
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: nTM8UXWtD8v48Yd3D8ASaBS3vqD7zlFaU8OHjKukRuo=
Subject key identifier: D0:9F:12:EA:DC:8A:AC:6F:A8:F6:43:72:4F:B2:19:D1:36:4C:2C:58
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 019F84C40A97E175DB23A4FA38D64C5C5E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 13:01:07 +0000
Manifest this update: Tue 21 Jul 2026 13:01:07 +0000
Manifest next update: Wed 22 Jul 2026 13:01:07 +0000
Files and hashes: 1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: Lnawt0v5Oork5od4M1XdmrYi3/EZDVrjo4tnAJtQq8g=)
4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:0a:97:e1:75:db:23:a4:fa:38:d6:4c:5c:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Jul 21 13:01:07 2026 GMT
Not After : Jul 22 13:01:07 2026 GMT
Subject: CN=d09f12eadc8aac6fa8f643724fb219d1364c2c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:7a:fa:29:0b:f6:a6:bc:5e:80:51:75:8e:
a8:07:37:0f:32:cc:81:93:ce:8b:1e:85:cd:93:29:
cd:2b:e5:aa:08:99:dc:c8:16:5b:ea:10:a4:67:0d:
bf:c9:f7:65:56:2a:ae:a9:49:eb:cd:d5:7a:66:9f:
ac:c8:50:69:2c:b0:aa:36:33:64:9b:fb:f5:b7:82:
1b:b5:1a:39:e7:23:4d:26:64:61:23:df:6a:69:8f:
4b:a4:09:5a:bd:6c:6c:29:34:ce:2a:5c:f7:15:05:
4b:57:70:cc:38:b7:38:b1:25:28:c3:d8:98:b1:b3:
b6:5a:65:e1:3a:cf:1d:4b:83:41:bf:dd:b1:a5:a6:
33:ed:d2:bf:ec:4d:2e:b2:7a:76:0f:3e:b8:09:b9:
82:22:21:74:7c:20:8e:59:e0:d3:c5:33:ed:65:11:
05:a9:1e:ff:74:17:84:6a:0f:6b:e5:d4:1d:40:f3:
92:a2:de:40:74:af:b6:2c:b3:ad:15:b3:26:fd:8a:
1f:bb:a4:98:65:89:c8:4c:96:4e:ad:dd:75:5a:d4:
f9:77:c3:2a:f6:a9:f9:fa:10:d3:09:ea:ae:53:68:
39:3c:88:c5:f0:a4:4b:72:d9:0b:d5:18:75:3a:87:
b6:bf:07:af:73:aa:9e:9e:c2:1e:be:0c:71:70:e6:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:12:EA:DC:8A:AC:6F:A8:F6:43:72:4F:B2:19:D1:36:4C:2C:58
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:94:a7:34:59:f1:1a:7b:73:b3:6d:d5:22:3a:8f:90:37:
4d:d6:cb:b3:5d:d5:9f:28:e7:28:a9:22:26:db:3b:30:3d:32:
f3:99:f2:fc:e0:0e:ec:b7:4d:59:be:21:20:72:a6:16:85:67:
a2:1b:51:24:26:70:96:f6:92:8d:d2:ee:89:d3:bb:21:14:ec:
29:ef:fa:a2:83:76:fd:8b:a9:ec:ef:e6:d1:f8:8e:44:6f:3c:
69:94:b7:87:dc:21:16:6b:7a:5a:f9:de:5f:d2:56:8f:e2:31:
a1:60:30:90:6d:22:66:0e:5f:a6:c6:3e:2a:da:3c:58:ea:07:
36:f7:ac:79:c6:17:02:f4:b2:03:c8:5b:d0:37:8e:88:df:58:
7d:29:0f:15:1f:5c:70:c2:a8:51:83:a0:c4:3d:fb:e8:91:68:
1d:09:92:78:a5:28:fa:c0:87:5f:31:a5:db:06:0a:21:21:d5:
61:13:24:ac:fb:7a:05:2a:9f:cc:55:91:37:1b:94:cf:9c:4e:
b0:2b:ef:aa:f9:c1:01:ac:78:e5:3a:ff:ec:70:3e:09:72:6b:
e0:fb:65:13:ad:e3:f1:cb:70:60:22:85:19:f6:3b:ad:ab:31:
1e:b0:1e:6a:84:cd:1b:b3:2c:01:b9:30:70:71:1a:d3:7d:8a:
5d:15:f5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExAqX4XXbI6T6ONZMXF58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1
MzI1ZGYwHhcNMjYwNzIxMTMwMTA3WhcNMjYwNzIyMTMwMTA3WjAzMTEwLwYDVQQD
EyhkMDlmMTJlYWRjOGFhYzZmYThmNjQzNzI0ZmIyMTlkMTM2NGMyYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtox6+ikL9qa8XoBRdY6oBzcPMsyB
k86LHoXNkynNK+WqCJncyBZb6hCkZw2/yfdlViquqUnrzdV6Zp+syFBpLLCqNjNk
m/v1t4IbtRo55yNNJmRhI99qaY9LpAlavWxsKTTOKlz3FQVLV3DMOLc4sSUow9iY
sbO2WmXhOs8dS4NBv92xpaYz7dK/7E0usnp2Dz64CbmCIiF0fCCOWeDTxTPtZREF
qR7/dBeEag9r5dQdQPOSot5AdK+2LLOtFbMm/Yofu6SYZYnITJZOrd11WtT5d8Mq
9qn5+hDTCequU2g5PIjF8KRLctkL1Rh1Ooe2vwevc6qensIevgxxcOYxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCfEurciqxvqPZDck+yGdE2TCxYMB8GA1UdIwQY
MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt
OGRkODFlNGIzZTMzLzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz
LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3qUpzRZ
8Rp7c7Nt1SI6j5A3TdbLs13VnyjnKKkiJts7MD0y85ny/OAO7LdNWb4hIHKmFoVn
ohtRJCZwlvaSjdLuidO7IRTsKe/6ooN2/Yup7O/m0fiORG88aZS3h9whFmt6Wvne
X9JWj+IxoWAwkG0iZg5fpsY+Kto8WOoHNvesecYXAvSyA8hb0DeOiN9YfSkPFR9c
cMKoUYOgxD376JFoHQmSeKUo+sCHXzGl2wYKISHVYRMkrPt6BSqfzFWRNxuUz5xO
sCvvqvnBAax45Tr/7HA+CXJr4PtlE63j8ctwYCKFGfY7rasxHrAeaoTNG7MsAbkw
cHEa032KXRX1/A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:37 2026 by rpki-client