Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: I6WM9L1SC1jF80d7TWZ2Q68R4ivw99PD9HWNjIDLfwk=
Subject key identifier: 21:92:48:97:6B:56:AF:F7:EE:F2:F2:94:2E:A5:26:D1:58:15:27:D4
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019FA2972FED7E671BF589C3F174C7226688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 18AF
Signing time: Mon 27 Jul 2026 08:00:44 +0000
Manifest this update: Mon 27 Jul 2026 08:00:44 +0000
Manifest next update: Tue 28 Jul 2026 08:00:44 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: gymhhLmyXUsBR1g9EQNT4CEgjxCO4popmd5+1DTYt0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:2f:ed:7e:67:1b:f5:89:c3:f1:74:c7:22:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jul 27 08:00:44 2026 GMT
Not After : Jul 28 08:00:44 2026 GMT
Subject: CN=219248976b56aff7eef2f2942ea526d1581527d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:bf:d2:9f:4c:d7:11:2d:f1:ac:d7:f5:ba:
36:8c:c9:4d:91:0e:80:fe:46:e4:ec:d6:5f:85:fa:
91:27:74:92:bd:75:bd:2f:f1:65:14:c1:92:2e:1f:
98:3a:29:05:55:48:69:8e:60:1d:d8:94:ac:ff:28:
4e:4c:67:57:46:69:00:bb:7a:14:16:30:c7:6c:8f:
22:0e:0a:87:78:42:d0:7b:1d:65:fb:8d:82:c9:c8:
62:c6:5b:c9:54:7e:19:47:a7:1a:06:63:01:26:ea:
b2:f2:85:8f:7d:0e:d4:11:6f:86:4c:47:14:5c:e0:
58:2c:7d:0c:83:9b:d0:84:47:64:74:e1:2b:ae:be:
34:b9:b5:2c:b8:3a:2c:82:9e:38:18:f0:cc:52:b9:
15:89:e5:49:a3:86:a5:13:51:8f:0c:ec:85:64:2d:
0b:1c:92:8a:1d:02:f5:5c:51:ec:db:23:8b:15:b1:
3e:64:ed:c1:f4:e9:ae:95:f1:49:43:71:6b:35:81:
b2:b0:5c:ec:6f:bb:89:68:09:f7:66:4a:fe:b7:8b:
10:9a:8d:71:51:91:89:5d:60:04:7b:35:4e:d1:4a:
33:be:57:37:3e:aa:c3:40:42:5a:da:bd:28:78:b6:
b3:db:81:c7:e1:96:44:d3:3a:6b:f7:19:34:03:18:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:92:48:97:6B:56:AF:F7:EE:F2:F2:94:2E:A5:26:D1:58:15:27:D4
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:09:41:f8:8a:8d:bf:f3:4b:fa:d1:84:78:4c:13:a3:7f:69:
70:f1:fd:91:4b:b5:c4:53:b8:86:07:88:f9:d9:86:3c:6f:ac:
4c:ad:7d:13:1f:f4:dc:5d:89:d5:6a:85:5e:d0:8a:9e:32:e5:
83:f5:72:f4:19:1c:b8:47:26:0a:3d:17:2e:aa:4b:78:a3:58:
21:47:27:21:db:89:44:1e:7a:fc:8d:6f:21:39:47:91:da:46:
91:63:eb:13:b0:c7:f5:db:62:42:ba:0a:7f:e7:2c:62:95:a4:
6a:50:4d:03:55:ef:7c:11:ae:25:4b:b9:1a:97:a0:da:3f:91:
0e:ce:92:6d:6c:a4:39:97:e3:8f:34:c1:37:2b:8c:b8:f8:4e:
8d:db:b7:31:b8:9e:e0:6f:88:c0:cd:fb:60:ed:34:53:61:ea:
f8:2c:18:44:34:d6:42:46:7b:c4:48:df:29:39:20:c3:8e:d4:
15:7f:b6:e1:47:2d:8e:3d:68:aa:19:62:6a:bc:8e:0e:9f:d0:
ef:10:b7:5e:1a:30:cf:aa:1d:8e:38:79:b9:bc:03:d3:5a:cc:
db:85:e7:d0:1e:03:44:a2:11:b2:36:12:39:6e:cf:ea:b6:d7:
cf:8a:9c:79:94:55:41:61:e3:61:13:b6:25:9a:1e:ab:d8:3e:
c4:d5:d1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:02:14 2026 by rpki-client