Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: S/K5ZMeJg2O34xlFUWfg+FJb0o439rwjta58nyx54Bw=
Subject key identifier: 1D:AD:70:4B:7C:F9:9C:F7:CD:0B:99:88:F5:A8:4F:01:B3:F4:3B:3A
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 019FAB63AEA537C8779C67AF0B1DAF363CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 13FB
Signing time: Wed 29 Jul 2026 01:01:04 +0000
Manifest this update: Wed 29 Jul 2026 01:01:04 +0000
Manifest next update: Thu 30 Jul 2026 01:01:04 +0000
Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: mkSLpONsVD8woWgGK/7cTSwCIR4kqPs7qBeoAUCuiVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ae:a5:37:c8:77:9c:67:af:0b:1d:af:36:3c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Jul 29 01:01:04 2026 GMT
Not After : Jul 30 01:01:04 2026 GMT
Subject: CN=1dad704b7cf99cf7cd0b9988f5a84f01b3f43b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:51:7e:83:c3:67:74:27:dd:75:a4:7d:b5:
9b:8a:31:10:23:df:02:04:c7:13:95:9d:88:1b:94:
90:56:c9:19:22:97:36:c7:b6:e0:96:7f:28:ea:4d:
71:ec:c4:49:1e:cb:3a:de:90:07:b5:2c:17:f4:02:
c4:10:45:4c:06:d4:af:61:49:93:39:fc:98:45:b0:
32:20:bd:97:26:f2:86:e4:60:5d:35:d4:db:b4:12:
7c:98:18:02:ad:aa:29:a4:48:8c:c7:3f:c7:d2:91:
e1:78:55:b0:7c:b8:fb:a4:76:dc:70:dd:24:b5:54:
a9:92:ed:f5:cd:25:47:45:fe:19:96:ae:1a:18:dd:
5f:9e:c7:84:3b:0f:44:6e:b9:b2:2b:71:59:35:48:
61:3d:ef:ec:23:50:30:69:48:de:60:eb:a0:6c:06:
c2:8e:ab:48:b4:f6:d7:f3:b5:e7:7a:1d:07:13:8f:
9a:9d:fa:95:a3:b9:65:76:10:de:86:e8:65:d1:f9:
1d:be:60:c3:04:a4:92:0e:81:7b:b7:4b:0b:51:8b:
65:62:30:55:d8:20:4f:10:f9:51:02:ea:32:de:31:
6d:1a:c7:22:67:cd:f3:5f:cf:f7:9f:55:55:e3:50:
83:62:6b:ad:ba:25:27:36:8d:a9:fc:2b:d9:39:85:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AD:70:4B:7C:F9:9C:F7:CD:0B:99:88:F5:A8:4F:01:B3:F4:3B:3A
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:30:4b:c9:07:a5:aa:d5:32:98:6a:91:16:ab:c8:22:a0:
9f:57:79:a5:fc:34:2e:3f:20:2f:e4:cd:7c:d1:89:bb:71:c7:
9b:81:a0:77:49:b7:a2:7c:e0:46:b9:f4:fe:c3:c3:d9:d4:12:
86:c8:73:ae:1a:27:d3:60:10:ed:54:98:fb:7d:21:64:57:d4:
89:ec:5d:e6:2d:a5:c9:75:d3:cf:77:e4:9d:77:eb:51:2c:14:
b4:ce:45:f5:86:e0:4a:62:e1:aa:2f:8f:19:d1:ed:c9:48:03:
bc:6c:f6:fa:8c:0e:6a:b0:34:43:c7:39:67:21:20:e8:18:8c:
c3:34:c0:6f:c5:84:09:6a:46:97:cf:de:ab:08:43:93:7e:76:
ef:6d:cc:ce:8a:ba:e8:85:7c:b7:20:65:20:f5:f4:01:fc:57:
a3:23:71:4d:8b:68:46:c4:7e:8a:22:a5:94:52:50:fa:63:b2:
4b:dd:ba:03:43:2b:ab:70:fa:cc:e0:20:c2:c0:7f:09:68:8a:
24:13:36:da:91:47:44:a8:18:4e:18:5d:83:ee:84:22:70:8a:
28:6e:5e:c4:a4:ea:02:d4:dc:f3:f0:87:c6:71:6b:a3:2f:de:
83:c5:96:5b:14:92:17:85:e1:68:8b:47:f0:0b:66:37:dc:ce:
a6:08:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:49 2026 by rpki-client