Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: 6ntrV1MSWJ/qbUdslRrr79HOihCPvSnG+bUjT41z6Wo=
Subject key identifier: ED:77:EF:72:2C:AE:5C:D4:4F:3E:49:27:70:5C:7C:D7:A4:07:2C:8D
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019F9EF2322523503BD2369198EB377739FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 15:01:40 +0000
Manifest this update: Sun 26 Jul 2026 15:01:40 +0000
Manifest next update: Mon 27 Jul 2026 15:01:40 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: JZbGeIS9ZIbj1kvNtVUhdx8WfBCDfb+NH9vRC6pbGUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:32:25:23:50:3b:d2:36:91:98:eb:37:77:39:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Jul 26 15:01:40 2026 GMT
Not After : Jul 27 15:01:40 2026 GMT
Subject: CN=ed77ef722cae5cd44f3e4927705c7cd7a4072c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:4b:9e:6d:b4:02:4b:25:b7:d1:6d:6e:19:
38:b5:2e:98:f1:79:1b:63:c3:40:f8:fe:06:10:33:
0d:d7:41:5d:d7:cc:c8:1b:51:b8:cd:c9:0b:8b:ea:
91:0d:39:bf:ea:37:f5:7f:25:de:8f:2f:3f:4d:46:
d7:dd:b1:cf:66:21:64:a0:6b:56:99:64:f3:31:f0:
99:9b:ae:29:46:ad:56:89:02:18:df:19:11:75:32:
61:63:a9:39:52:7d:06:c7:a8:b5:74:5d:1a:8d:76:
64:c5:ad:61:c8:58:32:4a:8f:bb:4a:77:5c:f5:bd:
22:c6:ce:84:f9:cd:b5:7e:be:ce:4c:aa:f0:1e:87:
0c:26:70:db:3b:8a:fc:9d:5e:7f:71:66:24:f7:3e:
93:ca:82:95:c5:e0:4d:e1:66:56:a6:fa:21:6f:48:
8c:05:80:07:ff:a2:ce:4f:e2:fb:47:e9:65:fa:fe:
0f:fc:af:16:23:c6:f8:d5:0a:1e:a9:a6:0c:44:02:
73:7f:91:01:0f:0a:0a:32:a8:d7:bd:5a:4f:75:58:
bb:a4:3f:1c:15:7d:1b:11:41:90:7b:74:dc:4a:84:
0a:47:d4:f4:03:b5:c4:ad:e2:20:8f:b8:82:4d:13:
2a:c9:50:76:ff:b0:f4:de:42:f2:57:70:76:90:37:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:EF:72:2C:AE:5C:D4:4F:3E:49:27:70:5C:7C:D7:A4:07:2C:8D
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:32:ee:69:e9:da:7b:bd:fd:e4:02:ae:54:c3:e6:98:df:
c9:af:85:04:52:26:39:2b:1e:01:c4:f7:55:70:9a:c7:ab:fd:
5d:2f:3b:0b:c6:a4:da:8f:6a:40:f6:91:95:12:b1:36:59:0f:
d8:05:b6:6d:4e:8c:28:94:97:c2:6d:f2:5b:fc:cd:34:fc:75:
36:8a:4e:c3:6f:b8:4e:1c:82:31:e6:97:cc:d3:62:04:32:da:
6e:a9:c3:29:d7:3f:b3:57:d5:9e:37:eb:6a:65:84:69:c5:5a:
79:1c:4a:0d:2a:46:e5:e9:86:f1:6c:f0:e4:8a:ae:14:1c:cc:
f4:08:a9:88:92:8d:c0:6b:79:d5:72:eb:ee:5c:45:04:73:a8:
e2:e3:ed:58:63:7c:6c:8c:25:2c:47:e7:e6:36:80:a8:dd:23:
23:5d:78:f5:a1:6b:56:52:44:de:f5:95:fa:01:db:5f:05:df:
3a:86:22:27:d7:30:58:00:2c:ce:11:5f:52:11:ba:1f:01:62:
1e:12:16:2f:35:72:53:81:7b:25:01:b0:d9:22:00:c5:f5:c4:
30:34:45:25:d7:71:dd:39:8d:e0:d7:6f:5c:fe:03:8a:a6:76:
70:2a:5c:81:ad:7d:7e:05:73:13:68:0a:1e:80:1c:a4:3f:e3:
71:e3:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:09:50 2026 by rpki-client