Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: L0OV2aJD9/SUnP07NW8fypXC/mElX37QKLrNiZVF4SA=
Subject key identifier: 66:B7:B4:64:9A:E6:DF:54:6F:BD:81:6C:78:C0:5F:EF:C8:FC:54:C8
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019F837A0E0DFEE40041904FC693025B8270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 045E
Signing time: Tue 21 Jul 2026 07:00:41 +0000
Manifest this update: Tue 21 Jul 2026 07:00:41 +0000
Manifest next update: Wed 22 Jul 2026 07:00:41 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: urWKvi/sBjqJgzOerc7jZxd+AtZ06fh0F/q0Kdb+IVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:0e:0d:fe:e4:00:41:90:4f:c6:93:02:5b:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jul 21 07:00:41 2026 GMT
Not After : Jul 22 07:00:41 2026 GMT
Subject: CN=66b7b4649ae6df546fbd816c78c05fefc8fc54c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:3c:c4:ec:4e:cc:f3:bb:5f:7a:d1:03:b5:
38:e2:44:78:5b:3a:27:5e:c7:53:48:2a:12:97:e0:
33:10:33:c9:1c:5b:09:e5:48:2c:1c:3b:34:07:69:
f6:59:fd:fe:34:28:2f:95:ca:06:21:6d:a4:12:ef:
84:3c:3a:d2:b0:c1:4a:c3:93:f7:30:ec:5f:33:af:
47:34:2a:70:16:16:e2:9e:26:24:c7:b1:76:f3:02:
80:86:49:72:e0:a8:de:c4:10:1e:df:58:9a:86:f2:
bf:e6:be:3e:73:db:1c:ca:c1:d1:da:96:da:11:9d:
67:4d:4a:9e:57:83:ea:d3:a5:7b:2f:a1:7a:61:a2:
c7:2d:c4:ba:ec:bc:7b:43:58:ed:3f:41:00:c0:5c:
59:f8:5a:6c:48:2f:65:6c:24:47:53:b1:db:20:05:
c6:81:29:1e:07:d7:d6:99:44:40:32:06:7e:e2:a3:
b4:5c:9f:57:e8:74:1a:39:89:10:6e:4e:3a:e0:81:
33:03:fa:57:12:a6:b5:07:54:b5:2d:26:3c:b6:a8:
28:e6:f0:b5:64:e1:58:dd:29:1a:89:68:d9:b9:fe:
9e:18:40:67:cf:88:32:cf:f0:f3:5e:a9:56:a6:7e:
aa:94:ce:6c:40:c3:8d:3a:2e:9c:b7:ce:e1:55:41:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:B4:64:9A:E6:DF:54:6F:BD:81:6C:78:C0:5F:EF:C8:FC:54:C8
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ab:21:f4:b9:5d:19:c2:45:49:64:7d:64:d9:d0:3b:51:e6:
46:81:d9:6a:13:c5:2c:cc:c9:3f:74:1f:aa:f9:43:64:66:f4:
1a:f1:d9:41:1e:f4:00:0c:d5:21:97:6c:42:06:d5:b1:8a:03:
0e:f2:ad:cc:17:f7:93:0e:cb:e2:64:00:af:71:97:e2:1a:01:
25:e2:ed:42:9f:b3:bf:31:0c:ef:6f:a9:e2:5c:0f:69:c3:13:
b4:6b:27:62:7a:93:94:f4:60:22:bc:3e:bf:40:5b:21:00:c1:
40:a3:ff:80:0e:ce:0e:39:a7:5c:17:b3:d3:1b:24:e4:2d:00:
59:4f:3a:c1:12:b1:5d:54:bc:11:c5:d6:bf:5c:f5:5e:23:dd:
56:0e:85:84:91:52:f7:5f:06:db:7c:83:d4:1d:a5:32:1a:06:
e0:2a:27:a7:4e:17:e9:68:6d:5a:31:fc:73:79:c6:e0:45:41:
83:92:5d:43:70:f3:04:ee:5c:a1:06:65:86:3b:0c:a0:be:86:
c4:8c:40:d7:8f:26:a1:47:4f:f4:e0:c5:61:4b:f9:71:14:1f:
e5:0d:f3:d0:ea:fb:cf:aa:ad:7f:5a:61:a5:67:d3:be:b8:48:
eb:15:86:bd:f5:e0:bc:53:44:ea:93:e0:29:f6:d6:de:70:44:
26:f0:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:42:27 2026 by rpki-client