Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: tn2fGUvmacq1qSOSxFZjHNKF6uOh6F0nXlQ0p3c15jc=
Subject key identifier: F3:48:D6:32:16:D3:1B:56:A7:0E:C6:EC:30:08:A6:ED:D0:2E:58:73
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019FAB2CC7EAA0E5F9E34EB7EFB029EB0E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1955
Signing time: Wed 29 Jul 2026 00:01:06 +0000
Manifest this update: Wed 29 Jul 2026 00:01:06 +0000
Manifest next update: Thu 30 Jul 2026 00:01:06 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: ynnj+l6hHiBb0pA8kAfQbuDN4Qm7/UMF7JpvGwzvgD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c7:ea:a0:e5:f9:e3:4e:b7:ef:b0:29:eb:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Jul 29 00:01:06 2026 GMT
Not After : Jul 30 00:01:06 2026 GMT
Subject: CN=f348d63216d31b56a70ec6ec3008a6edd02e5873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:8e:ff:26:e0:d7:c3:ad:82:37:3f:b4:a8:
9e:4d:ac:11:ff:43:e6:ed:61:da:f0:02:ca:79:93:
3d:a3:70:a3:25:61:62:cb:fc:6e:c0:d8:2d:0a:96:
8f:35:ee:3e:94:f7:54:02:59:06:3e:79:04:6c:32:
36:e9:38:23:2e:c2:5d:d6:f3:cd:9d:34:db:bb:04:
28:e3:5d:db:20:29:01:07:4e:b7:fb:4b:af:3f:f8:
74:4f:ee:32:53:fc:0b:de:41:33:25:e1:c1:2b:13:
2b:d8:c7:25:f6:9e:77:d9:b4:28:24:ad:6a:58:23:
fc:78:9e:51:3b:ad:d0:16:a3:76:54:b6:ad:c3:5b:
2e:64:b4:be:f3:d1:9f:e4:2d:5b:61:aa:ad:41:4a:
54:13:fc:a3:83:ea:4b:9a:7e:2a:67:cb:8f:e6:41:
ab:a4:b8:79:da:1d:1b:99:6f:76:86:50:d0:44:51:
bf:ec:ae:a8:c5:18:7c:a3:ba:82:77:9e:75:d3:4f:
77:93:a8:e1:25:16:99:ba:84:aa:b6:26:44:a7:51:
1a:2d:bd:eb:fe:91:ae:70:79:0a:85:65:a0:c2:40:
37:c8:3a:9a:9b:e4:c4:8e:a2:d9:4f:cc:4e:10:0b:
33:55:aa:50:d3:12:ce:d5:07:7d:2b:7d:60:b0:c2:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:D6:32:16:D3:1B:56:A7:0E:C6:EC:30:08:A6:ED:D0:2E:58:73
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9e:e6:cb:9e:d1:de:1f:14:a0:5d:5c:cd:14:33:28:43:34:
fe:1f:5c:d5:35:c8:7e:20:d2:06:fa:bb:cb:a5:04:db:11:7b:
d7:49:9e:31:29:ac:b5:b7:51:6c:c2:1a:8c:fa:b0:6c:77:04:
c5:5b:c9:c6:3e:93:78:26:59:ff:30:66:a2:da:24:a8:32:60:
a6:85:1b:aa:35:33:f2:7e:49:69:64:b9:1f:06:69:62:08:60:
d5:d4:a2:ce:74:bc:ad:bb:fc:37:bf:45:de:b4:42:66:2f:38:
74:6c:98:0b:7f:6a:97:45:4b:67:67:69:06:44:9d:44:99:0e:
78:5c:c9:6b:ff:d4:d3:f1:75:f0:a9:69:6d:90:44:46:9a:e5:
88:25:52:b6:38:57:f5:6a:24:4c:c6:2b:87:cd:07:fc:c4:3f:
7d:fb:2d:a9:3b:96:cd:a2:6a:04:3c:21:78:68:e7:d7:e5:ac:
2d:87:3d:fd:e9:cd:1b:df:7b:4f:5b:af:64:30:1e:1e:6d:64:
18:1c:84:58:84:6e:f3:ce:47:95:02:08:ba:60:13:bb:d8:9c:
05:f1:19:0d:a8:88:df:25:de:28:64:87:c3:93:8c:09:a9:99:
eb:74:b3:dd:f3:77:a1:bf:c1:78:c7:7b:89:98:9d:06:b0:df:
76:c8:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:57 2026 by rpki-client