Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: Xd3tk/ugzDKETbLxYUosgUlOCv56zJ10R9utpZLojj4=
Subject key identifier: EE:27:D1:68:96:E8:90:A5:72:5E:52:FE:D1:F2:57:A7:3D:1F:66:1C
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 019FA2CDE372AF39FE68E622431474FDF0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 0967
Signing time: Mon 27 Jul 2026 09:00:29 +0000
Manifest this update: Mon 27 Jul 2026 09:00:29 +0000
Manifest next update: Tue 28 Jul 2026 09:00:29 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: 0v0dOpar2KO2EkWLVhQZzH58bFjIgdzeu6qC0egqRDU=)
2: v7ov36hfvtk8wkcEWj0LQvv50EQ.roa (hash: z6k20v/tfXJDwNdPG7+trPkkzDOlvFnCMcAGQoe5GKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:e3:72:af:39:fe:68:e6:22:43:14:74:fd:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Jul 27 09:00:29 2026 GMT
Not After : Jul 28 09:00:29 2026 GMT
Subject: CN=ee27d16896e890a5725e52fed1f257a73d1f661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:4e:ed:c2:db:ff:b2:51:ea:fa:16:d6:94:
7f:ed:bf:f3:4c:f6:d7:f0:a9:0b:43:3d:37:5b:fc:
80:fd:93:b2:84:c4:d2:2e:77:c8:3b:c6:76:6c:9f:
9a:be:86:b7:28:12:70:52:b9:78:9e:15:fb:2d:71:
32:02:f2:8c:45:4c:05:3c:d5:05:97:8e:4a:e7:36:
a7:cb:2e:37:5f:d6:31:24:aa:a4:59:ec:9c:78:da:
cb:2b:dc:d0:36:d5:d1:d2:9a:3b:44:55:ec:fd:7e:
4c:d0:ae:b2:3b:6c:b9:63:13:8a:cb:2f:d7:ae:18:
e7:3f:bb:d1:5d:82:ec:e6:d4:b1:2c:de:8d:cf:aa:
a1:30:0c:09:a0:72:bb:7c:78:db:b2:de:54:c0:3e:
1a:23:61:38:b0:6c:b9:5e:64:b3:83:0f:d4:c2:5a:
14:1d:5b:ee:4b:f8:21:87:1f:90:60:9f:6b:58:66:
ff:24:fc:88:0c:21:54:0a:81:4b:99:e8:3f:ae:86:
ad:3d:93:a2:ee:81:91:01:14:cf:b3:a6:10:c8:f3:
0f:81:d9:bf:f4:48:9c:70:47:52:f5:98:fd:04:af:
b5:87:ee:0c:47:9a:ea:13:c7:2f:22:50:ca:c9:97:
a2:d3:0a:16:89:66:e0:e7:71:b3:95:02:34:76:a7:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:D1:68:96:E8:90:A5:72:5E:52:FE:D1:F2:57:A7:3D:1F:66:1C
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:43:2b:6f:8d:fe:ae:62:41:9e:99:2e:df:98:04:59:ae:7a:
63:15:d4:f1:2f:1f:56:34:4d:fe:8a:93:74:0d:88:f7:7d:c0:
f5:10:c1:57:2b:70:74:19:24:6c:7f:4a:6a:43:ea:a3:58:e0:
60:b2:0c:0c:e3:1a:01:5a:00:17:da:ff:20:01:b8:88:93:bd:
e7:6e:a4:ac:c6:03:86:19:69:85:39:55:aa:68:9e:0f:5e:56:
ba:42:45:c6:15:52:9b:91:02:fa:cc:18:c9:dd:46:28:fd:58:
8a:f2:ca:cf:44:2e:f1:8f:4f:d9:76:3b:52:1e:2c:0e:b0:3d:
12:65:7b:66:dd:3b:57:15:93:0b:55:b4:05:e5:6f:10:2a:f2:
d2:3e:19:98:6f:3c:f5:ac:25:12:8b:03:62:9d:92:5d:4c:73:
b9:7e:26:27:1a:ee:7e:96:e7:01:15:e6:2e:ad:a4:43:12:e5:
d9:ad:6d:ed:b6:36:d1:9d:af:08:53:94:6d:82:22:86:67:2e:
9b:f4:4d:9f:e9:e8:35:83:db:b6:14:4f:27:cc:d6:d9:d3:54:
74:39:75:a9:c5:02:60:24:b3:33:ed:91:d2:25:3e:1a:8a:b8:
ca:de:6b:63:89:b6:1d:2a:ac:59:17:db:d0:1c:59:d4:c0:10:
eb:67:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:52:59 2026 by rpki-client