Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: B6hnGQuZfIItGu51CeCbvQDu0ZvWO4DLPhMAYXPzzyw=
Subject key identifier: E5:45:83:41:64:FB:5A:56:5E:39:61:C9:C4:F1:11:CF:16:ED:C0:12
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019F84FB19409F6CAF6B6DC3409D6C583935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 14:01:16 +0000
Manifest this update: Tue 21 Jul 2026 14:01:16 +0000
Manifest next update: Wed 22 Jul 2026 14:01:16 +0000
Files and hashes: 1: 1-5zn0bSlddLMmUlOq_ZglROu18k.asa (hash: Yy6jCWoReDrwxlHPUoAZSBEIXQW1OUdFReXCBYRR6d0=)
2: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
3: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: XVROO0e+UJdAKObR8myOtEdmVXfevxZg0oLg9Q6yFtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:19:40:9f:6c:af:6b:6d:c3:40:9d:6c:58:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Jul 21 14:01:16 2026 GMT
Not After : Jul 22 14:01:16 2026 GMT
Subject: CN=e545834164fb5a565e3961c9c4f111cf16edc012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:f3:63:98:cd:17:d0:a1:ac:67:d0:50:b5:
8a:fb:c7:5f:1b:98:db:3a:f8:43:a8:dc:73:5f:ec:
75:5c:d3:84:94:78:27:c4:4b:f4:d4:86:9b:51:53:
9e:37:54:e1:a5:6b:29:26:fb:4a:4d:81:01:7e:8f:
ff:b8:f7:ed:f3:de:b5:a9:15:86:e1:6e:f5:cc:f8:
f5:0f:27:a1:d2:17:b5:66:68:54:51:ee:4f:ac:94:
b1:75:ed:03:84:ed:60:11:d6:e5:87:fb:b3:94:0f:
01:a9:98:f0:19:c8:35:8b:09:5a:91:a8:6f:63:0d:
d1:0e:e0:65:fc:a0:d5:e8:db:57:31:12:04:8b:aa:
cc:4e:76:9a:bf:8b:84:48:35:66:53:79:bb:dc:c8:
a3:25:81:91:08:b6:0c:f8:be:d9:7c:dd:29:bc:b8:
02:80:dd:dc:ca:aa:ed:09:cc:12:16:18:ed:6d:97:
38:39:9f:e3:9a:ae:73:a3:39:e8:3c:1d:63:f6:00:
69:72:61:f5:41:99:c0:f5:c7:a5:67:5d:69:a2:8c:
a5:32:df:2f:3e:40:b7:be:03:c3:21:5a:12:d5:ba:
3c:71:d0:1c:23:ee:19:bb:bd:0b:b1:74:2b:00:0b:
d2:ff:78:34:9f:89:2f:ae:06:24:d1:32:00:da:0e:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:45:83:41:64:FB:5A:56:5E:39:61:C9:C4:F1:11:CF:16:ED:C0:12
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:e7:d9:09:e2:13:c8:a6:33:ee:d6:42:19:1d:ae:ae:5f:
9e:9d:91:e9:70:2b:37:83:1c:00:e2:77:7e:55:ad:c1:f9:74:
a4:fa:5c:01:4e:6d:05:86:27:1e:5c:af:ea:55:3c:02:e5:5f:
71:33:a7:83:05:53:d9:eb:5c:b5:d3:ae:2b:19:df:96:77:e2:
e5:1d:67:77:7a:bd:a2:17:fa:da:37:89:35:f9:8e:b2:94:17:
fe:a8:0a:8d:52:64:0f:72:2a:39:f1:64:27:da:ba:74:a4:60:
72:34:7b:6b:b3:e4:5a:43:cc:1a:99:2f:9d:dc:40:4e:83:af:
b6:0a:a0:36:31:45:24:5b:b4:c3:20:2d:12:42:6d:54:fa:6c:
c5:23:8a:7d:d6:31:67:10:a3:3e:fc:d7:36:e1:ac:a7:d8:b1:
c7:59:6f:f5:6d:4a:ac:f2:5a:22:24:f2:09:87:55:b5:4d:86:
66:20:8d:36:c5:59:23:69:e0:e9:21:a5:7c:f4:26:89:78:d7:
4e:15:33:28:b7:cc:ee:94:ef:e8:94:72:35:d2:b9:f5:9f:0a:
11:98:12:0d:8d:12:a3:c0:95:60:d5:eb:c8:91:61:3a:40:b5:
eb:8b:41:2a:43:b3:cd:f2:28:9d:8d:9e:ed:e1:3d:cf:cd:73:
12:0c:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:15 2026 by rpki-client