Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: gnAIn2DmR3C/eh/Vzr8Qh5mzPiJJ2E7yxwyoYeWZQao=
Subject key identifier: 17:78:B9:4F:F0:70:D9:B2:1D:45:F7:70:C9:17:C1:2A:0B:CB:B1:1A
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 019F0962B460AB58E2F5EBCEB4DE6DEA0A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 1693
Signing time: Sat 27 Jun 2026 14:01:31 +0000
Manifest this update: Sat 27 Jun 2026 14:01:31 +0000
Manifest next update: Sun 28 Jun 2026 14:01:31 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: PmAWtcqeejJCqxGkS2EiuTQc0BUa7LMTpfUu0YgiCvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:62:b4:60:ab:58:e2:f5:eb:ce:b4:de:6d:ea:0a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jun 27 14:01:31 2026 GMT
Not After : Jun 28 14:01:31 2026 GMT
Subject: CN=1778b94ff070d9b21d45f770c917c12a0bcbb11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:e3:9d:c4:25:cd:dc:72:0e:dc:06:3a:dc:
54:3f:eb:ed:30:49:09:d5:2c:94:5a:ca:48:a6:89:
27:5e:0d:87:4d:d6:72:08:cb:c5:e1:5b:fe:30:38:
39:38:1e:26:15:29:e7:0b:9b:36:72:22:70:f8:4b:
b6:02:e8:74:33:7c:f4:c0:d0:b5:dc:a7:76:00:67:
1f:14:f9:de:76:7d:f3:6b:1c:fb:9d:cc:68:6a:16:
79:51:e4:49:d4:dc:f1:d6:1b:29:57:9b:8f:77:c1:
f9:99:a0:1b:1a:ff:dd:b2:b2:1a:5c:b1:01:98:0c:
d3:56:b4:4a:f0:63:62:6f:17:de:5f:69:65:49:fa:
ef:17:06:aa:ce:d5:d8:f9:a9:a5:8f:86:61:7f:c6:
9d:a4:85:49:22:73:6d:b0:81:89:be:20:db:6c:84:
df:c2:82:37:26:14:59:ef:c8:bf:b4:32:32:1e:8d:
2d:3c:2d:14:b4:e7:85:4d:62:b7:f8:8f:4a:31:2e:
41:db:db:91:9c:dd:b9:c2:7e:82:d9:a6:3f:ae:92:
07:c8:9e:5c:0c:31:d6:22:51:29:28:26:04:41:47:
0f:92:aa:fc:63:b7:2d:06:d4:28:54:a6:61:9c:45:
2e:37:cd:cc:70:bb:7a:d4:e2:0c:c0:75:b3:76:6d:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:B9:4F:F0:70:D9:B2:1D:45:F7:70:C9:17:C1:2A:0B:CB:B1:1A
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:7a:92:d6:66:0e:54:23:2e:b4:da:87:fd:77:82:76:8a:
bd:97:c2:28:20:ad:43:81:0a:49:e0:69:70:ad:71:a6:74:37:
73:a2:92:58:6c:2f:87:ae:70:48:27:73:bd:33:b2:cb:37:f5:
30:2d:d9:c9:d7:60:76:3f:34:80:e8:89:cb:2b:ef:11:fc:bd:
d7:52:b9:a4:a9:04:70:a5:fd:e3:65:e3:af:83:c1:2c:ed:76:
44:3f:99:e0:85:05:3a:cd:c9:7c:e1:11:24:5b:3a:2d:a3:a4:
de:ad:69:42:a1:b5:02:e4:34:52:4d:c0:4a:38:97:24:52:88:
86:37:da:d2:ed:79:ec:40:07:ba:7d:f5:26:7c:0e:fe:e2:a7:
13:90:de:b4:6a:58:64:06:fa:c9:21:6e:11:20:d1:9d:fa:ac:
e3:86:7a:fb:8c:bb:21:62:01:43:4a:26:8a:0d:a0:6c:82:57:
bc:97:ca:3a:13:5a:fb:50:58:dd:d9:43:33:fd:50:46:9e:82:
54:38:6b:ca:0e:f8:64:d7:a3:1a:e0:d2:48:ce:15:b1:61:d1:
47:4b:3f:93:38:5e:c3:b0:9b:57:a7:c9:93:42:93:32:00:22:
88:cb:49:04:fb:0b:b0:2f:58:e3:9d:6b:f1:c0:3a:ea:7f:1c:
95:c0:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 19:26:12 2026 by rpki-client