Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: 0LYC4V/EPxIxz8CzNKd274swagl4HQ9TzUvPL9bReMc=
Subject key identifier: 51:DD:4D:AF:4D:CA:D4:52:ED:5B:E0:9C:F6:D6:B9:1E:40:DB:9F:B0
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019F9F9606E0E7C5C3E8BCDAAEF76B8DB75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1604
Signing time: Sun 26 Jul 2026 18:00:37 +0000
Manifest this update: Sun 26 Jul 2026 18:00:37 +0000
Manifest next update: Mon 27 Jul 2026 18:00:37 +0000
Files and hashes: 1: 1PybCNr_IFgLVkzLXWGTaCDybTk.roa (hash: Cg8snUmzbGaDrQOzkD+CjoCw4C1tZVVgBqfz05gGV2c=)
2: Fep6qr8rRobHKsNR16UZ8IogVaU.roa (hash: uZWJyhzdZhmIt386GPPzhnoAhK/Him80kP4WtX/gQ6o=)
3: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (hash: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs=)
4: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (hash: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw=)
5: jb81OuVJup1PLJeMNccOVNPoCJ8.roa (hash: deKoWNZnlpwFwiqew1tUzp1N8o/V+tWA//EpRC0uV3s=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: KnK2Ji0bU+I/NBqFrSCuaLMXW8NsWzas7td8KebfwsI=)
7: zjv8SZhQ9gV8oRmS9YUAJhkKaT8.roa (hash: 9mmbxYMsoWHE5kxulUQxb1ol9WOyJhGIh77y7/oMRtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:06:e0:e7:c5:c3:e8:bc:da:ae:f7:6b:8d:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jul 26 18:00:37 2026 GMT
Not After : Jul 27 18:00:37 2026 GMT
Subject: CN=51dd4daf4dcad452ed5be09cf6d6b91e40db9fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:d6:0f:10:4f:8f:3a:b9:de:12:c0:93:d5:
46:15:30:33:34:63:57:dd:cf:e6:c9:e2:98:bd:09:
a2:a1:86:27:4b:b1:64:8b:36:86:87:be:84:e4:0a:
ec:56:64:de:77:6f:0c:42:a0:0a:96:c0:82:f9:42:
f3:d6:51:6f:fb:1d:40:e9:ee:b1:44:2d:c5:72:99:
be:22:a4:fa:ef:10:28:be:42:89:f9:d8:f4:4e:0e:
fa:07:32:b4:fd:d6:a8:8e:53:68:6a:47:f4:1c:79:
56:ca:c6:1d:85:76:f1:50:7a:21:42:89:b1:0b:af:
28:b1:f2:45:5f:bf:1a:99:de:41:67:a3:99:68:e0:
b4:ec:67:d6:e3:f7:5c:88:e0:33:26:ed:6a:bc:df:
74:90:bc:29:18:f6:4d:83:90:74:ca:af:d8:c7:9a:
ce:8d:87:fe:44:b8:e1:ec:5f:70:1b:7c:24:c0:e9:
4f:5f:8b:08:87:7e:39:08:c9:06:3b:a5:00:3d:4e:
f1:af:f1:bd:f9:45:00:8d:db:78:e9:56:ed:bf:e6:
2f:9c:da:19:83:c0:5e:44:0d:88:b3:6f:83:28:99:
87:84:aa:75:06:53:6d:63:72:02:b2:9a:9c:f2:58:
7a:43:3c:cc:79:8c:d0:1c:2d:af:10:af:40:64:b7:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:4D:AF:4D:CA:D4:52:ED:5B:E0:9C:F6:D6:B9:1E:40:DB:9F:B0
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7a:f6:88:d6:74:4e:19:f5:80:11:e7:18:fc:a1:ec:1a:e5:
8a:41:cf:62:4f:b7:dc:ec:37:f0:6a:27:f4:ba:99:41:78:c4:
58:3c:71:c4:99:61:6e:46:30:0d:9b:be:8f:f4:fc:12:c1:0d:
81:29:47:1f:db:c4:3f:af:60:a5:61:63:e0:47:e1:6e:b6:a5:
b1:2d:90:fe:7e:3e:92:6a:70:66:77:fb:ae:bf:a3:91:bd:49:
08:95:71:0c:94:53:8a:9f:06:c8:9a:ea:53:b5:55:ff:99:9b:
ab:f4:74:b7:3a:2e:e1:f1:98:7b:ea:d1:1a:fc:69:ef:29:de:
3b:8e:20:21:97:20:33:36:09:b8:17:b1:02:91:62:2c:64:11:
3c:78:e6:76:80:5d:b3:73:58:a5:f9:da:64:b9:9c:d1:5b:4c:
32:2c:eb:f9:0a:e8:b5:7a:d6:57:e4:d0:39:31:a1:11:95:2f:
d2:43:83:6e:15:06:0b:4d:d0:ee:ab:ce:22:5f:cd:d8:4a:a3:
c5:28:74:f8:fb:5a:3b:7f:5e:b2:56:57:dc:f8:91:ef:3d:b2:
33:f0:3e:af:5a:5d:31:6b:38:a8:40:8c:98:90:93:d2:b1:df:
60:00:b3:16:58:a2:c6:79:e2:b3:90:b2:1c:12:49:44:65:5e:
08:19:18:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+flgbg58XD6LzarvdrjbdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjYwNzI2MTgwMDM3WhcNMjYwNzI3MTgwMDM3WjAzMTEwLwYDVQQD
Eyg1MWRkNGRhZjRkY2FkNDUyZWQ1YmUwOWNmNmQ2YjkxZTQwZGI5ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ffWDxBPjzq53hLAk9VGFTAzNGNX
3c/myeKYvQmioYYnS7FkizaGh76E5ArsVmTed28MQqAKlsCC+ULz1lFv+x1A6e6x
RC3Fcpm+IqT67xAovkKJ+dj0Tg76BzK0/daojlNoakf0HHlWysYdhXbxUHohQomx
C68osfJFX78amd5BZ6OZaOC07GfW4/dciOAzJu1qvN90kLwpGPZNg5B0yq/Yx5rO
jYf+RLjh7F9wG3wkwOlPX4sIh345CMkGO6UAPU7xr/G9+UUAjdt46Vbtv+YvnNoZ
g8BeRA2Is2+DKJmHhKp1BlNtY3ICspqc8lh6QzzMeYzQHC2vEK9AZLeqPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHdTa9NytRS7VvgnPbWuR5A25+wMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnr2iNZ0
Thn1gBHnGPyh7BrlikHPYk+33Ow38Gon9LqZQXjEWDxxxJlhbkYwDZu+j/T8EsEN
gSlHH9vEP69gpWFj4EfhbralsS2Q/n4+kmpwZnf7rr+jkb1JCJVxDJRTip8GyJrq
U7VV/5mbq/R0tzou4fGYe+rRGvxp7yneO44gIZcgMzYJuBexApFiLGQRPHjmdoBd
s3NYpfnaZLmc0VtMMizr+QrotXrWV+TQOTGhEZUv0kODbhUGC03Q7qvOIl/N2Eqj
xSh0+PtaO39eslZX3PiR7z2yM/A+r1pdMWs4qECMmJCT0rHfYACzFliixnnis5Cy
HBJJRGVeCBkY3Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 01:08:29 2026 by rpki-client