Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: TxRHr0B5Ig7pxKDvnNxWLhuqGjlLyuPbBgzmps40xNM=
Subject key identifier: 53:E0:48:71:3D:FE:69:30:E3:D7:88:EC:85:47:EF:8F:30:2D:AE:04
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019FA3E089AEE07B19EC1221462A32F93454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 19A4
Signing time: Mon 27 Jul 2026 14:00:29 +0000
Manifest this update: Mon 27 Jul 2026 14:00:29 +0000
Manifest next update: Tue 28 Jul 2026 14:00:29 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: +s40akxnerOfGQjWPK83/4vaPd+hpLSwmRL9B5pKldk=)
2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:89:ae:e0:7b:19:ec:12:21:46:2a:32:f9:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jul 27 14:00:29 2026 GMT
Not After : Jul 28 14:00:29 2026 GMT
Subject: CN=53e048713dfe6930e3d788ec8547ef8f302dae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:36:33:78:d9:c9:73:40:14:73:c4:4a:01:
9d:78:3e:b9:ae:73:2a:d0:48:76:4a:89:f0:52:98:
b3:43:0c:02:72:38:9b:3d:3b:0d:11:5b:12:f5:30:
6e:27:e7:38:ae:18:d3:89:58:77:c8:15:e4:b0:98:
b3:b6:c8:57:42:ca:1c:85:33:e9:b6:f9:3b:6d:da:
84:1e:05:0f:e0:8c:de:30:11:ff:6e:4f:99:36:1d:
3a:d6:51:af:ef:f0:f9:f4:2a:b3:85:f3:10:6d:3f:
a4:7b:2a:e2:35:5d:d7:8e:e6:07:85:15:f9:af:f7:
f2:b1:8f:67:22:a3:e1:a0:2c:f3:65:9d:7a:0c:1c:
bf:f9:17:79:72:e9:6e:54:5a:41:bc:6c:e1:d3:46:
5c:cb:36:15:4b:06:8d:16:ed:73:8c:c8:2d:69:31:
23:eb:00:ab:9b:46:d4:fe:89:aa:19:cb:f5:95:c2:
36:3b:db:bd:04:ef:0d:7d:5d:d7:ab:1d:e8:87:88:
ee:78:c0:ad:94:e0:54:b0:f0:4d:68:e9:bc:f2:65:
4f:b5:06:e5:5a:a0:3e:df:b5:12:53:9b:30:c7:c2:
e4:76:11:e3:57:32:c7:bf:94:b6:a1:56:65:19:33:
a7:62:23:2c:bb:d3:51:99:ed:b5:28:7e:d1:94:d7:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:48:71:3D:FE:69:30:E3:D7:88:EC:85:47:EF:8F:30:2D:AE:04
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:64:8d:5f:ea:e7:28:9f:10:04:b1:2a:5a:45:16:f8:c0:d2:
40:eb:5e:3d:68:ac:ea:b4:b3:6b:b3:e1:aa:b9:2e:ca:7a:5c:
a2:b2:1b:e6:b8:db:ec:6f:6e:f3:5f:27:e0:29:f4:76:21:df:
9a:a2:76:c4:e2:c8:0c:eb:4d:15:02:2d:ca:15:c8:03:4e:d3:
67:ac:86:5f:73:a0:69:5f:bd:9d:1d:25:b3:58:a8:d9:65:8c:
bd:2d:50:f3:81:73:54:cb:53:64:b8:88:a6:ae:3d:d9:ce:17:
3b:f0:77:b2:fc:c2:8e:22:75:15:dc:ab:29:07:18:d9:13:f1:
84:1a:82:2d:db:d2:05:ce:5b:cf:55:14:43:82:56:16:24:71:
17:2e:9d:a5:49:cd:84:bc:58:92:28:b7:94:12:23:aa:5f:e1:
1a:29:f0:f7:96:e5:a7:59:f8:1e:19:b4:91:be:67:05:49:cd:
b4:61:32:5e:b8:fc:e7:84:55:11:c3:ab:c5:db:5a:71:6e:ce:
76:4b:2d:95:04:d1:1b:aa:50:ac:cc:79:40:94:77:8f:ba:d7:
34:06:4d:0d:47:bd:43:c2:e2:08:37:f9:2c:25:bf:4f:9a:97:
47:cb:b4:a2:73:d8:30:f2:89:ba:35:bd:ec:f4:d2:04:9c:33:
25:dc:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:47:12 2026 by rpki-client