Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: GJ7nxW7RFUPUyg/ZqC+ZLoAY07YM9WnNDQaHFc32XaM=
Subject key identifier: 15:94:09:E5:B5:C0:40:1A:1E:52:26:A2:52:07:7C:A3:17:19:B4:09
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019FF86C0F7107F82579C43AA4075BE56228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1990
Signing time: Thu 13 Aug 2026 00:00:59 +0000
Manifest this update: Thu 13 Aug 2026 00:00:59 +0000
Manifest next update: Fri 14 Aug 2026 00:00:59 +0000
Files and hashes: 1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: J0CSPMMr+3t6s1cWLGxMpX4dJufPRzB0kka+Jj5wv90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:0f:71:07:f8:25:79:c4:3a:a4:07:5b:e5:62:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Aug 13 00:00:59 2026 GMT
Not After : Aug 14 00:00:59 2026 GMT
Subject: CN=159409e5b5c0401a1e5226a252077ca31719b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:c6:cb:09:05:ae:03:83:eb:45:49:c2:1c:
15:af:ec:41:46:e1:e6:48:a7:7a:83:59:97:b4:95:
33:cb:9a:46:00:c9:38:c2:8d:bc:42:24:f3:08:2f:
b0:f0:1d:be:af:55:f6:db:00:44:36:83:fe:92:82:
80:6a:7a:9a:8a:f1:1c:1e:c6:54:7f:95:7d:e4:8d:
ed:cc:f0:98:f3:e7:15:23:c5:9a:06:6c:17:fa:c1:
81:83:71:7e:0f:b7:c1:7d:79:96:3f:bc:3f:2f:86:
32:09:ae:61:a9:0e:4e:b1:0c:10:81:fb:0c:b3:ed:
75:50:74:42:c4:db:9a:8b:fc:b6:3b:71:fd:b5:05:
f2:9f:b7:05:c0:29:4e:e1:b2:f9:92:43:e7:43:af:
a0:be:bd:62:30:20:b6:6a:6c:ae:86:8c:5c:15:11:
f4:4b:37:48:4d:68:3c:15:f3:c9:fc:f3:1f:8d:91:
b0:dc:5f:64:65:c0:bd:37:d3:9f:3b:14:89:4c:d3:
f9:5e:9e:bc:88:0c:f1:41:61:27:f6:c7:a3:e2:b1:
65:12:61:59:86:17:5e:5c:c7:71:9e:0d:f9:ad:22:
1e:be:51:f0:92:a0:31:c3:f6:88:a5:3a:43:e7:72:
e3:58:5f:40:d4:5e:8b:b4:0a:f6:8f:62:58:a7:c5:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:94:09:E5:B5:C0:40:1A:1E:52:26:A2:52:07:7C:A3:17:19:B4:09
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:71:c3:12:f0:4a:50:6f:e6:21:0e:24:36:24:b2:dc:e1:0b:
58:42:4f:97:2e:97:c8:91:74:34:20:c7:28:28:b1:7e:22:f9:
f6:3a:2e:0c:e6:83:bb:0a:fc:be:09:14:ff:60:2a:a1:17:2a:
fb:cb:fa:4a:2c:55:dc:f3:82:37:9b:5d:5b:a8:bb:83:c4:d1:
cd:61:d6:6f:f9:49:89:b1:c4:df:bf:56:dc:4f:81:ac:0b:80:
4f:3e:56:70:6b:05:74:63:1e:f3:a1:3f:2d:99:fa:fe:1e:c0:
5f:39:04:83:d3:03:c2:ad:cc:6a:83:12:38:62:9e:ee:2d:1b:
1a:8f:f8:14:81:61:81:a3:58:57:9a:c3:ae:6a:3e:7c:7f:46:
d2:15:06:a8:7c:e3:af:f6:0a:63:c9:32:be:20:d4:60:73:cf:
75:d3:05:7f:01:68:2e:19:f2:af:9b:72:0e:25:8c:2f:41:60:
16:db:3c:33:91:06:d3:6d:94:36:b2:be:86:ef:e6:66:03:3b:
00:92:52:58:78:91:9f:13:ed:2b:71:70:3e:54:97:56:f7:4e:
56:27:23:2f:b9:75:8d:d3:d1:cd:ff:0d:25:ca:2b:21:e4:f9:
af:93:39:1f:14:ba:19:20:01:fd:eb:37:a4:63:f4:26:52:ce:
a6:9e:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:11 2026 by rpki-client