Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
File: lrrMW97hlpQXoUa8RYZbRascN3c.mft (raw, json)
Hash identifier: QXSoua6dNAX651a7Ae+kV7M1QkM26cRNGdFMFBMiVVM=
Subject key identifier: F5:E4:31:E4:12:42:76:E0:1F:BC:B7:40:46:60:39:3B:2F:DC:BC:BD
Authority key identifier: 96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
Certificate issuer: /CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Certificate serial: 019FF9B6E9AD9C02C8717F0D393031DC50FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
Manifest number: 14
Signing time: Thu 13 Aug 2026 06:02:21 +0000
Manifest this update: Thu 13 Aug 2026 06:02:21 +0000
Manifest next update: Fri 14 Aug 2026 06:02:21 +0000
Files and hashes: 1: Pgpyk-hrzki9Ic59DdPNuzjskEw.asa (hash: Fu0SEp/DMSPXcJMhtPEEsmMFFRDBhn8d7ifvtyYjfQA=)
2: lrrMW97hlpQXoUa8RYZbRascN3c.crl (hash: 63o+vsA4ss58uO5bx/bgNswbKBtPsUmw0hIQty0eu+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:e9:ad:9c:02:c8:71:7f:0d:39:30:31:dc:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Validity
Not Before: Aug 13 06:02:21 2026 GMT
Not After : Aug 14 06:02:21 2026 GMT
Subject: CN=f5e431e4124276e01fbcb7404660393b2fdcbcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:8a:5a:04:11:2f:10:33:24:cb:5d:87:14:
f5:ac:a3:48:ac:ec:1f:30:ac:f2:0c:fd:4e:3c:be:
f7:cd:12:9b:66:a4:09:bf:d1:b8:bd:c1:c4:e2:8a:
b8:8e:6e:a5:29:9a:a2:21:50:86:21:1c:e8:73:03:
fd:5a:17:c3:6b:63:7f:58:ad:6d:fc:5b:04:19:d4:
17:7c:93:21:e9:73:23:60:57:a4:b4:c1:79:32:52:
40:76:46:83:f1:00:b1:c3:f9:36:41:4a:3f:ae:f8:
29:df:0b:5f:fa:a0:e2:ef:3b:9e:73:69:44:24:9c:
c3:c4:bc:77:5c:1b:13:9c:42:65:b8:d3:4e:7f:ba:
7c:f7:bb:20:d1:f4:eb:fd:51:2c:5a:93:33:c2:11:
a6:61:69:80:84:12:10:1f:92:5e:51:53:91:fa:12:
bf:63:f1:03:84:d2:03:b6:59:1c:d5:2b:69:b0:67:
95:5b:b7:46:f0:ab:1b:e0:ab:ba:2e:ab:2c:cf:27:
eb:ce:d9:4e:55:a8:ba:7e:ee:dd:02:1a:e6:68:99:
c4:3d:84:41:40:01:81:b1:47:d6:df:1c:69:a1:d6:
e6:c2:96:a0:2f:4f:f9:cd:d6:2d:30:60:1c:75:45:
bb:3c:3e:81:20:12:b9:f6:f5:ca:18:54:63:66:0c:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:31:E4:12:42:76:E0:1F:BC:B7:40:46:60:39:3B:2F:DC:BC:BD
X509v3 Authority Key Identifier:
keyid:96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:d1:6f:35:5c:7f:e8:43:38:fc:60:4b:7e:33:9c:9d:ec:
c8:fc:44:07:47:10:b1:7e:44:da:c7:7f:bb:e7:1b:43:06:cf:
42:d4:bd:89:40:f8:b5:ef:44:d5:3d:e9:c1:ef:72:ee:3c:83:
b9:1f:61:cb:d9:bf:8b:ee:50:94:3f:f6:f2:86:7f:bf:c2:57:
9c:63:85:97:fd:69:63:48:0e:9c:43:96:24:87:ae:18:ae:ea:
72:22:3a:4a:ef:ca:9a:47:36:4f:c0:4b:f8:8d:ac:2b:84:64:
ce:59:11:54:73:06:11:66:82:c6:7e:43:7d:da:45:c6:af:e1:
f4:73:6d:89:b8:93:bf:b2:63:e8:92:a3:82:59:c2:6e:c9:f6:
67:c7:4a:2a:77:8c:9e:fb:09:78:c4:13:5c:57:03:ff:59:6b:
d7:4d:eb:fc:ef:38:40:5f:31:13:04:c7:ac:77:37:4f:12:fa:
cd:39:55:e9:81:6a:fa:58:ef:c2:12:7f:21:e3:a7:d7:c1:14:
07:a4:62:c9:c6:b7:37:1b:47:61:2f:64:21:c1:1c:4e:89:46:
95:32:8d:a7:5a:a4:d8:1f:d2:14:a3:41:c8:55:49:9c:a8:67:
03:c4:18:e7:5a:fe:ce:0e:b1:bb:e7:92:f0:74:6c:5f:73:c7:
80:f5:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:45 2026 by rpki-client