Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
File: lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft (raw, json)
Hash identifier: 7RetlVTt7bQTpv9n1Y2vVYB8FVTWIfXz/p/d36BOrZ4=
Subject key identifier: 1C:3C:6F:20:23:21:F8:8E:DC:31:08:FA:6B:81:34:5B:7E:51:EC:16
Authority key identifier: 94:3B:40:BB:78:3C:AC:94:54:E7:D5:4B:DE:5E:6D:8E:21:A2:31:94
Certificate issuer: /CN=943b40bb783cac9454e7d54bde5e6d8e21a23194
Certificate serial: 019FA82C3C1EC7009D5661B94FBFACEC89B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
Manifest number: 21
Signing time: Tue 28 Jul 2026 10:01:38 +0000
Manifest this update: Tue 28 Jul 2026 10:01:38 +0000
Manifest next update: Wed 29 Jul 2026 10:01:38 +0000
Files and hashes: 1: OysY4nioAaKrGqetn-RaUnYXgmY.asa (hash: Ye8EtwPz+uC1ZzZz8qFsT6NC/SCbeU8qHxA+5xPb8m0=)
2: lDtAu3g8rJRU59VL3l5tjiGiMZQ.crl (hash: GgyVgYpLbzMTQ4wELRBBoGejSzAUy0yh2AZa6NdzwPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:3c:1e:c7:00:9d:56:61:b9:4f:bf:ac:ec:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943b40bb783cac9454e7d54bde5e6d8e21a23194
Validity
Not Before: Jul 28 10:01:38 2026 GMT
Not After : Jul 29 10:01:38 2026 GMT
Subject: CN=1c3c6f202321f88edc3108fa6b81345b7e51ec16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:32:03:59:ab:7f:26:49:e2:0d:f9:e4:f4:
9f:9b:9e:78:9f:e2:8d:34:7c:4a:77:4a:8c:0d:43:
44:df:07:54:92:51:12:e7:6a:bc:b2:4d:64:39:b2:
da:19:2e:fd:a2:6a:84:94:9d:0e:8b:7a:ad:e3:b3:
fa:2b:68:c8:6a:85:5f:43:a1:a1:8d:6f:7f:be:1c:
cd:15:b9:28:05:4b:cb:26:50:49:2c:d0:4b:d1:6c:
80:33:b3:4e:f1:7c:8f:6a:22:82:d8:a1:14:4e:55:
11:c9:33:5b:64:ef:40:29:c1:86:ab:b6:de:a3:c2:
b0:5c:68:b3:59:42:7b:a4:70:cc:99:30:cf:56:69:
7c:df:1a:46:49:b4:d4:2e:dd:d2:67:85:b7:cc:3c:
39:ba:06:20:0b:f4:57:0c:a8:60:de:bb:9e:de:f5:
90:c9:de:83:a8:1f:36:31:db:ff:ed:43:82:ef:b3:
f9:a5:c5:9d:99:65:16:24:70:c8:bc:f4:5b:67:3f:
37:ab:b4:56:78:b6:09:ad:ab:14:49:93:f9:c9:8f:
ae:03:95:07:20:cf:31:10:69:5d:5d:89:25:ff:ee:
52:ff:45:ea:f5:73:77:39:78:5d:8d:13:e1:04:50:
7d:34:84:8d:e2:b5:f8:1b:b2:fd:d2:a3:59:30:be:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:6F:20:23:21:F8:8E:DC:31:08:FA:6B:81:34:5B:7E:51:EC:16
X509v3 Authority Key Identifier:
keyid:94:3B:40:BB:78:3C:AC:94:54:E7:D5:4B:DE:5E:6D:8E:21:A2:31:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:45:54:eb:fa:2c:69:97:3f:44:00:66:43:ed:20:41:67:
