Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: acjL81fjULO+KCIWpFQd87NgaoZ6atAfWb2jUoAo0bo=
Subject key identifier: 88:FD:F7:74:9D:46:F9:F9:15:3B:1D:D6:65:CD:FB:26:C2:38:6B:7C
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019F8267CE22398AE43DC35A086D61544781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 19CF
Signing time: Tue 21 Jul 2026 02:01:08 +0000
Manifest this update: Tue 21 Jul 2026 02:01:08 +0000
Manifest next update: Wed 22 Jul 2026 02:01:08 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: 2F0fuCtQb2/BAoc8vq6Pz4ZR+9mahVICBuYEbrXiUVk=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:ce:22:39:8a:e4:3d:c3:5a:08:6d:61:54:47:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jul 21 02:01:08 2026 GMT
Not After : Jul 22 02:01:08 2026 GMT
Subject: CN=88fdf7749d46f9f9153b1dd665cdfb26c2386b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:70:4c:6a:14:b6:b3:dc:49:90:52:03:9b:
d4:4e:54:db:3c:bd:ae:c4:fe:4c:74:ab:02:21:69:
08:02:d4:dc:86:60:4e:d5:21:de:3a:8d:4d:48:1a:
72:1a:56:2a:e2:b2:6d:22:22:2b:b7:49:26:c0:fe:
09:c9:99:11:58:71:85:7e:a3:f3:d0:7b:9a:04:2f:
6f:d1:6c:e5:83:da:99:04:80:e4:a9:86:63:ad:8a:
2d:e8:69:73:34:3f:61:fb:d9:aa:70:2d:3c:91:2c:
22:2a:fe:94:78:b9:f7:17:ed:22:5f:5a:a4:e1:de:
ff:3e:29:41:5d:15:b9:c9:ce:c4:e2:40:a0:66:e2:
61:2a:57:6d:1b:3a:8b:be:4a:92:bc:a1:6e:1f:e6:
77:ae:7b:fc:54:0b:12:c6:47:47:f9:2e:d0:05:c5:
c6:5d:02:32:9a:a2:29:59:0b:d5:e7:ae:31:22:94:
62:bd:a8:20:67:74:1f:c2:0f:0d:20:d6:89:67:a6:
aa:8f:63:a5:61:37:46:d2:82:e7:22:1e:0d:34:93:
ea:5a:ff:03:a7:74:91:cf:8e:8f:fd:cf:e0:2d:11:
d4:fc:80:6c:43:82:01:f1:8a:3b:a9:16:45:58:11:
9e:d2:81:0e:27:83:0e:30:8a:3a:7a:1a:1d:82:84:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:F7:74:9D:46:F9:F9:15:3B:1D:D6:65:CD:FB:26:C2:38:6B:7C
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:44:e8:54:5e:b3:53:0c:f9:d6:1d:ab:dc:6d:c6:b9:be:50:
d1:82:9a:1b:13:4f:cf:de:9d:d2:8f:81:14:3c:45:58:5e:34:
47:91:4f:6c:1b:d6:ec:44:df:17:a3:9b:d7:06:7a:a5:3b:2e:
7f:cd:03:ea:f5:ee:ca:a9:5e:3a:7d:17:ff:ec:7f:26:0b:f7:
be:71:f2:37:cf:ae:02:f4:85:2e:90:ef:c3:81:64:98:7a:9b:
aa:21:9b:96:71:c8:f3:98:a3:5f:3d:cf:e0:41:11:df:f2:d5:
7f:7f:1e:90:8b:b6:51:12:09:72:21:2e:cc:b7:50:3f:11:36:
7c:91:1a:34:23:74:c6:51:6e:b7:75:86:81:e1:7a:00:5c:df:
61:d9:7d:a0:d7:ff:6a:1c:5b:02:df:27:de:55:ba:ef:5f:56:
18:85:3c:2d:e3:47:b4:c3:bd:af:bc:c7:78:80:05:f1:af:4d:
db:43:c3:56:ad:64:74:9d:dd:8d:ab:0a:ab:b4:44:fa:37:97:
e7:18:46:ce:1d:3a:d9:8e:3d:60:47:8e:20:21:b4:22:01:bd:
6d:8b:a0:12:a6:2c:fe:d0:1b:4c:85:d9:d1:b3:db:ce:c5:48:
57:db:d9:b3:69:f9:e0:24:1c:d4:d3:90:d3:e7:78:cf:bb:47:
83:d9:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:16:09 2026 by rpki-client