Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: WJm+mY3Fv/U/wMAQvxr11gZlxWJmc3sgw7ECqSj4gRE=
Subject key identifier: 17:0B:A2:04:AF:95:FE:6D:F2:2B:8E:74:5C:A1:85:C3:C1:B7:DC:04
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019FA906E7BBA3250529C3A10CD8564A254E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 19E9
Signing time: Tue 28 Jul 2026 14:00:29 +0000
Manifest this update: Tue 28 Jul 2026 14:00:29 +0000
Manifest next update: Wed 29 Jul 2026 14:00:29 +0000
Files and hashes: 1: 1eDthHxyBs30v9PDwTMv1prYvao.roa (hash: ppA9SkwGUbB4Vlu1p0LhsagFdBtCRPcp3uRMUiBj2DI=)
2: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
3: ER9PO3R5fqse9XyY3gGPqpGsXAI.roa (hash: +KMaQf8o13YMHLZLquCyYJEMRpxJsgUB1pOayAjJaVA=)
4: IImcDwTRjV5S2hSkvanjJzEZRso.roa (hash: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=)
5: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
6: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (hash: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=)
7: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 4efU5tIs/G7IrfDg47P7XkbSF0fFJ8tpHxf5Az6594c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:e7:bb:a3:25:05:29:c3:a1:0c:d8:56:4a:25:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jul 28 14:00:29 2026 GMT
Not After : Jul 29 14:00:29 2026 GMT
Subject: CN=170ba204af95fe6df22b8e745ca185c3c1b7dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:74:93:99:58:86:d1:c7:7b:a8:fb:2e:6d:
9f:1a:31:35:d9:a9:b8:b3:bc:a3:ab:c0:4d:ba:17:
01:11:34:e3:50:44:1e:70:97:7a:5b:60:ae:be:bd:
a4:92:83:d2:02:57:1e:56:17:df:c1:59:75:c3:05:
6e:05:60:2a:c7:df:79:e4:98:da:ac:aa:ea:d5:a7:
5b:ac:39:97:e4:e1:4b:76:93:2a:88:50:cb:b9:05:
d8:27:b3:2a:9e:82:c2:f3:6f:c2:b7:93:ff:1d:38:
97:eb:13:ef:9b:bd:48:d0:ff:0b:08:b1:a1:9e:5c:
f4:93:5a:d3:68:28:31:0c:1c:57:2e:61:83:b8:0f:
21:f0:03:90:8c:1c:c0:fa:f3:49:39:14:1e:00:8f:
26:a9:49:0a:03:36:89:58:b4:57:d9:7b:b2:12:2d:
68:78:ec:a2:74:d0:9e:9a:52:64:25:5b:ab:8d:26:
98:36:7f:d7:e4:c7:e5:58:eb:63:99:d6:27:35:8d:
56:6a:55:54:0f:61:b7:43:62:68:d9:f2:b1:ba:8b:
37:c1:1e:5a:84:a5:4d:3c:0f:01:8d:7f:df:a4:15:
09:d0:07:29:55:d0:c0:ca:87:62:75:97:77:57:90:
6b:11:bd:76:ab:9d:b9:b6:e9:f9:4c:9c:df:3f:a1:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:A2:04:AF:95:FE:6D:F2:2B:8E:74:5C:A1:85:C3:C1:B7:DC:04
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5b:12:d1:8a:34:49:25:82:a1:c8:e4:e4:4f:4e:a3:54:fb:
7d:f4:81:72:51:cd:e5:cb:46:ef:7b:c6:29:db:f6:a6:18:73:
21:ed:0f:d4:1f:95:34:b3:c3:fd:0d:c1:50:1a:58:8f:73:66:
b5:b0:39:66:2e:7b:6f:c2:f9:e2:28:37:f9:27:d0:e5:63:75:
f4:8c:48:1a:d2:5b:3c:6a:42:08:15:c9:78:d3:1b:21:b2:83:
84:91:72:62:08:13:e5:19:38:5f:bd:06:b1:e3:a8:d7:bf:e0:
8c:38:4c:d6:b2:b5:22:4a:10:00:9f:24:f9:1b:e5:f0:f6:c2:
f8:45:92:6a:0d:fc:1d:d0:45:5f:be:c0:9b:ee:64:8b:fa:84:
99:69:64:5b:4f:9e:73:48:68:a0:c6:54:2c:3d:ac:f2:7d:32:
36:ba:08:a5:2e:4f:c2:8f:60:df:4d:45:85:ae:48:d7:3b:40:
82:22:3b:39:50:a6:2d:53:67:e1:55:87:97:d1:ba:74:75:bc:
d6:01:04:25:46:bb:5f:c2:fc:a4:aa:46:e1:22:09:0a:fd:48:
d1:0f:88:ec:ae:15:a0:2c:a8:ee:b6:5a:75:b9:f0:fc:3c:62:
08:4f:70:08:fd:07:df:5a:6f:22:4f:e7:4e:b9:14:d6:de:07:
aa:57:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:06 2026 by rpki-client