Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
File: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft (raw, json)
Hash identifier: 6nsJN436D6EFEacF/0T/yrM9+SBQ5KePqYITpOzVSfo=
Subject key identifier: BB:D4:0A:E6:89:A2:F9:2E:7A:2C:9A:4A:92:1C:BC:86:BD:76:CB:CC
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 019FA2CE498316D77BC2B0528AAC8D352002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:55 +0000
Manifest this update: Mon 27 Jul 2026 09:00:55 +0000
Manifest next update: Tue 28 Jul 2026 09:00:55 +0000
Files and hashes: 1: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (hash: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=)
2: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl (hash: Ted+6mZp7cexX4+bCcpLpUx5fJKNEkfmmM2fld5A5Ec=)
3: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (hash: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:49:83:16:d7:7b:c2:b0:52:8a:ac:8d:35:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Jul 27 09:00:55 2026 GMT
Not After : Jul 28 09:00:55 2026 GMT
Subject: CN=bbd40ae689a2f92e7a2c9a4a921cbc86bd76cbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:1f:53:1c:18:85:a1:4e:fd:69:a3:46:20:
fc:f7:ae:23:5e:4a:a9:47:70:fe:5f:40:e3:e2:ca:
c3:e1:db:47:ad:cf:7a:c9:f2:82:0d:d0:3c:1e:dc:
06:c4:4e:db:15:28:24:49:de:c8:40:68:7e:45:8d:
c6:2b:80:16:8e:d7:1a:5f:90:7d:60:80:2d:5b:57:
dd:12:d1:3d:5f:6c:cd:47:92:6c:ab:22:58:c2:b9:
1b:2b:26:0a:32:76:90:cc:c3:c1:eb:a1:58:c7:cd:
a3:26:93:89:76:6f:66:9a:ae:9f:2d:bf:a4:1e:36:
4a:89:8c:18:83:c0:70:81:97:ee:7f:f9:fc:6d:f7:
8b:fb:79:f9:37:2b:1f:2f:6a:90:8b:4e:f2:54:2b:
92:e1:de:d7:ed:1c:7d:04:48:15:1a:c1:85:73:7f:
df:78:57:b5:ad:f9:4c:85:1b:dd:03:dc:7e:76:63:
d0:1c:11:4c:97:b7:6b:95:48:ad:ae:91:60:8f:cc:
39:6d:06:ba:c7:8c:73:9e:cd:fe:13:9b:29:a2:10:
04:07:82:fa:45:c9:ea:e9:31:41:dd:b9:e0:30:ea:
bb:e3:97:59:cd:05:30:87:e7:2e:6b:3a:04:29:4c:
48:81:7f:b0:3b:48:bd:fc:87:60:ff:c0:4b:fd:1d:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:0A:E6:89:A2:F9:2E:7A:2C:9A:4A:92:1C:BC:86:BD:76:CB:CC
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a1:00:4e:9a:aa:e9:3d:62:9e:2d:4d:4e:0c:0e:08:2e:7c:
c3:eb:a3:30:de:a2:b0:76:2e:a2:70:88:35:a5:45:dd:47:1d:
c2:9b:ae:ee:b4:65:d0:91:5c:ac:d1:52:71:a5:2e:03:1a:d9:
47:68:80:71:1e:38:c2:98:ed:52:72:05:ac:13:3e:59:70:60:
53:79:82:f4:25:42:b2:0c:38:31:ab:a8:e6:55:9c:e1:6e:e6:
9f:15:c0:99:2f:10:e4:aa:b8:6b:d0:0e:d5:e7:f6:fc:0b:46:
7d:70:eb:cd:37:32:3c:76:63:6d:7f:cb:42:77:88:f7:52:e0:
91:91:32:d3:1e:73:18:a0:b4:c0:45:f1:31:85:40:e6:4a:62:
d4:b1:56:36:3f:35:42:ab:1f:f3:79:fd:6c:f1:4b:6e:07:64:
16:ff:3d:93:e4:54:40:61:75:3e:68:12:33:69:61:1e:38:46:
1e:fc:16:04:87:f8:11:dd:e8:13:55:25:70:6a:ae:80:56:68:
b2:d2:d9:0e:94:6b:68:1b:d5:8d:c6:4f:a6:7a:fd:13:29:b9:
d4:95:08:6c:12:52:21:0f:d6:19:a8:fb:80:39:2e:50:90:29:
84:17:08:04:45:02:bb:86:57:8c:08:46:a8:7c:8f:74:f1:4b:
ee:b3:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:52:50 2026 by rpki-client