Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: aiEVrAcL3+TI3But/Jt5IB4yrDxIn2cR4XL1e4fIk8g=
Subject key identifier: 33:C3:5A:5D:69:F9:33:96:70:1B:1A:05:87:47:1C:89:14:07:E5:6F
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019FA14D83AD56DBEA5A4CDEC0A1C98DD741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 195F
Signing time: Mon 27 Jul 2026 02:00:39 +0000
Manifest this update: Mon 27 Jul 2026 02:00:39 +0000
Manifest next update: Tue 28 Jul 2026 02:00:39 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: dbx57ZSGDzYLrenrI9GStJ9H+w8WxVHapsspl7bXphQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:83:ad:56:db:ea:5a:4c:de:c0:a1:c9:8d:d7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jul 27 02:00:39 2026 GMT
Not After : Jul 28 02:00:39 2026 GMT
Subject: CN=33c35a5d69f93396701b1a0587471c891407e56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:a0:d2:d1:75:70:02:60:97:70:e7:62:f9:
00:86:50:da:64:df:66:a4:28:7e:03:2f:c7:f5:55:
08:57:87:91:31:e7:85:7c:02:bc:57:97:a5:5d:93:
68:a1:d3:86:4b:27:11:d1:58:04:54:53:a9:97:46:
4e:1f:74:6d:01:53:d7:6c:2b:9e:26:9e:56:35:32:
03:52:5f:14:7f:a2:a6:db:7f:5f:34:50:3f:0b:0b:
64:5b:0f:6f:e4:cf:43:bd:e5:35:fe:12:0a:58:80:
ba:b2:1c:c8:2f:e0:58:0a:40:38:cb:03:60:08:43:
7d:3c:12:32:3d:62:27:f0:cc:6b:d2:9a:f9:39:5d:
02:c1:3e:e4:d2:6d:c0:04:1e:e7:b6:d0:07:21:97:
92:81:80:97:d5:9a:ce:ad:3f:f2:37:63:ae:ff:28:
5f:65:31:44:b1:95:e1:c7:dd:91:7b:89:6b:bd:9e:
47:45:1f:04:11:41:d0:71:1a:b9:03:90:f4:33:51:
0a:99:b3:76:d1:61:03:1a:44:a0:ca:94:43:ea:2c:
9e:b1:5c:d5:d6:35:6c:28:3d:45:c6:a8:46:44:13:
8c:6b:06:76:94:a0:4e:92:1b:13:fc:fb:7a:d6:1d:
02:73:da:6f:90:e5:ca:4d:1d:6d:31:2d:da:17:d5:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:5A:5D:69:F9:33:96:70:1B:1A:05:87:47:1C:89:14:07:E5:6F
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:14:4a:78:0b:a1:41:b9:59:2c:fd:4d:24:4a:d7:50:5a:3c:
22:35:72:c5:08:48:0f:19:62:91:7d:85:e3:e6:9f:36:6f:10:
67:be:bf:79:d5:ff:a2:1a:f1:3f:ac:81:37:b8:4e:68:90:ed:
18:9f:d3:cd:f1:f6:50:33:6e:89:9f:32:ab:f5:c1:1d:f6:b3:
fa:39:51:e7:8c:10:3b:56:4c:c8:b9:f6:83:8b:46:01:f2:87:
f4:85:d2:2b:3e:5c:97:96:a0:a8:f9:b5:63:2e:e9:d5:16:0b:
22:5b:78:60:68:31:bf:9d:98:ac:0b:bd:6b:55:0d:4b:88:9b:
26:53:31:ba:46:83:eb:a9:08:f2:f8:88:ec:f1:39:c2:48:75:
9a:67:66:a2:a6:3d:2e:9d:27:10:f5:29:c2:2b:9f:ea:33:3f:
74:79:c3:02:96:16:96:3b:f8:97:e1:98:5b:39:6f:29:dd:05:
dd:37:e9:08:fc:10:b2:f4:98:3b:bc:a5:18:a0:83:25:be:94:
b7:5b:fc:d3:fa:c6:c3:06:ca:3a:b7:1c:50:2e:6a:26:ab:55:
9b:73:a2:20:9a:44:de:50:75:4c:f2:1d:fc:84:97:50:47:e6:
fc:92:a7:3d:90:93:e6:90:f5:99:73:e4:01:70:4c:ab:98:64:
49:a8:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:03:10 2026 by rpki-client