Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: 1vmAPT9p78Z1D5BtHBHnOnWe3SADUZDOr82vEPMHre4=
Subject key identifier: 54:0E:60:B9:D0:BA:10:26:D6:17:AB:06:EB:2C:9F:E9:A0:53:D6:DE
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019FA7BD9582CB5AF36657560F9D577A764E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 08:00:47 +0000
Manifest this update: Tue 28 Jul 2026 08:00:47 +0000
Manifest next update: Wed 29 Jul 2026 08:00:47 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: 8V+0qNA47nUasInEuRCOyqDzIwW9gHuZVs95cSygvGw=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:95:82:cb:5a:f3:66:57:56:0f:9d:57:7a:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jul 28 08:00:47 2026 GMT
Not After : Jul 29 08:00:47 2026 GMT
Subject: CN=540e60b9d0ba1026d617ab06eb2c9fe9a053d6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:0e:00:6b:b7:3c:3f:99:b3:29:b4:0c:68:
80:84:8e:45:43:93:16:2f:de:28:5b:9e:31:28:2a:
fe:30:61:0f:8a:7a:76:cf:e6:1a:b0:73:d5:9d:55:
90:f1:59:01:3e:55:c2:33:ad:a2:1b:17:43:dc:50:
d5:63:bd:aa:79:78:71:22:55:77:21:7d:cc:f5:4d:
9c:39:38:3a:de:4e:85:3d:fe:03:e0:8e:88:32:6a:
34:51:7f:ba:8d:45:5f:ca:dc:9f:ef:98:c5:b1:6e:
57:60:21:b5:5b:e5:da:7d:43:7b:7c:d5:b5:1e:9d:
e0:4f:24:ba:94:3d:cc:27:93:41:58:d8:d6:c2:ed:
9d:c0:9a:27:3e:a1:ac:4b:55:a0:07:6b:36:1b:68:
c7:34:80:22:78:6d:8f:bd:da:67:b5:35:c9:0f:4b:
1c:60:03:0f:d5:a7:5a:b5:b3:60:bc:fd:4d:6a:64:
06:3f:f5:3a:88:e7:06:40:4d:19:00:b4:8f:da:65:
81:fb:07:1a:2a:4b:14:d6:55:db:ba:49:23:f9:72:
10:05:a7:18:52:d2:92:b2:2b:04:a6:4f:70:95:8c:
cf:5d:3c:cf:8f:39:20:da:1b:31:08:03:03:f5:93:
65:cb:0c:2e:2a:86:a3:17:9e:99:53:5f:33:df:3e:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0E:60:B9:D0:BA:10:26:D6:17:AB:06:EB:2C:9F:E9:A0:53:D6:DE
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a3:97:a4:69:f8:79:ff:b7:4e:9b:c2:f9:d0:f0:e1:04:ad:
ad:fd:93:14:2c:0b:3e:9a:5a:98:10:6c:4b:1c:51:ea:17:60:
eb:f5:44:18:aa:b6:b9:d0:36:ef:05:0e:13:59:21:0d:fc:a9:
75:fe:bf:ac:0f:f9:95:40:49:bf:66:e3:2a:c8:fb:9e:e7:8d:
95:60:81:d7:60:08:37:2e:45:91:d7:d6:45:9e:f4:2a:8a:f8:
2e:98:28:fd:6d:47:e9:1d:0e:8c:1d:da:a5:d3:4c:36:b8:a9:
dd:7d:72:65:94:4d:8c:d6:44:71:21:83:72:ee:f3:a9:93:2f:
3a:fd:89:07:67:02:8f:93:37:4b:a8:f9:af:ae:ac:ca:ef:95:
8f:7e:37:13:b3:9e:ae:a9:dd:c4:16:78:fe:13:52:6d:bb:5c:
fc:ae:d6:07:48:6d:aa:70:7d:eb:d5:91:20:80:97:94:dd:ca:
fb:f1:bf:58:5d:a1:5b:dc:6a:a6:d0:9b:ea:fa:2e:ab:2e:33:
1f:29:c4:4a:56:de:87:c2:9b:f9:05:85:f3:83:ca:53:b8:9a:
7f:56:63:98:07:10:fd:a9:b2:54:9f:eb:66:5f:ba:e4:24:f9:
2a:b3:3b:0e:99:a1:93:52:1a:53:bf:13:90:9a:89:c5:92:a8:
f5:ac:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:34:04 2026 by rpki-client