Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: dJ06kUX9jvNioiFEt/EHDR4G+PkQ/eRFc9cTGBl+Z4A=
Subject key identifier: 30:F6:BC:EA:D4:75:04:47:48:DD:F1:51:6E:C6:DC:1E:BE:3C:09:CC
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019EC2CA068E9CF8E1F0F01C46FCDBB27649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 21:01:19 +0000
Manifest this update: Sat 13 Jun 2026 21:01:19 +0000
Manifest next update: Sun 14 Jun 2026 21:01:19 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: spdZzytAUuCy6xUmih/bBPWGBpIM3881wDMX/evFMDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:06:8e:9c:f8:e1:f0:f0:1c:46:fc:db:b2:76:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Jun 13 21:01:19 2026 GMT
Not After : Jun 14 21:01:19 2026 GMT
Subject: CN=30f6bcead475044748ddf1516ec6dc1ebe3c09cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:fa:8b:cd:61:a4:11:75:6a:e2:31:32:83:
d3:0c:a0:66:13:31:f0:b2:2a:10:e4:2e:57:d9:7b:
87:12:27:8c:bc:6a:b7:a1:95:ac:79:c8:89:ae:94:
9b:1d:ae:7d:2c:ed:c7:2c:3b:ad:6b:9b:50:49:78:
87:62:7f:9b:06:32:61:60:0d:e6:42:fb:fb:85:ca:
d9:56:57:08:f9:bc:6b:3c:bd:a2:66:cf:7f:46:50:
6f:1a:f6:b5:23:02:48:ff:52:87:7c:e5:e0:69:cb:
19:41:7b:ad:ef:0b:6d:7c:54:f6:da:cb:89:56:b7:
04:1a:3f:5c:8b:23:77:07:4d:7d:70:f3:63:2b:e7:
3a:b7:ed:1a:48:0f:58:e9:f4:14:15:b9:d4:88:0a:
45:7f:7c:17:c3:06:23:35:ea:ba:e7:a6:50:ef:51:
a1:ad:c9:e7:ca:cb:9a:da:a2:6f:48:7e:bf:36:08:
42:7e:16:72:16:3b:31:fa:98:d8:54:88:26:4b:f1:
0b:a8:af:31:ec:af:12:0a:8c:3d:d0:a7:cf:18:3a:
85:fe:66:c5:7e:f4:51:0f:5b:fc:ae:89:df:12:32:
47:b6:34:f5:a7:21:1a:ab:52:5c:50:9e:4b:f9:95:
aa:67:b0:4a:56:3b:59:7d:66:41:31:d8:77:18:de:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:BC:EA:D4:75:04:47:48:DD:F1:51:6E:C6:DC:1E:BE:3C:09:CC
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:d7:96:5e:3f:98:8a:18:6d:57:cf:5e:d1:b5:5e:68:02:
87:78:ec:cb:07:a8:1e:e5:17:31:ad:31:2d:fd:f6:a2:a5:ca:
b8:cf:f4:fb:d7:78:32:0d:5b:6c:01:f9:fa:08:bc:59:a9:11:
82:69:df:fa:8d:0e:25:d9:b1:97:61:67:3a:59:48:18:a8:03:
92:ea:14:f9:a9:b4:00:a1:04:e5:bf:5e:1b:60:02:6b:84:db:
91:75:9a:f0:e7:af:52:83:c0:60:89:44:34:46:c0:50:c1:57:
23:87:a9:65:fb:aa:5f:6c:f5:8e:bb:99:31:df:93:76:ce:f0:
18:5c:3b:ab:99:a7:a5:1a:5f:f2:9d:59:f7:a4:c7:9a:9f:53:
ef:34:c9:b6:25:c9:e2:9f:bf:e5:de:b7:53:d1:cc:1b:17:a4:
00:70:86:46:f5:b0:bf:52:5a:26:08:d3:5c:ec:66:36:77:b6:
66:2a:ca:7b:a6:3f:72:1a:6a:64:95:5b:bd:bf:af:0a:64:34:
a3:20:88:5d:03:91:60:be:89:40:9e:fb:05:62:d5:a5:38:f1:
51:0e:c8:97:2c:d2:ac:d9:48:69:4d:c1:b0:e1:6a:e0:e6:70:
d0:16:63:fc:db:c2:85:85:8e:e0:91:7a:20:6e:8c:87:d5:e8:
9c:98:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:26 2026 by rpki-client