Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: Ey/epNi7PyNNqQRPyCfT3Bvl655lus4bxn6MBRaDZmU=
Subject key identifier: 78:BF:C0:E6:11:07:80:2B:E3:37:0A:18:3C:DE:89:33:D0:6D:6E:AB
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019FA9E2D8B813B47B7F48B9660C09A810E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:43 +0000
Manifest this update: Tue 28 Jul 2026 18:00:43 +0000
Manifest next update: Wed 29 Jul 2026 18:00:43 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: l4b5qF5+drwz9GN/HtE4Jz3hnefFX+8siP+s0RYsecU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d8:b8:13:b4:7b:7f:48:b9:66:0c:09:a8:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jul 28 18:00:43 2026 GMT
Not After : Jul 29 18:00:43 2026 GMT
Subject: CN=78bfc0e61107802be3370a183cde8933d06d6eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:22:26:9e:05:92:46:78:58:1f:79:5b:ae:
f6:0c:ac:7c:f3:d3:57:94:b7:d1:7b:aa:f9:56:be:
51:90:b5:5d:0d:6a:51:29:2b:41:61:32:c2:43:f3:
46:07:06:51:f4:91:e9:f7:c4:d0:35:b7:87:ba:93:
bd:d9:2a:0d:a7:81:82:8e:53:a4:b9:55:cd:8b:54:
1b:f3:fd:68:b0:11:5b:ed:55:e0:1f:26:0c:4b:24:
d6:56:87:22:14:0a:5a:1a:ee:b8:cf:da:1e:00:d6:
79:18:37:dc:4d:82:3d:11:03:f6:57:16:95:04:2e:
28:ab:26:21:69:05:68:a1:13:f9:cc:6d:94:5b:5d:
9f:9f:0d:ed:8a:e1:6e:6c:fc:e1:21:fa:8a:46:35:
39:dc:2d:69:33:05:b4:bd:fd:68:1a:f6:96:e2:6d:
9c:f5:90:3f:90:b2:e0:f5:88:1f:ab:e2:06:e8:a4:
c1:d5:92:6f:7f:13:0f:b6:7d:0d:a9:05:29:d7:8e:
35:47:29:0a:c6:4c:10:97:91:2a:35:e4:5a:87:92:
be:8a:f5:4e:10:c3:ca:00:dc:46:db:19:4f:9a:40:
2b:eb:93:d2:6b:2f:a7:96:ba:af:23:58:dd:f2:cf:
1d:fb:c8:fb:2a:cf:cf:fe:33:ec:24:3e:06:73:52:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:C0:E6:11:07:80:2B:E3:37:0A:18:3C:DE:89:33:D0:6D:6E:AB
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:b5:6e:a7:0c:70:72:19:cc:85:fe:ef:15:15:eb:21:03:
3f:86:9d:19:46:78:39:70:08:2b:9e:aa:cd:7e:23:a8:48:5d:
6c:f7:2e:24:28:86:f0:cb:cd:16:aa:7e:58:3a:e1:21:82:a7:
45:2f:5a:1c:93:9e:49:fe:77:c7:35:b3:ba:99:b5:96:9b:af:
ba:d7:b9:b2:63:47:3e:44:76:bd:89:3c:05:96:c0:c6:00:27:
b7:87:c3:10:8b:23:5f:46:f0:d3:3f:4d:7d:eb:c3:27:ae:77:
12:90:1e:89:a3:31:e7:79:87:ca:c9:df:03:c5:38:c3:6b:b5:
7a:f0:1f:ee:a9:5f:1b:62:0f:37:dc:74:48:69:39:c4:52:6d:
27:ab:8e:36:c8:da:b6:47:b3:77:0c:57:a4:a1:cc:44:76:5d:
12:8c:9d:af:af:cb:1e:80:42:a7:e4:d3:c8:71:04:62:70:af:
01:af:0f:b0:b4:0e:8e:d7:18:f4:b4:f2:33:3c:fd:d2:4f:80:
34:13:3b:46:41:4f:3a:64:ba:49:e5:5c:7a:07:38:8c:af:c8:
09:f4:3c:9a:fe:01:80:4c:e7:84:e5:3b:87:5a:45:d6:2e:94:
30:24:34:36:32:2e:bb:a4:db:af:36:96:e5:a9:10:15:e9:8f:
9f:99:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:58 2026 by rpki-client