Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: QKvwtrJGV6VVUUVSCDER2hIrpbsLJkI6UhPkXyzsZZg=
Subject key identifier: C9:DB:AB:ED:02:F8:72:7C:C7:7F:69:95:94:69:9C:F6:E4:A2:05:1E
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019FA33BD7B369C75F61552F1D7A8DE63CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 08C7
Signing time: Mon 27 Jul 2026 11:00:35 +0000
Manifest this update: Mon 27 Jul 2026 11:00:35 +0000
Manifest next update: Tue 28 Jul 2026 11:00:35 +0000
Files and hashes: 1: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (hash: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: LUglIbPvz+l/Zsmdogvt1HFrcnzN8hNmpJGKNLo57I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:d7:b3:69:c7:5f:61:55:2f:1d:7a:8d:e6:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jul 27 11:00:35 2026 GMT
Not After : Jul 28 11:00:35 2026 GMT
Subject: CN=c9dbabed02f8727cc77f699594699cf6e4a2051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:bd:7e:1e:67:58:9d:48:ba:7b:34:cc:65:
5c:94:42:2c:52:c0:0c:31:3c:76:36:0a:60:cd:e4:
c0:24:60:12:0c:03:a7:35:81:c5:f8:fe:1b:4a:6e:
7c:d0:5a:4a:5c:73:a2:15:a9:93:dd:4b:2d:ab:a9:
4d:0b:e2:30:62:9a:85:e0:8b:13:e0:cb:b7:08:70:
df:e4:59:ad:58:d9:77:d4:09:62:56:f1:ab:90:e3:
00:ac:c6:85:e2:9c:79:27:7f:19:4d:43:87:3d:d0:
73:e6:6f:69:4e:7b:fe:e9:a3:52:88:34:bc:7f:91:
9f:a9:0c:05:89:57:98:ef:ff:2e:48:c5:0a:cd:45:
3e:a7:fd:51:de:d2:86:ae:69:d7:a1:f7:50:1a:5f:
e5:7a:9d:9a:7e:16:ba:4e:de:fb:79:6d:4a:c5:24:
4b:5c:72:72:af:58:05:6a:47:89:24:51:9e:88:f6:
e1:64:65:32:a9:b6:c6:06:80:fe:8c:33:58:b4:ce:
ef:7a:e2:de:97:30:22:17:35:23:3a:6f:0f:70:27:
14:68:f2:52:0f:3e:0a:16:92:f2:63:3c:8c:61:d3:
54:44:73:88:57:73:8b:b3:a8:c2:78:7d:b1:bb:23:
a6:bf:d2:bb:d4:52:85:e3:19:1a:49:67:55:8b:21:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:AB:ED:02:F8:72:7C:C7:7F:69:95:94:69:9C:F6:E4:A2:05:1E
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:97:20:6f:9b:df:16:21:26:1c:c5:69:b1:e7:0e:79:f5:
a9:d5:a1:26:98:a9:9a:71:48:a7:aa:42:e3:49:16:cc:29:11:
aa:d1:10:78:14:ae:81:cc:6a:a0:6d:8a:25:32:fa:56:a6:fc:
12:38:52:7e:ee:2f:28:90:08:68:8b:b8:95:53:66:53:6c:31:
f0:79:dc:97:22:63:39:67:6f:af:7a:c6:59:1d:66:ca:c0:c8:
da:5c:c0:23:92:d3:b8:2f:d9:c2:32:c7:54:fd:e3:a4:11:f3:
7c:30:88:6f:06:f4:c3:60:8c:20:f5:1c:48:43:c5:fd:d0:0b:
27:27:f2:8d:c1:c6:47:10:5a:9b:fe:b5:68:38:5b:ec:37:b4:
f2:c8:95:cc:da:ad:3f:ae:97:a9:f2:b9:26:00:1d:45:5e:1d:
d0:10:b1:01:c2:f2:60:c9:bb:a6:90:cd:ac:47:39:8d:2f:28:
05:2e:2f:c3:11:b6:ac:8f:f3:e3:6d:e9:e0:53:a2:a4:a8:5e:
59:83:62:5d:9f:fa:ca:c3:38:74:9f:e6:45:a6:22:b7:80:dd:
75:e7:41:f1:78:c8:1e:0f:ff:6b:87:23:d9:25:0a:60:d5:8c:
aa:f3:63:c1:40:0b:6d:19:75:02:86:25:f9:70:00:4d:08:9a:
6e:e4:1e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jO9ezacdfYVUvHXqN5jzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjYwNzI3MTEwMDM1WhcNMjYwNzI4MTEwMDM1WjAzMTEwLwYDVQQD
EyhjOWRiYWJlZDAyZjg3MjdjYzc3ZjY5OTU5NDY5OWNmNmU0YTIwNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4O9fh5nWJ1Iuns0zGVclEIsUsAM
MTx2NgpgzeTAJGASDAOnNYHF+P4bSm580FpKXHOiFamT3Ustq6lNC+IwYpqF4IsT
4Mu3CHDf5FmtWNl31AliVvGrkOMArMaF4px5J38ZTUOHPdBz5m9pTnv+6aNSiDS8
f5GfqQwFiVeY7/8uSMUKzUU+p/1R3tKGrmnXofdQGl/lep2afha6Tt77eW1KxSRL
XHJyr1gFakeJJFGeiPbhZGUyqbbGBoD+jDNYtM7veuLelzAiFzUjOm8PcCcUaPJS
Dz4KFpLyYzyMYdNURHOIV3OLs6jCeH2xuyOmv9K71FKF4xkaSWdViyE0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnbq+0C+HJ8x39plZRpnPbkogUeMB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5OXIG+b
3xYhJhzFabHnDnn1qdWhJpipmnFIp6pC40kWzCkRqtEQeBSugcxqoG2KJTL6Vqb8
EjhSfu4vKJAIaIu4lVNmU2wx8HnclyJjOWdvr3rGWR1mysDI2lzAI5LTuC/ZwjLH
VP3jpBHzfDCIbwb0w2CMIPUcSEPF/dALJyfyjcHGRxBam/61aDhb7De08siVzNqt
P66XqfK5JgAdRV4d0BCxAcLyYMm7ppDNrEc5jS8oBS4vwxG2rI/z423p4FOipKhe
WYNiXZ/6ysM4dJ/mRaYit4DddedB8XjIHg//a4cj2SUKYNWMqvNjwUALbRl1AoYl
+XAATQiabuQesw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:05 2026 by rpki-client