6f:29:af:4d:2d:c4:
77:3e:99:d5:0e:4b:d5:6f:de:9c:92:5b:da:81:f3:f0:0c:d7:
96:d5:0c:e9:f3:f0:ba:e0:43:24:13:2b:f5:9f:61:aa:07:a6:
66:22:f9:7f:12:b3:86:90:bc:b2:39:7e:7d:43:09:fe:cc:42:
bc:97:8f:ed:9b:3a:90:fc:42:e2:98:0d:cc:49:37:6d:29:a3:
1c:28:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:27 2026 by rpki-client