Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: T94IwilsL6u/8b3/MVzw4NJ5rv1dusmd/fpTiGXr1mk=
Subject key identifier: B3:11:6E:3D:02:9B:E3:F4:37:CE:C0:0C:CC:FF:7E:DE:1B:A1:6F:46
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019F98813CFFE955617CAEFB248F83A91BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1585
Signing time: Sat 25 Jul 2026 09:00:34 +0000
Manifest this update: Sat 25 Jul 2026 09:00:34 +0000
Manifest next update: Sun 26 Jul 2026 09:00:34 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: 7diE8qb+fOJ+KwfBQA/xaDpzcG9kaYBxzH3lP67G69s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:81:3c:ff:e9:55:61:7c:ae:fb:24:8f:83:a9:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jul 25 09:00:34 2026 GMT
Not After : Jul 26 09:00:34 2026 GMT
Subject: CN=b3116e3d029be3f437cec00cccff7ede1ba16f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:00:6c:63:29:21:f2:32:cb:86:c1:17:fe:
16:03:ce:da:1f:d1:fa:b5:cc:1d:0b:30:20:e0:0e:
c9:44:fd:68:2e:8e:ab:7a:f5:7a:d6:96:d2:42:7b:
ca:06:2e:f8:cd:42:18:4f:cc:01:03:7a:79:72:5b:
18:50:16:25:64:10:cc:33:d7:a3:37:fa:72:4f:9b:
8e:a2:e4:9f:82:d7:39:e6:be:41:4f:98:1d:dd:42:
64:1b:52:e4:ad:9a:7d:1b:c2:23:88:4a:6a:ed:89:
4a:ee:28:9d:aa:f0:36:38:e1:da:ce:05:f0:2b:a5:
cc:32:d3:8b:2d:9f:08:67:cc:e5:04:c2:92:bb:bd:
a3:a2:74:10:72:c5:9e:95:53:7d:86:18:6c:df:9d:
f5:40:93:d2:dd:04:bb:2e:dc:02:c4:64:fe:60:8f:
22:33:9e:3e:75:d3:58:61:d5:67:86:b1:91:4e:a2:
9e:7c:89:29:78:2c:a7:ba:60:d9:4a:86:c3:7c:bf:
c0:07:da:cb:da:ac:1f:96:03:d8:95:56:22:e5:dc:
ca:72:71:27:23:7f:f2:8e:2a:9b:98:d2:10:0c:c0:
59:3d:13:7b:02:aa:7c:17:39:e3:8f:63:7f:92:3b:
12:ea:b9:75:60:34:52:6c:e4:e1:03:d2:46:bd:d8:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:6E:3D:02:9B:E3:F4:37:CE:C0:0C:CC:FF:7E:DE:1B:A1:6F:46
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:5e:e9:42:eb:ef:13:4b:98:58:72:de:cf:06:16:7f:1e:c6:
00:cf:31:d9:2b:31:7d:74:c9:46:e5:6e:18:fa:16:cf:5f:8c:
af:3c:17:aa:08:2a:16:eb:5f:88:9c:da:5b:48:24:5c:6c:b9:
3d:81:57:13:a6:17:f5:78:fd:d7:bf:a6:b7:10:49:d4:83:cb:
54:2d:68:4c:77:f2:53:32:77:cf:0b:74:45:8a:82:46:24:4e:
fa:23:ae:fa:88:a2:20:56:f2:24:ab:68:77:fc:81:a5:25:93:
6d:fd:c3:07:b9:5c:d2:93:e5:d7:a7:37:20:4e:73:fe:e1:d5:
01:e7:4d:5b:c7:36:02:3c:3c:29:a5:d3:79:c9:26:c7:ea:6e:
c6:14:49:95:38:9b:04:fc:62:be:07:c0:bf:3e:c6:de:2e:b8:
1e:c0:ad:0e:85:ba:43:62:6e:7a:90:44:ca:dd:f3:52:84:97:
3f:4a:51:d2:ba:e8:7c:12:8f:a3:e1:f4:86:be:f1:88:16:33:
5a:f6:ad:56:f5:17:e9:c0:f0:f8:d8:98:2b:c5:59:13:85:6b:
1d:b0:71:b1:44:1e:b8:76:00:bb:10:7a:1a:e6:36:f2:8b:01:
92:71:f3:77:3d:88:89:67:27:21:57:3c:9e:4e:5c:ec:46:3d:
41:60:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:25:52 2026 by rpki-client