Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: XALGyw24L36BAmR84/Y1bH4cL7wXw+HqoXyM/cjXF1M=
Subject key identifier: C1:9E:12:A6:8E:3C:38:64:22:0E:C6:A4:C6:31:A0:31:2A:60:D2:D5
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 019FA26080098D139D3A7328A6A02A8E58DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 1336
Signing time: Mon 27 Jul 2026 07:01:00 +0000
Manifest this update: Mon 27 Jul 2026 07:01:00 +0000
Manifest next update: Tue 28 Jul 2026 07:01:00 +0000
Files and hashes: 1: Jx3uNY79zTtUVcXRajdPyL_4JyY.roa (hash: m3WDx8L8pFUiyy4V1JFsQgTuaeqJTjIlJ56rCgC/IOc=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: 9qSfMVLGNPhIRBUStquAhoRWac1RCgHKePlrBxNhx2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:80:09:8d:13:9d:3a:73:28:a6:a0:2a:8e:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Jul 27 07:01:00 2026 GMT
Not After : Jul 28 07:01:00 2026 GMT
Subject: CN=c19e12a68e3c3864220ec6a4c631a0312a60d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:b1:2a:14:6a:f7:be:53:3f:38:82:b7:96:
e5:63:b2:3b:86:ae:2f:35:a1:0f:a8:04:76:95:f0:
ea:2e:e5:62:c3:a9:c2:ec:e7:e6:d8:a3:06:72:b3:
74:6b:94:93:6f:f2:5d:2d:e2:70:e0:bc:b5:bb:1c:
10:d2:39:ee:f6:65:a7:40:91:25:1f:02:8e:05:7c:
9c:9a:50:ce:04:e4:ba:48:a6:d8:db:f4:8b:e4:07:
57:69:c2:0a:65:71:1b:33:6d:1a:fe:ab:7a:5a:31:
1b:cb:8e:1d:58:db:c4:c3:e3:50:c6:db:64:be:ad:
41:8f:30:a2:cb:9e:fc:fc:5f:65:c5:38:88:3e:94:
0b:61:c9:ca:ba:de:ef:9c:2c:13:a6:1b:a5:99:79:
a5:c6:34:9c:1f:02:9c:ef:f0:cc:c5:a5:05:61:30:
e8:39:5f:41:60:a2:85:71:4f:50:62:90:76:f9:db:
d4:75:51:d9:1f:5a:c5:08:12:e5:07:8a:0f:4b:75:
cc:a0:59:11:42:29:8c:2b:81:80:21:b4:cf:53:cc:
9b:f3:bd:bb:d6:cb:a6:3b:0d:d7:99:cb:af:9e:9c:
f8:c0:68:9e:9b:8d:49:3d:d0:03:25:13:20:12:dc:
00:3e:22:34:a3:0e:02:b6:06:fa:09:87:84:39:5f:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:12:A6:8E:3C:38:64:22:0E:C6:A4:C6:31:A0:31:2A:60:D2:D5
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:a8:09:26:47:fb:89:f6:73:47:3f:1e:ee:1f:ae:4d:bc:
b0:94:ed:17:8d:bc:b3:a1:95:96:3f:3f:6d:15:9f:d6:b4:c6:
0c:88:52:b8:18:73:40:c7:11:58:d6:d9:91:7e:6c:01:2e:53:
b1:2a:f3:5c:0b:58:1f:e8:f7:dd:4e:b8:b7:cc:a2:96:dc:09:
0f:01:38:4a:9b:1d:38:92:12:7a:06:45:89:6f:42:99:ea:fd:
52:74:1f:96:a5:df:08:96:34:3a:0f:45:33:79:07:f0:fa:7b:
47:63:d1:a7:38:24:f5:d3:9a:a4:a6:e0:2f:dc:58:9d:92:55:
15:c5:82:c6:eb:e0:87:d6:aa:1d:65:99:26:88:b7:da:59:4c:
b2:35:8a:1d:f7:77:08:da:5f:64:c8:e9:e7:98:ef:76:79:d8:
83:57:7a:2c:db:eb:c9:ca:2d:3f:66:38:60:2f:0b:3c:b6:4a:
77:43:5e:7f:41:b0:9d:30:0d:1e:b1:6f:6d:7b:8d:ca:ad:e9:
44:52:a2:58:ea:29:80:a8:22:a8:16:0a:3d:f6:df:69:6d:c1:
56:e9:22:88:cb:32:74:c5:91:59:10:63:f8:f9:df:00:67:4a:
a8:3a:42:b3:87:9e:c9:11:51:4c:ac:5d:c1:3d:bf:e5:d0:b7:
6d:49:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:23 2026 by rpki-client