Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: sUB+YSfQns0PNAIXfda7sPQwkyA1w31lOtUl23kYj94=
Subject key identifier: 09:9F:E4:0A:E7:B2:94:46:57:13:D5:2E:27:20:55:DA:A6:75:28:1D
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019F860D64AA43585B13BA9571D0C6E2D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 05C8
Signing time: Tue 21 Jul 2026 19:00:52 +0000
Manifest this update: Tue 21 Jul 2026 19:00:52 +0000
Manifest next update: Wed 22 Jul 2026 19:00:52 +0000
Files and hashes: 1: IM21zWEfSOh921Z1zwkT3vvGFfs.roa (hash: W640/PCpAKPhrBYklv0d8kY3i3xSr0Wn6L53wsJDrnQ=)
2: b9vcmhhWmTdDD16HAHP6D8RbDkA.roa (hash: FBfH9P35YtWY9xE6pYzf6Mz1MG4bSL4q1phGJQRtJTw=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: KQ9Z82DzOmDh5TUxwRH+IxLhngBUM+wuq4AeoPLw6U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:64:aa:43:58:5b:13:ba:95:71:d0:c6:e2:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jul 21 19:00:52 2026 GMT
Not After : Jul 22 19:00:52 2026 GMT
Subject: CN=099fe40ae7b294465713d52e272055daa675281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:63:ed:6f:2b:6e:6b:06:51:97:72:7f:48:
f8:c2:ff:1a:db:a4:1b:0c:d2:b5:bb:9f:6d:15:26:
fa:77:d7:a4:f9:72:4e:7f:55:fd:55:a1:e7:03:52:
e9:e8:47:3b:4a:db:c0:54:f5:03:7d:92:ec:54:3f:
93:45:03:02:e0:a1:68:ca:ce:eb:47:63:17:d9:b0:
a0:fc:71:32:9a:bd:0d:5c:a6:70:3d:31:86:6a:f2:
8c:88:58:5e:ca:db:72:85:d9:d9:90:b5:c5:e4:f2:
48:0a:8c:a4:fe:9b:6c:7f:d2:3a:de:97:02:a8:cb:
21:14:30:69:79:9b:61:cb:c3:71:56:a6:e3:03:ab:
19:c4:d3:7b:8d:81:3a:9c:66:5d:02:2b:c1:83:1a:
b2:67:db:c5:db:f7:8d:7c:00:c0:5c:b3:82:36:97:
23:69:bc:be:f5:6a:1d:4e:8f:10:df:7b:ce:a2:73:
6b:b1:40:99:3e:ef:71:ed:ff:b1:30:45:f2:8b:da:
a2:bb:c8:4c:a1:57:ed:f5:b9:99:e7:a2:00:76:ca:
23:e0:66:2e:51:c0:9b:ce:67:fc:ca:c3:73:2d:59:
45:d9:a0:a8:f8:47:a8:fa:d2:33:b1:75:f5:69:c6:
0f:e4:22:81:39:01:23:97:67:f3:f6:f3:a7:95:5d:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:E4:0A:E7:B2:94:46:57:13:D5:2E:27:20:55:DA:A6:75:28:1D
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:db:c9:fa:66:63:6e:89:c7:51:d6:c1:33:d6:f5:79:5d:9a:
6f:89:9e:fc:a0:b6:af:f8:17:cc:db:74:03:7e:3b:8c:ce:09:
cc:3b:37:12:89:83:da:70:8d:c6:61:ee:50:16:a9:45:6e:4c:
da:2e:96:e4:e4:60:4a:d4:d2:32:38:46:e5:80:a6:92:45:f9:
64:14:40:a3:18:7d:ff:85:1e:71:36:b4:e6:e8:b3:95:b8:6e:
87:74:3b:f3:6c:d1:69:1e:89:54:04:51:ae:20:7e:5c:0a:6d:
4d:c3:59:ed:5d:77:1a:14:58:9d:41:97:62:a0:bf:17:81:9c:
39:04:b1:44:2a:ec:b9:bb:8e:a5:76:ef:a8:b7:9d:d3:6d:8b:
1d:57:99:f6:13:80:ea:e4:6a:70:bd:8d:b2:2f:2d:31:a8:ae:
fc:44:79:61:ab:7a:db:0e:b0:29:61:fe:a5:ec:b4:c5:b8:4b:
b3:23:17:e2:51:9c:6c:22:c5:19:de:ba:5e:79:b7:f4:e5:c8:
cb:05:ec:80:6b:45:b4:5a:d6:45:2c:32:f8:c0:b5:7a:b9:05:
e4:c9:b5:b8:3f:83:dc:5f:a6:4c:ad:93:65:06:d1:a5:a6:61:
25:0d:22:93:43:1c:8a:91:b9:b5:bc:2a:43:13:c3:ff:38:13:
a3:db:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:20 2026 by rpki-client