Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: X8Xqd4ZZAHdyAqzoGahAjtozBMAmC8na+HkbvFhGtsM=
Subject key identifier: C8:0F:28:06:66:2D:26:C9:56:5F:6E:AD:DC:E6:FF:7E:94:11:AA:49
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 019F8342B853E08C31C36A9C514F3435C37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0E41
Signing time: Tue 21 Jul 2026 06:00:15 +0000
Manifest this update: Tue 21 Jul 2026 06:00:15 +0000
Manifest next update: Wed 22 Jul 2026 06:00:15 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: n9zoVEiZzpBL0NXHLdusNYR5fxeVHSiflP5Bg/tTinw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:42:b8:53:e0:8c:31:c3:6a:9c:51:4f:34:35:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jul 21 06:00:15 2026 GMT
Not After : Jul 22 06:00:15 2026 GMT
Subject: CN=c80f2806662d26c9565f6eaddce6ff7e9411aa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bc:8d:65:49:78:a9:c8:51:06:b0:22:72:dd:
b0:0f:69:20:e8:6a:89:9e:b0:17:80:da:f1:74:f7:
45:44:31:81:80:d5:99:cb:99:4d:c1:f4:32:f0:98:
77:8e:ba:48:2e:b3:51:83:b1:40:0e:41:42:4f:07:
4a:5a:49:8c:c3:c4:23:3d:e7:89:28:8e:8f:32:f8:
81:69:64:e3:1a:60:46:3f:7d:75:8d:de:4b:03:28:
57:2e:38:0c:06:66:a8:81:57:e4:e9:d5:a3:18:54:
4e:f2:1b:e4:9b:03:b2:97:5c:e1:8e:ca:76:48:8f:
ad:2c:e7:8a:e7:cf:d2:55:c0:3b:7f:52:a4:c3:46:
68:b5:43:15:a0:a9:72:04:20:20:90:bb:39:be:f8:
24:d2:cb:48:a4:b9:74:69:71:54:7c:78:ac:08:57:
88:b2:2a:f3:77:2f:31:80:74:e0:f8:39:5c:a2:bc:
f3:bf:6d:b6:27:2c:da:e3:16:93:e0:6d:f9:3b:86:
ea:5a:d4:ed:cc:44:be:68:19:7a:92:8d:dc:e5:72:
ff:a6:93:99:25:f3:e9:72:e9:64:97:22:fa:58:2a:
0f:e4:bf:4d:fa:8a:0d:a2:3b:a7:51:3d:be:d7:8d:
18:47:6a:8e:27:6f:8a:d6:ad:3f:10:1f:65:dc:2a:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:28:06:66:2D:26:C9:56:5F:6E:AD:DC:E6:FF:7E:94:11:AA:49
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ed:67:45:0d:a9:04:9e:5b:26:8b:3b:2d:b7:a6:26:0e:1e:
b9:45:68:e2:f2:9c:a3:a8:3c:19:57:b6:df:76:18:d1:9e:2b:
72:c5:99:2a:06:e2:47:77:bd:9e:ed:33:7d:54:0b:fd:40:30:
17:16:c9:5e:73:14:ad:a5:7d:c1:66:29:09:4e:08:92:0a:32:
1c:85:54:26:97:4a:5a:15:44:e1:24:88:a0:f9:5e:87:ac:71:
69:89:d9:9f:3c:45:d9:8b:4e:f0:2c:5c:6b:33:f5:65:3f:24:
39:76:69:97:74:11:23:fb:42:ae:90:d9:02:d0:9b:0e:1c:62:
a7:cf:1c:5b:01:45:5a:91:5e:99:d9:eb:f1:a5:e7:f1:88:f0:
f3:96:ef:ca:5d:dd:40:db:99:06:a2:30:8c:1b:d5:76:79:79:
f4:9a:98:91:1d:d7:da:45:9e:1f:db:d1:50:f0:d8:fe:25:89:
76:dd:66:74:a1:c2:d3:42:f3:59:00:57:4e:00:da:88:61:41:
1c:26:a0:e4:06:06:1b:e6:42:0e:9e:19:f5:e6:1e:9a:c9:26:
57:8a:50:8c:3c:9e:ce:5d:93:79:d7:9e:16:57:09:a6:90:0d:
c3:20:98:4d:14:1b:d8:40:ff:cc:44:07:7d:85:67:ec:b1:b2:
16:58:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:36:07 2026 by rpki-client