
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: cp7n4yBhadIQsCZGvnL8J8JhPsZ7IZ8UDBHK3Yc+Axw=
Subject key identifier: 67:9B:F3:1A:26:EE:DD:E4:8F:1B:BC:27:66:F8:25:6B:F6:73:46:D1
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019FA304B72612429E696A5AD76B32BB9B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 045B
Signing time: Mon 27 Jul 2026 10:00:22 +0000
Manifest this update: Mon 27 Jul 2026 10:00:22 +0000
Manifest next update: Tue 28 Jul 2026 10:00:22 +0000
Files and hashes: 1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: 6m2qefUGkN6OOkW8KXtizKRCz2pESzFgfSBYKJQWtgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:b7:26:12:42:9e:69:6a:5a:d7:6b:32:bb:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Jul 27 10:00:22 2026 GMT
Not After : Jul 28 10:00:22 2026 GMT
Subject: CN=679bf31a26eedde48f1bbc2766f8256bf67346d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:2b:c8:bb:86:10:70:8f:1f:29:3f:bb:00:
62:da:a7:fe:bc:32:79:a4:34:2b:d5:78:d2:fb:71:
5f:2f:39:18:71:f2:f6:95:ac:f9:29:a3:74:51:47:
62:4e:46:94:02:f6:aa:31:4b:cc:5e:26:2d:c8:bb:
4c:29:33:24:87:23:cf:22:79:e4:70:a7:1f:96:ce:
cf:17:0b:60:07:f1:5e:9d:99:5c:10:ac:a5:81:f9:
01:42:f7:0a:24:a9:08:d8:aa:aa:6a:39:30:53:d8:
92:27:3a:c4:c4:1f:54:85:95:96:1e:78:11:df:91:
4a:5d:4c:4d:e4:af:51:68:ef:53:a2:a1:ab:ed:52:
75:78:31:a5:12:d6:64:5d:e5:c6:a4:0e:8e:14:f0:
c7:62:bc:41:3e:14:8b:65:df:ab:9e:5f:e7:df:77:
03:a2:c8:8e:91:4b:74:08:58:8d:49:06:d8:b4:8f:
a7:c1:6c:5d:07:91:f8:9d:a8:3e:73:1b:a3:ae:95:
10:a6:fb:10:48:78:15:df:8b:7d:41:1e:73:5f:ba:
c2:d3:df:16:fb:4d:b9:bf:4e:8d:9b:ca:c4:4f:49:
29:bb:1f:9e:08:7d:96:aa:1d:c4:15:81:ce:48:30:
2e:3e:31:b7:49:89:15:32:bb:5b:3e:df:a2:9e:c7:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:F3:1A:26:EE:DD:E4:8F:1B:BC:27:66:F8:25:6B:F6:73:46:D1
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:23:3a:02:1b:9d:32:b7:2b:50:01:ff:28:ef:ca:bf:8b:7c:
4d:af:b6:81:d8:af:6e:d8:19:87:c7:31:06:d1:16:e6:ad:68:
f4:ac:d0:37:c7:c1:93:ef:57:1a:59:ae:0b:20:49:3f:cb:1b:
a8:28:0b:90:b3:5d:dd:fe:db:42:76:68:d2:41:12:43:e9:ac:
b8:d2:fa:16:d6:8c:40:e0:30:33:99:e3:f6:29:a2:a3:f8:86:
84:4e:b1:ff:2a:50:f0:4a:e8:f2:63:24:8b:f2:7d:a6:2d:6c:
b2:9a:e6:e9:25:be:53:d2:0f:40:58:4e:74:28:c5:34:de:4f:
1e:8b:2b:d6:56:66:95:f9:0e:bb:06:1d:7f:fe:3c:0b:c8:04:
49:82:7c:b6:d3:41:4d:d0:73:56:70:50:b0:70:84:d2:d6:2f:
96:10:ed:45:2e:57:b1:d5:da:3a:9e:7e:89:39:e4:6c:13:b4:
1b:01:7b:84:df:1a:ed:07:c2:0d:54:81:24:5e:92:f3:3e:a5:
ae:a4:ef:c0:c8:cc:7f:5c:6e:69:61:7d:24:fe:8f:ce:1e:13:
38:6c:4b:2e:ef:45:ec:47:80:b0:35:ff:1e:6e:6f:89:43:b7:
35:7a:a0:9b:d5:0d:28:e7:62:bd:32:d1:fe:17:89:d9:e4:63:
01:9f:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:08 2026 by rpki-client