Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: yOgtKMwQIgYY+rxJOtxmYTaqS0z+duVrYuWtDTz3wo0=
Subject key identifier: 16:09:05:08:D0:D0:9E:72:68:3A:45:EC:77:68:4A:1E:6B:59:F1:DC
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019EBFFEDE7ABD28E7D9F1E293F6A46CF41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 16FF
Signing time: Sat 13 Jun 2026 08:00:11 +0000
Manifest this update: Sat 13 Jun 2026 08:00:11 +0000
Manifest next update: Sun 14 Jun 2026 08:00:11 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: BDINOY0nA3JuzR66SAtMuyB6fcJ8iWtvXpG6pGRS7Bs=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:de:7a:bd:28:e7:d9:f1:e2:93:f6:a4:6c:f4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jun 13 08:00:11 2026 GMT
Not After : Jun 14 08:00:11 2026 GMT
Subject: CN=16090508d0d09e72683a45ec77684a1e6b59f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:7d:f1:d6:68:15:18:57:99:b0:f6:9c:45:
cd:ea:3a:99:a0:04:1b:59:0c:ed:4e:33:16:82:53:
0e:a6:a7:fe:a2:9c:86:e5:5f:62:d9:4c:7e:50:2a:
cd:68:ca:b2:04:dd:e4:01:07:8b:da:0b:26:ba:3f:
fa:42:7b:b3:ec:ca:2b:fc:83:e1:a3:71:17:4e:44:
a3:72:61:b2:9c:59:6b:08:5b:03:be:0c:5f:c5:79:
3d:0c:68:fe:11:8b:50:38:62:5c:83:ed:7d:6a:2d:
9c:e5:2f:e8:3d:3e:f1:d6:1f:f5:32:63:e6:86:08:
98:a9:5e:49:be:2f:94:ef:b5:03:a5:94:d6:9d:11:
c6:63:ba:16:7a:cd:14:d4:db:83:75:69:4b:af:3e:
ad:21:01:70:5c:43:71:92:93:30:d2:ef:c4:b2:4e:
3a:8a:e8:b6:fe:36:33:3f:a0:90:c3:7a:f5:49:f3:
25:a8:16:fa:8a:bf:eb:e8:94:be:44:f7:98:eb:45:
a6:bc:47:12:a7:be:7e:7e:17:4e:b7:99:da:b6:7d:
2b:16:2e:76:c6:d8:03:84:b0:e3:41:21:09:34:75:
51:3b:5f:8a:4a:83:18:59:64:d0:46:b3:65:17:0e:
0d:ce:45:29:ba:93:3f:0d:d0:5e:c2:49:da:55:fb:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:05:08:D0:D0:9E:72:68:3A:45:EC:77:68:4A:1E:6B:59:F1:DC
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c0:93:5c:18:f9:aa:65:ef:75:71:45:51:d0:5f:20:b4:0d:
14:be:66:1d:52:90:3a:2d:ef:d1:cc:d1:cc:80:82:9e:d4:9c:
b9:00:31:39:1c:d3:55:bc:b5:80:a4:5b:2f:e3:9b:a5:cc:df:
52:6f:67:dd:e0:63:bf:5c:19:c8:59:3c:b5:f6:31:5c:06:04:
66:59:b4:0e:98:4f:54:8f:ec:76:e1:7b:e5:06:68:e8:e6:47:
96:a9:8d:ce:93:e4:17:67:2a:d2:d8:63:2f:76:70:59:74:20:
db:47:3e:d1:89:4a:fc:0c:80:59:04:a0:01:39:ff:ef:87:03:
c8:f6:ef:ab:00:d6:ed:d2:1d:b3:6d:c1:83:3f:9f:36:94:a1:
20:46:c3:e8:b0:e1:4e:8f:b2:b4:c3:f9:8d:59:23:0b:84:d6:
b1:c0:af:08:b0:1a:c5:e9:77:44:05:98:6c:03:26:97:b6:61:
44:e2:b1:91:3a:02:61:62:4c:ad:7d:46:bf:fe:33:f2:62:f4:
c4:0f:52:85:f6:92:1a:40:6c:c4:c7:a9:5d:d4:e5:d6:d4:ee:
91:b7:35:21:f4:dc:f2:ed:9a:a4:12:7b:28:45:be:cf:cb:f2:
5c:be:d1:44:d8:5a:27:d0:39:3c:ea:f2:ea:b4:5a:4c:2f:62:
65:2d:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:10 2026 by rpki-client