Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: m9Wa9z0NyXBBi8+fJTdO/6moxjVh+/YaLNx9MWbMgPM=
Subject key identifier: 95:85:99:D1:49:BD:02:D2:CA:06:31:33:80:F9:58:B1:46:D1:D4:64
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019FA372ED81DB238C262EAB2A48E24664A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0ECC
Signing time: Mon 27 Jul 2026 12:00:45 +0000
Manifest this update: Mon 27 Jul 2026 12:00:45 +0000
Manifest next update: Tue 28 Jul 2026 12:00:45 +0000
Files and hashes: 1: ROiLNRCdCfapmISBEXTrcvll9pY.roa (hash: N5VEUMxgqC79yW3KyixiCLmTn73YopaqScdC2P51yq4=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: szyPNHODVS9uLgTKWVwQiL+uheDtyAGABK+5CAsPlY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:ed:81:db:23:8c:26:2e:ab:2a:48:e2:46:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jul 27 12:00:45 2026 GMT
Not After : Jul 28 12:00:45 2026 GMT
Subject: CN=958599d149bd02d2ca06313380f958b146d1d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:d4:6d:9c:71:65:2f:83:7d:32:7f:fd:ca:
5a:d5:5c:83:c2:c6:4b:31:d4:63:e4:bd:5a:c4:5a:
fc:a8:0e:2d:b4:d2:bd:cb:48:36:5f:09:81:55:ff:
6d:26:b5:73:38:b3:6f:f5:31:19:e9:ee:12:02:0b:
48:e5:2c:36:85:29:4f:73:87:c9:6f:a7:13:fa:de:
cb:b6:9f:f3:d8:7e:39:cf:b8:08:f6:1c:6b:2f:47:
f4:d3:0c:69:51:62:d1:d7:8d:8d:3b:9c:1b:9f:ab:
4d:31:cf:67:f7:1a:dd:04:90:fe:32:5c:ae:21:50:
0f:4d:75:d4:83:87:09:98:a5:45:d0:fc:64:6d:a2:
cf:c7:47:43:7d:97:f9:29:f9:9b:fd:e6:27:cf:16:
ab:e1:59:2b:85:16:c1:ec:8d:a0:5a:97:0d:dc:73:
29:db:1e:c2:74:3d:d0:11:ee:17:ff:96:61:f1:61:
3c:9f:f8:b3:cb:7a:6d:c6:72:33:da:4c:62:98:62:
82:01:70:a7:91:b0:03:10:a8:f3:b2:a8:ec:8f:89:
8d:55:6c:71:b5:fd:be:62:1f:49:7f:8e:f8:e9:b0:
d0:67:a5:17:f7:6d:a5:35:1c:d8:ef:49:81:30:a6:
1b:98:3e:8b:3a:5b:55:3d:e4:b3:44:b8:2f:3d:a5:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:99:D1:49:BD:02:D2:CA:06:31:33:80:F9:58:B1:46:D1:D4:64
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:45:26:89:f4:47:4c:90:6f:ea:9d:44:b2:58:6f:80:7e:2a:
f3:7d:bb:c1:aa:91:7a:89:d9:8e:60:dc:50:74:6f:50:2b:61:
a6:b5:bc:8e:b5:62:98:19:0d:ac:65:fc:0d:f4:fa:f3:f3:61:
e3:71:c5:4f:e1:3f:36:54:a9:c8:10:e7:16:14:a8:5f:74:ea:
13:90:1a:32:f4:76:13:cc:ba:3b:c2:a9:ef:ec:f2:45:25:5b:
e3:a7:02:5d:bc:2a:cf:98:9c:6d:21:c3:d2:75:bf:a0:ba:d9:
99:94:93:f1:bf:64:5b:49:66:ff:aa:0f:6d:02:3d:93:9a:b9:
a9:4d:50:5a:6b:4b:88:3f:5a:21:31:b2:c1:a0:e5:04:17:32:
a6:6c:0c:a5:75:47:84:42:74:78:f6:25:02:1b:c9:8a:8d:b0:
04:be:c6:be:09:0f:1a:19:cd:3c:2a:1e:09:97:60:53:ff:f5:
08:52:f9:5f:38:ca:41:33:d6:0c:d5:1b:0e:cf:67:cb:6b:84:
ce:cf:ba:03:6c:72:e4:e6:7c:1a:7d:d5:49:98:e5:6a:f2:0d:
98:cb:36:4c:c2:e9:fa:5f:47:84:b3:bc:e5:b3:25:ff:0f:58:
05:bb:4c:20:3a:e5:ba:91:9c:12:c8:c6:dd:31:cf:a1:ff:ce:
f8:f1:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:55:31 2026 by rpki-client