Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: dTi/3b4sFEtDmul7qOE15Yd6wJsg8wZ+H3ziVit2RRI=
Subject key identifier: A2:55:8C:EE:63:EF:BA:26:7A:1A:5E:A9:28:05:4C:EE:B1:0C:50:C7
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019FA4183C51879B29D15CDE1C5DCEEC8299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 15:01:19 +0000
Manifest this update: Mon 27 Jul 2026 15:01:19 +0000
Manifest next update: Tue 28 Jul 2026 15:01:19 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: TfBEQRq28q3VBohg5NFR1fCAyhNjf93c9shLypc9Ma4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:18:3c:51:87:9b:29:d1:5c:de:1c:5d:ce:ec:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jul 27 15:01:19 2026 GMT
Not After : Jul 28 15:01:19 2026 GMT
Subject: CN=a2558cee63efba267a1a5ea928054ceeb10c50c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:c6:9a:32:47:87:ce:e0:c8:db:14:6d:0a:
6a:a4:30:12:fe:4f:b5:30:62:ba:bb:a8:16:b1:02:
49:04:9f:fc:23:69:2e:a6:90:ef:ef:55:af:bf:fa:
71:b2:4e:16:6a:e5:54:fb:8a:47:d3:87:4f:e5:49:
31:36:37:a7:fb:12:6c:8c:63:64:5c:fc:ba:83:db:
d4:bd:75:4f:f5:1c:76:5e:93:bf:0f:84:f5:b9:6d:
53:4e:1f:4b:6d:f3:13:3d:32:bc:21:69:99:b4:19:
ce:90:37:79:e6:e3:2d:54:27:20:8b:95:fe:6c:84:
61:4d:cc:ee:44:69:e4:bd:0d:82:58:ff:06:ff:54:
f5:03:81:9e:2a:af:f3:d0:6b:f8:ea:1c:76:0d:2f:
39:66:08:24:28:c6:fc:57:a3:3c:a1:59:79:f3:c5:
0c:1d:3f:74:e3:b8:dc:8f:f9:f8:84:3b:60:b2:fe:
d3:4a:c1:c7:f8:2e:a4:b9:e1:6b:5f:45:ce:b2:f0:
7e:49:9a:94:e8:59:71:6e:83:5f:ed:89:52:bd:63:
b9:f7:c0:8f:ed:67:3b:4c:a0:d4:35:61:a2:a9:ab:
c9:d8:e7:01:c8:db:f0:f3:4d:b2:34:e7:2a:03:9c:
d7:a8:46:e8:91:83:19:d5:30:af:2f:41:3a:4d:d6:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:8C:EE:63:EF:BA:26:7A:1A:5E:A9:28:05:4C:EE:B1:0C:50:C7
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:10:4b:ce:08:a9:46:43:ce:b2:f5:db:97:ad:70:92:bf:
16:33:40:9f:ad:00:8e:67:1b:93:fb:a4:35:dc:e3:77:1b:d7:
ec:65:9b:23:48:87:ec:b3:49:ff:e7:27:a6:19:c4:80:0f:4a:
2f:de:ea:4a:98:c9:de:40:b3:89:b0:85:6f:4b:a6:06:12:9d:
fe:39:a4:b9:d1:6f:c9:56:9c:de:20:d8:fd:37:3b:b1:95:5a:
cb:d8:b7:6f:a9:34:1f:21:89:f9:57:5e:6d:1e:6a:d4:78:98:
a1:9d:19:65:f8:c2:38:4f:64:91:73:d3:e7:58:4c:87:07:88:
46:88:35:54:8b:14:89:a9:fd:1d:ab:73:62:82:cf:78:4b:56:
47:26:d5:9a:23:8d:90:4e:6b:f2:90:99:dc:fa:05:eb:e2:d0:
13:0e:54:08:40:02:23:c3:42:45:c4:36:0a:60:dc:9b:cf:3c:
4b:ee:bd:01:02:01:4d:b8:1c:37:4e:11:f7:ee:7e:5c:e0:6e:
3d:e8:73:96:58:e2:8e:eb:87:25:41:ba:cc:a4:dc:80:59:c3:
9a:4e:21:c9:db:3b:1a:43:de:25:47:26:95:80:53:02:a4:ab:
66:0e:8a:72:c1:08:4f:f8:76:04:e4:78:38:0d:5c:d0:e4:ed:
d7:65:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:08 2026 by rpki-client