Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: jVJgd0s0qq33U/HTJP2Dcb6WytKLp4paJZ3+BD/uHw0=
Subject key identifier: A1:EA:59:98:8B:0F:C6:47:6D:6B:25:C0:BD:B6:8F:42:A1:62:D0:3A
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019FFE375BC15164FE57F0911D13E86CC746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1980
Signing time: Fri 14 Aug 2026 03:01:08 +0000
Manifest this update: Fri 14 Aug 2026 03:01:08 +0000
Manifest next update: Sat 15 Aug 2026 03:01:08 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: 8pGcBWObGkBbYMOGh/CeUDRuB7oaMSK7ys+WDsBee6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:37:5b:c1:51:64:fe:57:f0:91:1d:13:e8:6c:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Aug 14 03:01:08 2026 GMT
Not After : Aug 15 03:01:08 2026 GMT
Subject: CN=a1ea59988b0fc6476d6b25c0bdb68f42a162d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:2d:1e:d7:86:5b:a5:fc:90:da:ae:6e:b8:
14:af:73:d8:fe:8e:ae:d2:06:6d:79:88:95:56:45:
ee:98:6e:c9:51:1a:33:5c:7b:46:81:32:75:e6:e5:
a3:37:fb:3f:02:90:11:15:4b:b3:b6:2e:84:f5:33:
76:60:29:3f:cc:f1:79:9e:25:73:6b:7b:1f:d9:5c:
cc:01:f7:18:62:55:9d:50:73:7f:bf:71:6c:3a:3b:
97:72:22:4b:9d:41:49:85:8c:58:b7:1c:4d:45:04:
8e:11:39:d4:10:77:c8:c6:46:9b:45:10:d7:35:0d:
e8:7e:0b:61:bf:3c:63:0b:1d:5f:c2:73:51:7f:06:
b5:1b:61:be:2b:d4:4c:c3:f0:c7:31:d6:84:28:4a:
0e:b0:9e:24:55:a5:a9:1c:e7:0c:fd:f3:aa:df:fa:
17:ed:64:36:6f:39:40:33:11:c1:ff:51:6b:32:7a:
9a:12:a9:8a:f6:85:31:66:4b:65:82:e1:b4:83:95:
60:43:83:d8:5f:f8:32:74:41:f5:b3:fb:d6:12:b8:
3b:98:ba:d3:2b:53:70:91:f5:21:7e:4b:a4:86:f7:
ad:1c:94:4a:93:c9:0b:a8:42:7e:35:aa:00:f0:a8:
34:c2:ef:d0:11:72:3f:09:d9:86:43:3c:95:27:a7:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:59:98:8B:0F:C6:47:6D:6B:25:C0:BD:B6:8F:42:A1:62:D0:3A
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d8:08:b1:0f:55:05:91:c8:f9:0a:79:b0:7a:5a:3f:75:49:
38:af:50:46:30:98:b4:db:b4:92:c8:bb:ca:da:52:ce:a1:80:
2b:c2:2c:8c:99:b3:8e:4a:84:3b:f7:68:88:49:02:5a:50:69:
be:b1:5d:ea:c9:c5:3f:8c:48:7c:d4:69:3f:b6:69:37:98:9d:
73:33:fb:d7:be:0c:cc:88:2e:30:13:be:e7:86:a3:65:88:07:
d1:8d:60:b8:e9:ae:83:ba:aa:01:da:59:df:fd:5a:5e:af:63:
01:ec:a6:a0:e2:b3:96:aa:08:f7:b5:92:3e:ed:f3:18:62:7e:
1f:2e:4b:87:34:3c:25:71:8f:8d:3e:f5:18:cd:0c:ff:d6:16:
6e:4c:b5:45:8e:7b:0d:b5:b3:39:f1:67:c5:fc:68:48:29:bd:
4e:29:8e:9d:75:85:db:1c:51:a4:ea:d9:31:83:71:c7:97:fb:
ed:64:5f:6a:c4:09:56:20:98:24:9b:d3:ff:83:93:49:ef:f5:
2f:2a:27:ae:c8:24:ef:25:6d:e4:04:7d:f1:1e:ae:72:ae:7f:
7e:66:9f:72:f1:74:f0:e5:20:de:d7:2b:c3:a3:d1:7d:14:9b:
88:d8:c0:91:93:63:43:79:de:aa:77:9f:60:81:b3:4c:91:70:
23:f0:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:56:04 2026 by rpki-client