Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: W96O9DsRQza3xWug3NnqlaBDFsj2TZsHfIMX7f1FSFY=
Subject key identifier: 4B:71:4D:D0:54:06:C5:FD:8E:F5:25:1C:C2:9A:EE:C3:B1:DE:66:1F
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019FA1BB28587D3FFF66531D566103BF4E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 19D9
Signing time: Mon 27 Jul 2026 04:00:25 +0000
Manifest this update: Mon 27 Jul 2026 04:00:25 +0000
Manifest next update: Tue 28 Jul 2026 04:00:25 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: c2VfR2L/V5n3aaXKqU2VbSUPiJKaeALN30qLkPUMLgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:28:58:7d:3f:ff:66:53:1d:56:61:03:bf:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jul 27 04:00:25 2026 GMT
Not After : Jul 28 04:00:25 2026 GMT
Subject: CN=4b714dd05406c5fd8ef5251cc29aeec3b1de661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:35:43:b4:92:4c:a0:99:44:65:85:0a:94:
dc:e5:c8:02:94:24:56:f2:2c:a1:5c:85:80:d3:e9:
75:60:4b:1e:7a:db:08:0f:ae:c8:21:01:d1:1e:68:
e1:a2:aa:1a:99:53:8f:0f:0c:9d:b1:02:6f:7c:c5:
45:7a:7d:61:0d:95:6a:b7:3c:9a:4f:6a:c8:2b:c6:
3f:61:12:86:fc:e8:a2:93:33:8c:d7:4e:ab:cf:ab:
9f:c1:99:d2:78:2d:ac:ef:58:7e:f5:21:50:da:4e:
2e:8f:c4:58:f9:19:d1:2b:fa:02:5d:f8:c3:f3:85:
a3:a1:06:64:36:3d:50:52:54:38:8f:28:11:ca:ed:
6f:11:01:11:45:1d:23:9c:10:95:85:a3:a2:4e:00:
67:e7:90:6f:2c:10:7b:2c:04:74:b2:c7:44:17:92:
57:22:06:cc:0d:33:d5:cd:1d:a7:88:b9:e0:03:cc:
cd:6d:62:02:47:ba:64:68:c5:26:62:67:10:eb:2c:
52:65:10:f8:29:8e:0b:de:fc:90:91:91:b1:7f:24:
81:b1:d3:69:fc:73:72:b6:14:31:85:ed:3a:a3:4d:
a6:7c:4d:17:8d:f4:69:43:4c:29:be:8b:97:d5:6e:
8c:dd:75:a1:b2:ee:ff:43:95:b3:2a:e1:61:e3:3d:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:4D:D0:54:06:C5:FD:8E:F5:25:1C:C2:9A:EE:C3:B1:DE:66:1F
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6d:09:ec:2a:a7:a9:c9:26:fa:3f:50:43:71:9d:b2:d3:a4:
7b:dc:3d:d8:80:2a:78:d6:ed:fd:2e:01:2a:83:7a:e1:d4:42:
c0:8e:0e:73:a4:cd:bf:74:b3:ec:03:b5:59:52:90:0d:3d:78:
02:40:ba:42:79:24:54:6b:59:11:06:65:d6:fe:aa:b6:84:9a:
ee:3f:8d:47:ee:1f:53:cb:0a:1d:3a:ae:6d:16:f0:5b:71:eb:
9f:cf:56:a9:f3:3f:a8:2b:d3:fb:71:a2:2b:fa:ef:1c:72:a3:
28:fc:15:d9:27:b9:3e:98:37:77:92:21:9c:99:9f:38:77:b2:
62:f9:bd:42:b0:65:1d:fa:7c:8b:2d:5c:d8:73:b0:68:42:47:
27:b8:32:dc:cc:2d:c1:a2:be:61:d3:fe:09:2d:a5:49:cd:2a:
38:f7:0e:10:20:1f:d1:3e:70:09:14:23:d2:f7:1f:2f:0b:1f:
bd:1c:b8:29:2a:37:f7:51:df:f3:0c:d0:cd:b6:1b:04:da:38:
31:12:93:d7:85:c1:29:aa:a5:77:2c:91:2c:89:6d:bd:90:cb:
f4:0f:4b:9f:98:84:f2:3c:c5:28:7c:d0:3c:29:8c:fe:14:6f:
e8:c6:3c:5c:32:71:68:9f:9a:26:c0:0f:52:18:6f:49:e2:1d:
b9:4a:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:46 2026 by rpki-client