Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: CTAFs0AjzTJQh8sJQUnWY+6xbGVELdZil/6bhvXRcxY=
Subject key identifier: 07:AB:2F:E6:1A:56:29:77:85:3B:FB:59:26:A5:58:39:BD:33:F0:2A
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019EB845B33A0F8871189DAF8EF4A2E7A11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 16FB
Signing time: Thu 11 Jun 2026 20:00:36 +0000
Manifest this update: Thu 11 Jun 2026 20:00:36 +0000
Manifest next update: Fri 12 Jun 2026 20:00:36 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: u/dEPllmkp9mAF9Vo1woihR1KqgwXZggD0nK6E3iMIk=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:b3:3a:0f:88:71:18:9d:af:8e:f4:a2:e7:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jun 11 20:00:36 2026 GMT
Not After : Jun 12 20:00:36 2026 GMT
Subject: CN=07ab2fe61a562977853bfb5926a55839bd33f02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:c8:91:d1:ca:7c:35:a4:b9:db:ed:5d:57:
55:96:7e:e6:86:ca:99:f1:20:f5:01:b8:85:37:77:
75:04:5e:ee:cd:5b:10:e6:9a:6a:f7:01:0a:40:d5:
13:e8:1c:a0:e4:33:f3:c0:b5:eb:d9:15:16:d0:f4:
d8:08:e4:a9:94:05:f4:5a:fe:de:cf:d8:c4:71:2a:
e8:04:5f:98:8d:60:5f:8e:31:07:d1:78:fe:a3:de:
b3:c6:57:53:79:84:0c:dc:db:84:cb:08:07:a5:21:
c9:72:32:77:de:ff:74:2d:f2:b1:34:c3:be:72:e9:
7f:fe:2e:57:6d:30:0c:d8:80:eb:f1:7c:5d:0f:23:
5a:6e:0c:af:56:42:3c:0d:42:63:72:a4:ae:0c:b9:
62:e0:9b:85:af:32:aa:56:14:3a:1a:2f:b6:36:0d:
52:9f:e8:cf:8f:98:2f:e6:34:c9:0d:1f:9e:52:23:
1a:0f:6d:99:be:44:de:b1:f9:5e:b3:70:de:0d:06:
01:88:b3:61:4d:59:bd:7a:d8:11:55:2e:90:90:24:
d2:c8:70:f8:f0:d4:2e:46:81:60:db:de:26:d0:15:
dd:47:b1:a4:b5:b7:88:df:56:d9:3d:ce:db:be:52:
64:55:31:02:f4:38:8e:c7:14:ff:da:2e:df:e6:9d:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:2F:E6:1A:56:29:77:85:3B:FB:59:26:A5:58:39:BD:33:F0:2A
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:82:44:3d:2a:d6:48:42:4a:5d:22:d4:0c:3d:2d:8e:19:1d:
d3:d3:52:1f:3c:fc:11:46:b1:ae:13:65:c1:6a:a9:23:50:40:
8b:53:f3:a4:7d:ed:b7:00:53:6f:23:6e:d8:28:aa:cc:4b:0e:
54:e4:1c:e4:a5:7d:90:02:ed:e9:f9:9e:88:4e:57:36:9e:1f:
ea:2a:7c:42:41:24:8e:ca:ed:67:27:83:aa:43:ea:79:34:1e:
ab:30:67:08:20:60:b7:8a:8a:f3:70:7c:1b:99:cf:d8:23:1d:
b4:dd:9f:95:04:95:c7:c5:44:98:ca:f1:00:d2:44:ad:80:89:
c4:2b:a1:83:25:d2:3e:f6:13:86:b5:9a:09:75:e8:1a:40:34:
92:96:c5:68:f4:7a:08:7e:75:c5:44:80:b4:76:07:ce:2c:a5:
d3:5b:08:e4:4d:a1:60:5b:9a:2a:3a:4e:b8:36:d2:80:16:5c:
0e:7c:3a:fe:99:16:5d:d5:24:cd:45:6c:4f:1b:6e:04:02:c2:
63:3d:f1:10:b5:6f:15:64:4d:22:2e:01:d6:66:ae:26:11:69:
d3:68:cb:78:fc:74:fb:de:f0:63:89:33:0a:10:80:28:d7:8d:
75:cb:48:ae:ac:53:69:ec:73:dc:db:c4:b7:76:96:c5:84:8b:
a3:c4:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:48:43 2026 by rpki-client