Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: Y4xnjw87cCnr8/ovqbHSRrsn+ybAT4XM5AcNRKKi/cQ=
Subject key identifier: 03:3A:73:C6:ED:91:58:66:65:36:4D:41:AA:F5:C3:79:C7:E5:26:9A
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 019FA14DE44EC3E79247055A46AB8A20296A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: 0382
Signing time: Mon 27 Jul 2026 02:01:03 +0000
Manifest this update: Mon 27 Jul 2026 02:01:03 +0000
Manifest next update: Tue 28 Jul 2026 02:01:03 +0000
Files and hashes: 1: X3R-floHCctncemlohut39fAAWo.roa (hash: HcALHXWtxViwkG5KOnEw6VMEEbxHOixZaFpjLNGdypY=)
2: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: o4Qzilqccbqr6/V0ixP0gHquQZAFVWbiRwhgMSTcKzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:e4:4e:c3:e7:92:47:05:5a:46:ab:8a:20:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Jul 27 02:01:03 2026 GMT
Not After : Jul 28 02:01:03 2026 GMT
Subject: CN=033a73c6ed91586665364d41aaf5c379c7e5269a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:ac:7f:ee:e6:a6:35:aa:84:3a:52:83:5a:
6a:79:40:e7:5d:c1:6b:db:31:dc:b8:7e:30:0f:66:
16:58:ff:a7:42:62:52:36:cf:aa:4c:61:87:6b:05:
5c:97:f7:91:80:b6:b2:29:d1:c9:a7:ba:88:0e:f7:
b8:e8:79:f0:50:67:57:0d:68:b5:f6:f5:42:12:38:
7e:34:50:64:4a:45:ad:39:0f:fa:36:a2:3a:45:1a:
77:3c:7b:b5:b1:38:95:b0:29:1e:3f:27:31:bf:78:
4b:17:b7:38:07:ae:82:08:15:a8:56:71:ea:d6:e5:
1a:84:28:96:83:05:28:77:49:a8:b8:3f:89:63:11:
36:24:d8:ba:bc:aa:1c:9d:99:48:2e:38:92:d7:56:
ae:89:f9:64:40:6d:d3:8f:c9:39:15:7f:f5:3b:a5:
1a:f1:74:58:04:c9:dc:7f:5c:0a:2e:1e:c2:65:47:
15:0c:8a:89:43:b0:3c:d4:55:f1:be:e1:00:df:2e:
a2:2d:77:26:4e:62:c6:64:a3:8a:a3:5e:b9:41:bf:
d4:bd:e0:6f:72:d7:8e:76:68:f7:3f:a6:21:92:0a:
c3:ce:47:03:63:f9:38:ba:59:1d:93:bb:11:7c:45:
26:55:83:24:2f:72:0c:c1:9d:7c:bf:da:81:bf:b1:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:73:C6:ED:91:58:66:65:36:4D:41:AA:F5:C3:79:C7:E5:26:9A
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:99:f5:10:43:fd:10:2a:99:4e:3f:3a:57:8f:55:cf:40:
b4:c3:e1:35:41:0a:72:ce:3c:5c:58:23:a0:64:8e:d1:b4:70:
1e:ad:a7:36:04:c3:3f:e2:52:d3:45:91:be:84:ce:14:62:42:
08:ae:a7:ca:d1:a7:7a:9b:e9:3b:ba:e8:64:31:ec:07:23:5c:
0f:19:33:8f:05:fd:c6:c7:82:bb:f7:43:95:3e:e3:1b:7f:40:
1d:fd:2f:6e:cd:52:84:ad:32:3c:86:7f:7d:17:cc:4d:e7:64:
e2:f1:c1:bd:e4:5d:42:7f:02:36:10:63:fb:57:f9:71:82:da:
6f:57:85:f2:98:ae:ab:89:84:5f:c9:50:30:48:50:7e:60:89:
60:b6:14:a3:ba:34:9b:ab:fc:2b:f7:fc:d8:65:b5:1a:c3:db:
2e:50:9d:37:c6:31:21:4a:23:09:80:14:28:c2:db:8f:ac:c2:
7a:1d:87:f9:5d:92:c9:24:2e:d1:77:e7:bc:77:49:ae:67:23:
60:05:df:96:7c:c0:2d:23:3f:78:d8:84:6b:ba:a4:e3:09:fc:
ff:96:d3:45:36:23:f2:0e:5c:43:07:8c:bc:08:3f:d2:45:da:
f8:b9:52:df:8d:86:82:92:8c:60:41:bf:87:2f:b0:aa:56:69:
35:fd:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:41 2026 by rpki-client