Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
File: lKszmh2jvU9yxzAm71jQthrSdwU.mft (raw, json)
Hash identifier: i0FKiuPT9snzPhwB7s/A64pFpcMrppgPF1wNP2/sEhw=
Subject key identifier: C2:5E:CC:0D:77:9F:E3:35:71:C1:46:65:A4:D2:F0:3B:8A:C6:2E:E3
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 019FAC76AF7BEA7DC1A05632705156AB8D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:27 +0000
Manifest this update: Wed 29 Jul 2026 06:01:27 +0000
Manifest next update: Thu 30 Jul 2026 06:01:27 +0000
Files and hashes: 1: lKszmh2jvU9yxzAm71jQthrSdwU.crl (hash: zIfrIKLF4XO4H1aIeEFZmsFlVp2O10lWgDsIuWAp46A=)
2: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (hash: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:af:7b:ea:7d:c1:a0:56:32:70:51:56:ab:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Jul 29 06:01:27 2026 GMT
Not After : Jul 30 06:01:27 2026 GMT
Subject: CN=c25ecc0d779fe33571c14665a4d2f03b8ac62ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:4f:eb:d3:08:77:84:b5:23:21:97:fc:14:
9d:e2:a9:df:56:a2:89:f1:1d:ea:f8:f6:f2:9e:3f:
fc:d5:c8:4a:b8:03:bb:a5:4e:81:b2:ea:3c:3c:34:
f4:1c:a9:38:22:68:1f:2d:9e:c9:1f:8c:2f:08:0e:
87:54:d6:df:23:62:32:08:47:98:81:72:7d:08:f0:
2a:94:ed:70:b5:d5:84:82:43:6d:ff:38:db:ca:a4:
a5:2e:69:3f:49:a2:c8:b9:42:3e:a1:d9:f8:3c:31:
6b:24:20:b2:28:cc:5c:a1:c3:4c:22:c0:b8:42:94:
f5:5c:44:16:ae:54:f3:bf:d0:f6:22:02:48:1d:b0:
53:fa:57:55:37:d3:91:f3:db:30:3b:b2:ae:46:37:
4c:64:4f:56:a3:2c:85:e2:83:b7:05:f2:18:cd:a6:
6f:f7:1e:eb:39:5f:a6:2d:8f:59:eb:3b:4d:fa:9f:
fe:62:2b:f8:88:1a:91:88:28:af:9d:63:99:78:31:
89:39:a6:61:1c:7e:8a:b5:bd:17:68:7b:d4:29:a9:
2e:f8:cf:bf:99:23:c7:c1:f5:a9:e6:47:7c:40:8c:
03:c8:79:8f:a3:62:5b:62:1c:44:90:36:f1:bd:fd:
ae:27:3e:00:e7:1c:05:75:67:7f:6e:49:12:81:47:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:CC:0D:77:9F:E3:35:71:C1:46:65:A4:D2:F0:3B:8A:C6:2E:E3
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:93:a9:8d:7b:3b:85:db:b9:f2:78:10:b6:a3:7e:aa:4f:
9e:14:73:28:46:29:bc:84:b9:50:5b:41:d8:b6:8f:3a:f1:f5:
b5:19:b4:ab:8e:3a:4e:51:74:9d:85:5f:0f:c5:86:ea:32:28:
57:80:fd:fa:46:69:7f:ca:56:06:9b:7d:fa:49:f8:bf:20:ab:
49:e5:e1:5d:5a:29:ab:6d:eb:bf:d4:c0:d6:84:d1:e8:c9:92:
be:72:25:50:11:c1:53:ad:b3:75:22:98:f9:cf:b0:6c:57:b7:
aa:ab:70:bd:6f:e7:74:59:63:ab:31:b5:86:fb:ba:5e:54:7d:
da:b7:83:09:5b:c5:27:86:b1:d7:bd:4d:04:dc:84:b3:85:84:
99:2a:c9:40:8e:9d:c3:6b:95:ab:a9:2f:c0:5f:d5:32:8e:97:
10:db:a0:13:24:b9:00:ab:13:34:cc:02:23:c0:e7:cc:52:78:
18:12:65:87:52:ec:b2:99:83:ce:9e:89:26:21:f6:7e:b7:a6:
11:6a:33:dd:c9:ae:6b:ac:11:48:50:5f:18:0b:aa:a1:ce:20:
93:df:48:ae:a0:10:11:20:c3:aa:cb:ab:19:74:51:35:26:40:
41:26:c4:9a:4f:6d:00:ab:46:0e:34:61:cd:4c:11:bc:50:48:
96:e1:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:08 2026 by rpki-client