Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: vBs+Ebckf4PbLBGsGStnDwn+U2ojYwcp4gqh3KJAww0=
Subject key identifier: 45:2C:6E:2E:23:B5:50:DD:3D:03:15:DC:50:16:16:42:01:5D:73:4C
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019F19E888D6C978AA9E4BED8FBBDA9D1625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 191A
Signing time: Tue 30 Jun 2026 19:01:37 +0000
Manifest this update: Tue 30 Jun 2026 19:01:37 +0000
Manifest next update: Wed 01 Jul 2026 19:01:37 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: BApCqZuHByzMsqVpKyZ20o8dqtermVMnBacYR4bVCfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:88:d6:c9:78:aa:9e:4b:ed:8f:bb:da:9d:16:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Jun 30 19:01:37 2026 GMT
Not After : Jul 1 19:01:37 2026 GMT
Subject: CN=452c6e2e23b550dd3d0315dc50161642015d734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:10:b9:d6:c6:8b:a6:0a:00:45:64:b3:82:
54:d0:26:fb:a6:57:c1:64:03:19:aa:39:91:c8:84:
3b:9b:de:8c:51:ab:cd:5c:a8:b5:c3:4c:f3:ca:81:
1c:7b:02:bc:23:21:15:81:59:e3:29:ac:bc:b9:4c:
8c:7c:92:85:cf:17:7b:49:90:07:86:bf:2d:d0:ff:
9d:7e:58:4c:a8:35:06:24:f3:46:ba:65:eb:a0:8e:
ea:dd:e0:ee:d8:02:b2:19:95:5f:c4:93:88:16:16:
80:01:8a:a8:9d:22:29:73:df:50:c8:94:78:c1:c3:
22:b6:84:77:c2:b1:1d:2f:86:f8:d7:d2:6a:b2:bf:
a0:91:3f:16:99:f8:32:f4:93:f2:a3:ad:4d:65:18:
a4:bb:31:00:02:74:70:28:85:6d:a3:b2:d4:5e:c2:
fc:ca:d1:1f:b2:b3:52:a7:2a:a6:6f:22:87:6c:5f:
0a:6f:4c:5b:a9:7d:9b:b8:0f:7f:26:49:10:64:c1:
b5:5e:c1:91:74:cb:20:e8:d5:25:a5:47:a9:dc:85:
db:d9:0a:94:02:6b:2b:61:3b:cf:7d:63:8e:c2:22:
52:22:88:5b:29:2b:d5:30:99:75:1b:2b:87:d3:70:
31:22:e1:7d:3c:46:e9:2c:39:dd:72:84:1b:33:d9:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:6E:2E:23:B5:50:DD:3D:03:15:DC:50:16:16:42:01:5D:73:4C
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4a:bf:ea:ee:1e:2c:e0:26:d8:2a:e4:6f:8f:93:d7:30:ec:
66:a8:4f:52:5e:f1:86:ea:99:c7:df:fb:ff:e1:ef:f0:6b:f1:
dc:cd:de:a8:db:27:e7:76:e5:7f:3e:4d:86:f8:76:25:51:47:
b1:04:ba:24:8e:d5:88:95:8c:ea:4f:8f:81:86:41:d5:4d:df:
e0:cb:ba:ff:a8:08:df:dc:92:a7:b7:b1:de:f9:f2:ff:23:fe:
12:4a:24:ec:44:9f:a7:0a:9c:d0:ec:36:cb:54:96:93:a1:96:
bb:b5:30:79:f2:08:80:18:d6:d4:ce:b8:33:dd:29:45:91:b2:
b2:50:26:53:f9:a9:db:36:a1:4c:6a:b1:b5:c0:36:d8:27:2d:
1f:5d:5f:3c:1f:98:7b:04:0c:fd:75:53:52:1b:12:06:17:bd:
cd:db:cf:35:0c:14:65:5c:01:d4:aa:15:cf:c0:6f:93:82:b9:
83:af:dd:f4:0f:5a:a0:05:24:0d:69:77:eb:3e:a7:49:1c:01:
dc:2a:38:f7:80:76:a0:48:d9:2b:d3:5a:1e:5b:11:d9:fe:26:
c0:28:cd:a5:46:a3:e2:d3:39:85:1f:53:a4:b4:4b:3a:4d:50:
fd:96:f2:00:e8:e2:eb:dc:e4:ba:6f:26:01:d1:a1:33:7d:a2:
ba:be:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:13 2026 by rpki-client