Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: tBxcdxhojNNMRj+z/Me0BG7Kc8hAsX5NfB3o0hZW21k=
Subject key identifier: 49:83:6E:31:53:DE:07:E1:CA:19:B2:27:8E:9F:49:AD:F6:9A:04:C7
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019FAC3F09C70BCCB9875466BBA71D6735FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 18B4
Signing time: Wed 29 Jul 2026 05:00:40 +0000
Manifest this update: Wed 29 Jul 2026 05:00:40 +0000
Manifest next update: Thu 30 Jul 2026 05:00:40 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: LypaE3sXcCKXv8lR/q9Q/WLOROrseEM9RNH1Db/4aRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:09:c7:0b:cc:b9:87:54:66:bb:a7:1d:67:35:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jul 29 05:00:40 2026 GMT
Not After : Jul 30 05:00:40 2026 GMT
Subject: CN=49836e3153de07e1ca19b2278e9f49adf69a04c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:06:16:77:08:d4:a9:05:e6:08:d4:5b:08:
fd:ec:51:28:c9:24:9c:43:0c:1c:85:54:58:78:a2:
ef:08:f9:b3:6d:0c:33:f9:1e:a3:c2:6c:56:ca:ce:
36:e5:22:bf:86:a8:dd:15:b9:c4:1f:65:52:ba:e9:
c0:2e:77:1d:7b:90:f3:ec:1e:0e:1e:67:e6:f5:66:
ef:bc:7b:ed:7a:6d:76:5c:90:0a:60:b4:cf:2c:09:
7d:8d:a2:f9:1c:42:e3:e2:83:5c:2e:32:21:23:84:
12:d9:89:77:6d:a1:f7:6a:c5:8c:72:d0:28:77:ca:
8b:ed:81:69:67:4e:70:19:7d:38:ca:1d:e8:46:e5:
ad:ec:74:af:27:c6:87:30:23:50:c9:60:10:59:bf:
f4:4c:ca:7d:80:f4:3a:24:97:22:c9:17:a1:76:e2:
6b:95:94:44:b1:a4:8a:67:79:dd:03:8a:76:3b:39:
d1:b8:81:08:13:af:16:a5:3b:62:c1:d9:a9:85:fe:
b9:a8:a2:06:92:e8:59:24:f8:f9:a2:e1:ec:29:7e:
c9:ae:45:69:a6:a2:71:76:77:ac:32:90:a5:5d:41:
55:53:1c:66:96:a6:4f:e0:2c:a4:08:09:b4:e9:c0:
cf:eb:05:64:21:f2:85:0e:38:07:b3:81:dd:11:9b:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:6E:31:53:DE:07:E1:CA:19:B2:27:8E:9F:49:AD:F6:9A:04:C7
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:42:7a:b2:f2:78:f5:98:71:de:d5:8d:b7:5a:23:b5:c4:
fb:68:7b:c1:0a:e8:f1:47:f1:d7:90:4e:65:3b:f4:36:69:27:
c8:6d:c0:60:e9:69:3b:3e:9a:d3:25:87:d6:9f:e6:39:1a:9b:
56:8b:70:1e:ea:c3:b3:38:8f:06:d4:9a:d5:e6:91:33:df:99:
90:5b:f6:17:69:44:c1:e8:c3:cb:05:ed:a9:4d:94:24:84:f2:
5d:bc:21:af:d3:ea:e1:a7:d6:3e:77:ad:f2:c1:64:5c:62:e3:
65:cd:c2:3c:70:b0:92:f8:56:22:3f:1c:82:7f:e4:7b:21:7b:
d5:ee:c9:3c:dc:73:92:ff:70:3c:9f:67:5f:83:83:11:8a:e2:
99:aa:25:aa:a6:f8:0e:58:62:96:3a:64:d3:94:8b:be:36:74:
56:03:35:40:18:cc:92:48:cb:e0:2d:ee:28:ac:80:ef:76:2f:
21:3d:ef:ff:8f:43:8c:d6:54:94:44:51:3e:16:08:58:51:f2:
6c:c8:c4:2b:16:84:68:07:4f:59:4c:dc:2b:5f:a1:84:1f:9f:
0a:3e:2a:dd:d5:c0:53:06:9c:9f:d1:4f:d2:9c:93:c2:9d:bc:
80:17:a6:ea:fd:f1:82:de:b5:41:e8:00:ef:e7:c8:8a:6d:53:
ba:e9:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:15 2026 by rpki-client