Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: rG8JB4D06uKOGcNdK6Ai0DywL7ee/jiI/MdH2l7L1Nk=
Subject key identifier: 20:FD:0E:89:B4:1B:D1:BC:73:FC:DA:61:25:8A:96:1D:AE:20:0A:E9
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019E92B909B4B5810F04A91C5F9B52CB098C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 0663
Signing time: Thu 04 Jun 2026 13:01:00 +0000
Manifest this update: Thu 04 Jun 2026 13:01:00 +0000
Manifest next update: Fri 05 Jun 2026 13:01:00 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: IxrqQGcmfZLiPQO59ymntPj9mhikeY5D/k+4XEL5+/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:b9:09:b4:b5:81:0f:04:a9:1c:5f:9b:52:cb:09:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Jun 4 13:01:00 2026 GMT
Not After : Jun 5 13:01:00 2026 GMT
Subject: CN=20fd0e89b41bd1bc73fcda61258a961dae200ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:83:e9:1c:ec:92:fc:0e:20:d7:e2:31:28:
0f:90:c4:c9:0c:d5:8f:2d:58:72:d4:76:d3:bc:c7:
52:c0:d0:5f:63:bf:63:9f:b5:30:8f:ad:37:b9:02:
82:ee:20:98:5b:dd:47:e2:e6:87:6a:e5:9a:f0:9d:
f7:40:0a:64:4f:9a:c5:8b:1f:38:5e:32:06:cd:5d:
1f:6d:af:71:9f:6f:70:ee:30:3b:53:a2:06:8b:73:
00:bf:43:74:ed:4c:7c:c7:16:30:94:98:f3:c5:a7:
6f:5d:a7:47:a7:e2:fa:4d:5a:a8:ac:e8:b5:e9:b7:
f4:c1:9f:09:7c:7d:01:32:b4:a7:25:1b:d5:63:27:
8f:02:ca:1f:e3:4b:b4:38:7f:d4:21:4b:02:86:7e:
75:87:87:bb:de:1c:de:2c:30:de:8d:9e:c1:8a:21:
bf:36:4e:99:f6:fe:61:67:09:b7:e5:56:51:65:da:
44:a6:e2:55:5a:ab:74:0d:42:55:b4:45:52:c6:6d:
01:60:e6:07:22:d6:86:2c:2e:04:ab:0d:d6:8f:25:
09:66:17:53:e2:40:0c:7d:ca:20:91:82:5a:5a:45:
4c:13:29:11:69:a6:70:9d:68:b2:f4:ae:35:71:d1:
14:cd:96:74:65:90:14:cd:ed:00:ac:4b:82:92:d9:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:0E:89:B4:1B:D1:BC:73:FC:DA:61:25:8A:96:1D:AE:20:0A:E9
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:dc:5f:b7:19:8a:fc:7d:19:db:17:0e:25:dc:80:09:bf:
de:f8:69:9c:bb:e0:e7:1e:d6:08:4f:9c:79:bd:6b:e7:df:49:
50:fa:2d:8a:b8:db:f3:25:53:ef:ee:e4:5b:ed:35:a9:51:d6:
99:16:a3:05:b2:9c:3f:0b:64:37:bc:f9:8c:5f:a7:55:75:30:
7b:b1:16:d5:14:9b:50:d9:07:b2:31:2d:78:6e:69:8c:c3:b9:
fd:18:7b:5e:56:26:0c:73:fe:71:cc:8f:54:54:ee:c0:40:21:
7d:4d:5c:bd:4d:ca:7e:78:fd:5a:ed:da:bd:d4:e3:bd:c0:08:
9d:6e:88:78:2c:26:14:91:d1:f0:fc:5c:e5:e9:6a:21:34:38:
1a:24:0a:7e:18:53:d8:d1:c9:1d:f9:8c:2a:94:b8:f3:16:48:
17:fd:fb:51:39:f9:a8:51:46:29:1d:63:f4:bd:5b:54:46:6c:
26:2c:4e:06:25:83:88:99:98:84:fb:3d:d7:81:f2:63:87:a7:
cf:84:1b:ed:d9:8b:3f:9f:a9:99:e6:1f:49:9a:67:30:91:28:
7c:d2:54:32:be:b3:0a:cd:32:b3:4a:bf:88:bc:18:77:09:bb:
e9:b8:3c:c1:e9:f2:05:6e:3d:db:cd:c3:10:73:ec:a6:0b:15:
3c:a2:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:26 2026 by rpki-client