04:8a:ee:12:98:98:8e:2f:e3:43:e3:c5:73:7b:7f:19:3f:e7:
d0:59:4a:d1:e5:5c:95:66:90:44:61:89:3f:34:dd:b9:19:6c:
7d:ac:7c:8e:26:7f:27:9b:e7:05:70:af:d9:35:ea:23:ef:5a:
86:6c:e2:01:f3:f7:7f:34:f4:e3:3d:51:3c:3f:33:bb:5f:33:
dd:5a:ae:e7:dd:03:6b:1d:fb:82:25:71:78:ba:de:52:00:82:
7c:43:77:e7:7d:7b:17:80:20:a5:bc:37:8c:c2:d2:b7:24:5b:
41:c1:0e:f0:ab:1e:76:8f:4c:f0:f0:ec:fc:26:11:65:d0:f3:
ff:74:24:88:82:09:03:4e:88:d1:9c:f0:03:6c:43:36:bd:27:
1d:41:1e:fb:65:54:ba:b6:e6:9f:80:9b:85:c8:6d:70:4c:ca:
24:cb:60:66:a3:10:f0:e4:96:ac:60:5c:eb:e7:ee:f4:70:6a:
1c:3d:5f:32:1a:cc:02:5c:40:3a:29:7b:85:1a:51:01:74:fe:
53:df:47:d6:d3:90:0b:ee:e4:f5:e1:37:c6:70:e1:3d:91:2c:
06:d9:18:fc:38:64:a6:c5:95:4b:3a:9a:b9:19:32:de:5c:93:
19:ed:fe:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oLDwexwCdVmG5T7+s7Im0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2I0MGJiNzgzY2FjOTQ1NGU3ZDU0YmRlNWU2ZDhlMjFh
MjMxOTQwHhcNMjYwNzI4MTAwMTM4WhcNMjYwNzI5MTAwMTM4WjAzMTEwLwYDVQQD
EygxYzNjNmYyMDIzMjFmODhlZGMzMTA4ZmE2YjgxMzQ1YjdlNTFlYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmUyA1mrfyZJ4g355PSfm554n+KN
NHxKd0qMDUNE3wdUklES52q8sk1kObLaGS79omqElJ0Oi3qt47P6K2jIaoVfQ6Gh
jW9/vhzNFbkoBUvLJlBJLNBL0WyAM7NO8XyPaiKC2KEUTlURyTNbZO9AKcGGq7be
o8KwXGizWUJ7pHDMmTDPVml83xpGSbTULt3SZ4W3zDw5ugYgC/RXDKhg3rue3vWQ
yd6DqB82Mdv/7UOC77P5pcWdmWUWJHDIvPRbZz83q7RWeLYJrasUSZP5yY+uA5UH
IM8xEGldXYkl/+5S/0Xq9XN3OXhdjRPhBFB9NISN4rX4G7L90qNZML4DjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw8byAjIfiO3DEI+muBNFt+UewWMB8GA1UdIwQY
MBaAFJQ7QLt4PKyUVOfVS95ebY4hojGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbER0QXUzZzhySlJVNTlWTDNsNXRqaUdpTVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzY0NGEtM2JiMy00Mjk1LThkYzUt
ODBhMTU3NWQ3YzE3LzEvbER0QXUzZzhySlJVNTlWTDNsNXRqaUdpTVpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MzY0NGEtM2JiMy00Mjk1LThkYzUtODBhMTU3NWQ3YzE3
LzEvbER0QXUzZzhySlJVNTlWTDNsNXRqaUdpTVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz9FVOv6
LGmXP0QAZkPtIEFnBIruEpiYji/jQ+PFc3t/GT/n0FlK0eVclWaQRGGJPzTduRls
fax8jiZ/J5vnBXCv2TXqI+9ahmziAfP3fzT04z1RPD8zu18z3Vqu590Dax37giVx
eLreUgCCfEN35317F4Agpbw3jMLStyRbQcEO8Ksedo9M8PDs/CYRZdDz/3QkiIIJ
A06I0ZzwA2xDNr0nHUEe+2VUurbmn4CbhchtcEzKJMtgZqMQ8OSWrGBc6+fu9HBq
HD1fMhrMAlxAOil7hRpRAXT+U99H1tOQC+7k9eE3xnDhPZEsBtkY/DhkpsWVSzqa
uRky3lyTGe3+nA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:08 2026 by rpki-client