Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: 6dHTHS7SLboREJT3Ro05i0wobXW3LgecQvSIYUkjrOQ=
Subject key identifier: B4:B2:7E:EF:95:96:AA:43:74:F3:5C:1F:EF:6F:17:4B:74:94:7A:6F
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019F82300C9D6BC13ED4C4AD456549DAF9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 0A7C
Signing time: Tue 21 Jul 2026 01:00:14 +0000
Manifest this update: Tue 21 Jul 2026 01:00:14 +0000
Manifest next update: Wed 22 Jul 2026 01:00:14 +0000
Files and hashes: 1: 7qVO45pVF7TizoyZ3tGtHXhleIo.roa (hash: gATl7peABL1S3wTIKJvI8pKX7Z470X6U51KJ5zpO3XQ=)
2: a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa (hash: uHevbCCqsNL4Z3mLZg7vrx9rkzYsimXYtM+5KXA7MHE=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: SKPB9N48sfHfd3Mod10nZKW2FFkC/E5TNl+CR0PB7B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:0c:9d:6b:c1:3e:d4:c4:ad:45:65:49:da:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Jul 21 01:00:14 2026 GMT
Not After : Jul 22 01:00:14 2026 GMT
Subject: CN=b4b27eef9596aa4374f35c1fef6f174b74947a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:f7:fa:f6:ef:69:25:c6:aa:a7:99:dc:19:
f0:53:d5:f2:71:56:a5:5f:96:e3:83:44:f8:e2:8a:
47:2f:46:01:50:6b:8f:06:aa:89:23:7e:a1:ac:8c:
7a:57:2e:40:7c:a1:db:32:5f:29:61:2c:15:9c:72:
f4:64:e2:8a:c8:bd:a9:70:0e:10:4a:c4:36:d4:ec:
b9:ee:df:fd:79:ee:db:83:d8:cd:52:70:d1:40:51:
ab:7f:ab:0f:a7:91:38:25:33:3c:02:85:65:f1:e6:
0c:c6:47:f1:6d:22:cc:36:a9:26:e1:ac:c7:07:c1:
3b:45:9a:77:32:d7:42:52:8c:22:a3:93:b9:24:33:
03:50:ff:0c:1d:af:06:d4:97:65:52:84:fe:d3:49:
f9:f6:34:0e:9b:50:37:2c:7c:b1:22:92:a8:44:da:
83:5c:d9:35:e9:6d:2c:14:ce:9f:a6:df:2d:c3:79:
2e:2d:17:a8:8e:68:de:d3:1e:4e:74:ed:67:0b:2f:
04:d5:f4:f1:df:2f:0c:76:9b:e4:e8:4f:95:68:63:
94:95:b2:cf:45:da:0e:c0:e7:7c:b8:ae:53:89:95:
dc:a6:70:62:70:8c:8b:62:c8:85:16:5b:5a:27:5c:
e2:62:7c:c2:3b:d0:14:43:22:0c:fa:b7:76:73:7d:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:7E:EF:95:96:AA:43:74:F3:5C:1F:EF:6F:17:4B:74:94:7A:6F
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b2:c7:cf:d9:e4:00:4a:79:a8:a3:d2:bb:64:6d:87:78:e5:
f5:34:34:61:c1:96:80:06:43:cd:d6:4c:de:fe:24:78:3a:27:
1f:78:a5:26:56:16:bb:29:1a:1b:72:b7:34:f0:87:05:15:0e:
ed:bd:0e:ec:24:ea:81:3a:3c:25:c1:e5:81:3c:6f:0a:50:aa:
f5:db:62:10:4d:74:c7:3b:d9:a8:e2:38:db:8e:e1:20:77:ef:
2e:85:d8:81:a9:39:48:d4:f3:b3:06:2e:da:f6:35:85:11:64:
d1:84:45:d1:79:ea:f2:0d:3b:5f:2b:96:c9:1b:25:30:c8:c2:
64:08:fb:5c:f9:08:4b:ce:3a:51:6f:3d:fd:86:5e:27:8a:d5:
cc:90:60:52:e7:95:81:b6:91:bb:e0:9c:eb:4e:09:1e:35:d8:
c8:e9:2b:3a:27:b9:eb:f7:3a:09:5b:ff:e9:e2:90:12:03:a7:
07:91:f8:c4:9b:14:f5:35:4a:24:43:e2:4e:5c:de:22:38:f6:
e3:19:f1:90:34:fd:26:ed:a9:1b:ee:09:e9:d0:83:7d:52:c0:
28:a3:f2:a1:6b:7c:31:c0:ea:dd:0c:41:04:89:6a:22:82:6b:
d9:78:36:cc:e0:e0:de:84:30:9e:da:78:e8:e2:f3:16:81:79:
af:e0:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:18 2026 by rpki-client