Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: Wnv9md1MqsULy2UFnMYzX/aTbRe8MZe2jyEDji6p+JM=
Subject key identifier: 9E:5C:81:61:74:3B:71:F9:C8:D6:54:69:7F:50:53:FE:2B:C4:CE:33
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019EBE113828A017D377CACCCC343620C66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 23:00:59 +0000
Manifest this update: Fri 12 Jun 2026 23:00:59 +0000
Manifest next update: Sat 13 Jun 2026 23:00:59 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: THy2Cz9ZtrzeacwspidFrvhvgcIv4t3mqxUIy3iBLfo=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:38:28:a0:17:d3:77:ca:cc:cc:34:36:20:c6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jun 12 23:00:59 2026 GMT
Not After : Jun 13 23:00:59 2026 GMT
Subject: CN=9e5c8161743b71f9c8d654697f5053fe2bc4ce33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:b6:4d:67:22:c5:8b:4c:a7:ec:a0:95:ec:
4c:c6:13:0e:5e:20:be:79:29:eb:45:50:01:96:68:
0d:dd:11:f6:51:0e:b1:c4:c8:63:a0:af:35:04:65:
1a:dc:b2:d8:11:a6:8a:f7:2e:ba:85:80:85:94:a8:
8a:05:b8:f7:b4:50:bd:4c:6f:a4:7c:24:c0:0d:f6:
59:8c:34:10:db:4a:85:75:b3:39:4a:95:20:f5:70:
a9:38:e6:0c:eb:c3:69:32:c5:fa:0f:f8:1c:30:dc:
f6:90:e0:39:b4:d3:d1:7c:fe:91:66:90:45:bf:0e:
f0:dc:bb:d9:3e:a2:1b:d4:0a:92:91:cb:31:d7:88:
72:5a:25:2f:5e:2d:60:57:74:ef:c3:36:c3:0f:9d:
89:77:c0:f2:1d:f4:fd:2c:25:e7:aa:8a:2e:93:38:
b8:00:a4:1f:1c:cc:d1:47:0f:7f:9b:de:91:c1:56:
72:e3:5b:74:dc:5c:b9:c4:e6:df:1d:83:a1:80:6c:
91:29:7a:02:3a:7c:4e:04:5f:c4:17:11:1a:20:a2:
70:b3:f1:bd:5a:da:c1:e7:d6:1f:13:30:e8:06:fc:
94:d4:97:58:cb:3e:59:1a:4e:fb:10:47:30:94:5f:
62:bd:1c:bc:78:58:76:de:73:59:3d:87:79:48:bc:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:81:61:74:3B:71:F9:C8:D6:54:69:7F:50:53:FE:2B:C4:CE:33
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:02:d4:c9:9a:60:0c:c8:fd:86:ca:38:de:16:30:8a:c2:3e:
52:90:6f:58:d9:c0:b0:43:ff:0d:d8:95:79:9a:05:73:a4:df:
a2:1a:a8:92:22:42:92:01:3d:fd:cc:46:ab:78:8a:1b:b6:87:
a3:4f:c2:d0:13:29:e2:e3:2b:4c:b1:05:f4:c2:40:0e:9a:c2:
31:78:13:ed:f1:d3:58:e9:45:e3:a7:9a:52:44:f2:e0:87:a5:
a5:0f:39:aa:19:c9:8b:fc:43:9c:11:b4:52:6a:72:54:3f:7b:
c8:4d:d2:27:49:86:b5:9e:d5:e9:58:e2:f2:2e:72:a1:28:9d:
68:d3:30:76:c8:b7:07:93:95:3c:cf:64:52:66:67:8c:73:50:
28:f4:36:18:a8:13:f8:f9:1a:64:55:2c:9c:8c:5d:dc:af:e3:
ae:59:2b:6f:5d:70:19:09:39:6e:1d:c4:4a:14:37:2d:28:6d:
e7:ed:d4:68:a4:f0:f2:d1:88:be:bf:7a:0a:1e:97:f5:05:88:
c9:39:56:53:d6:cb:4f:b3:b9:dc:1f:cd:47:4c:7a:e7:5a:b4:
5b:d1:67:47:51:4f:e6:93:d9:ca:87:b3:3c:33:ab:67:57:ac:
15:ad:f3:87:f1:35:86:90:24:d5:d3:d7:f4:4e:14:b0:f1:23:
04:97:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:16 2026 by rpki-client