Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: rCa58sJ5oYASlbwY3OdsMKTqRHeDWspkxhfbGFtAaHU=
Subject key identifier: BC:D3:5F:48:48:93:CB:0E:A3:38:36:D3:F1:8E:79:8E:31:DA:F1:11
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01A0028195B42E07391A4F28068CA7AEEC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 1714
Signing time: Fri 14 Aug 2026 23:00:41 +0000
Manifest this update: Fri 14 Aug 2026 23:00:41 +0000
Manifest next update: Sat 15 Aug 2026 23:00:41 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: LnrWRHD6qGGTgnbZt5ghbiLUQ2DC2QMest1gysqyqHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:95:b4:2e:07:39:1a:4f:28:06:8c:a7:ae:ec:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Aug 14 23:00:41 2026 GMT
Not After : Aug 15 23:00:41 2026 GMT
Subject: CN=bcd35f484893cb0ea33836d3f18e798e31daf111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:a2:85:95:8f:19:fb:3c:54:b7:8f:b2:ed:
e0:6e:b9:5e:ab:67:22:4a:a6:e9:07:a6:2d:a3:9d:
b2:11:24:64:31:8b:99:32:0a:1a:9b:80:24:32:b3:
d8:8c:4b:1a:ae:7e:bb:f8:cc:0c:b0:9a:36:c1:19:
eb:7a:73:2d:58:a1:5e:29:a4:0b:87:9c:33:7a:3c:
a5:53:6a:6b:ce:61:b1:07:cd:bf:64:ef:b7:6b:a7:
e2:3b:67:da:d3:5b:be:d2:6f:78:21:7b:e7:8f:93:
8c:e8:83:e1:e5:56:a2:e5:07:6d:f9:02:67:b8:fb:
1c:7c:45:ff:58:65:cb:f9:e5:6a:d8:a2:42:79:7d:
d1:f2:36:4d:29:13:02:ce:15:03:be:c6:91:43:3f:
ea:c5:ce:63:04:7c:0f:75:e7:18:82:93:2f:e6:ee:
a8:a3:17:b1:33:fa:4b:71:65:e6:31:1d:ec:6c:72:
ce:77:7f:ad:a5:d4:2a:12:f3:2e:67:1e:35:1b:b2:
cb:74:69:99:be:cd:c7:9a:21:f4:2f:48:1f:25:13:
77:74:1b:13:e9:92:26:a4:f8:5a:58:e1:f3:e5:5e:
a9:e2:14:f9:b2:05:ec:ab:53:d9:eb:84:0b:22:15:
fb:ef:73:ae:34:b9:3d:76:83:9a:18:34:94:e7:d5:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:5F:48:48:93:CB:0E:A3:38:36:D3:F1:8E:79:8E:31:DA:F1:11
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:68:18:25:13:37:c9:ee:a8:48:60:b1:33:ba:30:90:1f:
65:bf:ef:80:9c:4b:03:16:cd:60:f0:aa:25:a2:26:53:96:ef:
a3:0a:81:c4:17:d1:fd:a7:74:90:74:a0:e7:f5:c8:32:e9:9c:
d4:c4:5f:91:9f:7e:17:18:75:2e:77:69:84:a6:5f:ba:36:0a:
78:72:a1:ca:16:4f:ca:83:2d:b7:17:59:4b:43:0b:6a:3c:fc:
42:71:dd:ef:4d:96:7e:7a:ea:b4:b7:19:52:cf:b6:01:1e:ff:
6c:6f:06:4f:a1:bb:5d:3e:53:ce:01:65:bb:9d:32:42:d1:f2:
ff:30:56:bf:22:8f:4f:12:93:32:ee:cb:ce:6d:46:e9:f0:4e:
08:3b:e8:b2:59:22:7b:0e:ac:f5:11:c9:b9:9d:86:20:1f:55:
47:e9:d7:91:13:f7:a2:ed:ed:d0:73:37:ec:6e:32:7e:6c:47:
d4:d7:78:00:a1:33:ee:7b:cc:8a:bf:05:d3:e2:56:7c:83:17:
d2:96:a4:35:33:46:98:f7:7a:a2:1f:b3:0d:ec:63:1f:fd:3c:
f7:dd:2e:f5:50:b3:e6:77:68:45:06:37:1e:13:ab:3a:c6:70:
2e:f6:bf:9b:f4:c0:c9:16:dd:5d:86:96:a9:89:b7:24:29:21:
dd:56:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:35 2026 by rpki-client