Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
File: lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft (raw, json)
Hash identifier: 8XbDjoJ6d4xwtPrNc4Y4St3xt4MP3Sqvvcq0ifzAIpc=
Subject key identifier: D3:39:19:97:5D:CC:58:2A:C7:AC:B2:A1:46:70:95:35:F8:91:85:8D
Authority key identifier: 94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
Certificate issuer: /CN=94bd5921933292a2f93e049f8b81fb7650301c67
Certificate serial: 019E91A5AA463781ECF0F56AB867F0EAFB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
Manifest number: 1C
Signing time: Thu 04 Jun 2026 08:00:13 +0000
Manifest this update: Thu 04 Jun 2026 08:00:13 +0000
Manifest next update: Fri 05 Jun 2026 08:00:13 +0000
Files and hashes: 1: lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl (hash: Zmeik1dMKiKDPSrrb4c5N4YLCxel4QAU5Hy3q2KX9PI=)
2: xITKiIhMJqr64QWowOp5Oos94Ts.roa (hash: 0jGjhsogZ02DOgH0lYdyo4DGk9IGywTmUiv2U/qvPr4=)
3: zzQCv-E1bq6Vad6HBjZl3qZJnBs.roa (hash: GpwoA2VX03zH2zUpZrOb1rRxnrDXnBgehj8lNRuizXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a5:aa:46:37:81:ec:f0:f5:6a:b8:67:f0:ea:fb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bd5921933292a2f93e049f8b81fb7650301c67
Validity
Not Before: Jun 4 08:00:13 2026 GMT
Not After : Jun 5 08:00:13 2026 GMT
Subject: CN=d33919975dcc582ac7acb2a146709535f891858d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:48:57:76:4c:d0:21:40:1a:f9:c9:35:f1:
54:63:82:06:9e:3a:65:8a:45:ea:4d:01:9a:fa:5b:
e7:75:81:61:7a:42:76:e6:a2:8b:a0:6d:3c:28:21:
7f:f4:fe:be:12:d1:f8:f4:a0:5c:17:82:ab:04:1d:
02:bc:44:71:5d:74:76:d9:5e:56:86:fe:9b:7e:8b:
6d:ff:ba:71:c0:b7:12:33:3e:d7:21:6b:4f:98:c9:
73:2f:60:78:1d:05:de:80:ca:a3:82:00:7b:76:58:
32:70:05:5f:38:13:4a:84:26:7d:25:1c:20:78:b3:
ee:c5:02:06:d0:3c:6e:a3:58:39:ce:44:8b:84:53:
db:ef:f4:78:56:60:fc:24:50:14:a0:b8:06:50:9b:
6f:ef:fd:e6:c0:61:36:4a:66:52:e9:a8:63:93:01:
0c:83:5f:4b:f5:27:b3:83:46:5d:97:8b:22:34:26:
d5:c3:57:da:aa:61:32:dd:b6:de:1e:b5:7c:68:82:
f2:c4:ea:77:37:52:19:62:54:27:4c:0b:3c:67:1e:
8e:f9:e2:6c:6c:9c:f3:ba:d6:c3:87:4c:a9:c4:d1:
6d:16:33:d7:82:18:92:72:8f:ed:e3:b3:cc:37:44:
ea:4e:7a:0a:36:1b:cf:9c:cc:d7:a5:af:05:8b:21:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:19:97:5D:CC:58:2A:C7:AC:B2:A1:46:70:95:35:F8:91:85:8D
X509v3 Authority Key Identifier:
keyid:94:BD:59:21:93:32:92:A2:F9:3E:04:9F:8B:81:FB:76:50:30:1C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lL1ZIZMykqL5PgSfi4H7dlAwHGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ba3f5-8f3b-410e-acfc-0bc805e4d3ee/1/lL1ZIZMykqL5PgSfi4H7dlAwHGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:23:40:cc:04:a7:0f:e8:f2:78:88:1a:ca:22:8a:1e:8a:25:
a5:28:22:27:08:1b:07:36:13:33:38:95:89:a2:80:91:f6:a4:
2f:d9:4f:eb:51:e0:f0:de:7f:16:47:93:c2:3d:01:9d:1b:45:
7d:8f:e7:5b:85:60:fd:d4:d3:44:dd:c9:43:c7:50:12:b5:7f:
8d:1c:05:8e:7a:47:bf:c6:55:f8:e5:ac:23:cf:db:ff:46:91:
32:6f:05:76:f9:f7:f4:95:1a:ef:4b:c6:57:4b:bc:14:31:50:
df:ff:f9:28:7c:28:17:8b:57:c2:cc:81:ac:f0:3d:f4:67:a1:
f8:3d:3d:e0:1f:92:e3:f4:04:12:4e:27:74:a1:3c:d2:3d:3f:
a5:d4:15:49:c6:3d:cc:23:9e:28:72:14:58:32:86:87:ed:3e:
0d:7f:73:91:79:8e:ba:70:27:21:50:a2:c2:2f:12:b5:6a:ec:
c5:ca:f6:96:f7:e4:74:a7:34:3a:bd:c8:1b:e1:a4:1d:43:01:
bc:dc:31:0c:01:8f:0b:33:6d:5c:e8:e4:92:ba:79:59:d4:49:
19:b3:1f:a4:64:33:ed:9a:7d:23:69:69:e1:b0:27:cc:f1:ea:
e2:22:37:0e:09:5b:dc:d2:86:07:c0:90:d9:c5:91:be:40:48:
4c:cf:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:16:24 2026 by rpki-client