Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
File: lKszmh2jvU9yxzAm71jQthrSdwU.mft (raw, json)
Hash identifier: q9lkEjgU7lLPTttIyA7ajFjdA4m57Qa0IlBhcr/ElLI=
Subject key identifier: 85:64:1E:5A:2F:FD:0F:5D:8A:0F:5E:13:A5:67:75:A3:B9:9D:0A:A3
Authority key identifier: 94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
Certificate issuer: /CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Certificate serial: 01A0035D910AE834588A4E3168F3BF31E850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:00:58 +0000
Manifest this update: Sat 15 Aug 2026 03:00:58 +0000
Manifest next update: Sun 16 Aug 2026 03:00:58 +0000
Files and hashes: 1: lKszmh2jvU9yxzAm71jQthrSdwU.crl (hash: 5cO8luYEAuOy8SAcLXG0q7QU5gxof6guhPV2dZSFYVQ=)
2: x9nNlfs0usqpB2CNLeFBhg8w00s.roa (hash: QOAivhfYhLBa/7NTmG8pgN02rXOKaoOyTZQs87c3v4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:91:0a:e8:34:58:8a:4e:31:68:f3:bf:31:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ab339a1da3bd4f72c73026ef58d0b61ad27705
Validity
Not Before: Aug 15 03:00:58 2026 GMT
Not After : Aug 16 03:00:58 2026 GMT
Subject: CN=85641e5a2ffd0f5d8a0f5e13a56775a3b99d0aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:a4:83:f4:d5:13:24:af:89:eb:a3:39:ca:
20:36:e1:6e:ef:ac:40:11:af:1d:bd:ce:72:b3:43:
58:41:8b:69:38:65:52:04:f8:10:c0:17:8a:b2:d0:
95:0d:14:ce:0b:5a:1b:55:b6:9c:c2:27:58:39:84:
b4:96:23:7d:33:bb:5d:a6:90:8a:fe:f1:63:75:47:
1c:d5:27:4a:8b:86:f2:11:a5:6f:6d:93:24:7a:d4:
5f:98:d4:6a:e4:57:20:1f:1b:9a:ba:11:a6:1b:05:
b4:54:71:5a:92:0b:d4:ff:e1:2e:e1:33:62:f5:87:
7c:92:b6:90:53:c1:67:f5:f7:c9:9b:00:99:16:68:
d8:66:7f:47:dd:9a:64:4e:4a:1d:21:f2:09:5d:98:
16:c2:84:71:3b:32:80:71:6a:5c:31:b0:ab:8c:09:
59:31:84:df:65:53:e0:11:a9:3e:1c:7b:00:2f:0e:
eb:e9:a0:f4:d3:dc:4a:04:b8:db:88:9c:8c:15:cd:
34:29:e4:40:80:e9:f3:b7:fc:69:39:36:5c:fc:99:
f0:eb:99:ab:7b:49:57:75:fd:a1:73:7d:92:25:76:
35:b4:2d:08:4c:fd:18:5f:f4:51:f6:c9:ac:f0:e2:
ea:33:f7:d7:73:2a:b1:5c:0b:c1:5d:9b:f1:03:64:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:1E:5A:2F:FD:0F:5D:8A:0F:5E:13:A5:67:75:A3:B9:9D:0A:A3
X509v3 Authority Key Identifier:
keyid:94:AB:33:9A:1D:A3:BD:4F:72:C7:30:26:EF:58:D0:B6:1A:D2:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKszmh2jvU9yxzAm71jQthrSdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/lKszmh2jvU9yxzAm71jQthrSdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:86:41:2b:14:c9:46:a8:7e:90:73:6c:f2:a1:fb:db:a6:
27:4a:5c:9c:44:4e:c6:0d:fa:5f:6a:5c:bb:77:28:e6:e4:7c:
a4:2c:d1:46:58:1e:02:3a:41:84:71:92:c4:f6:9e:62:d7:89:
f9:66:1c:cf:6e:4e:f0:09:48:27:36:f0:ba:13:a3:f6:9f:6c:
d2:f4:46:15:55:b0:2b:d1:8b:51:d7:52:32:4b:9b:b5:d3:bd:
bc:c0:17:2d:03:d2:fe:c5:a5:23:76:b7:1c:66:7a:d4:99:66:
dd:9c:9f:ec:ca:8b:e8:d4:9c:71:f1:f5:e2:ae:5a:25:b7:95:
f9:55:4d:01:70:af:2c:e3:3a:04:b0:35:87:bc:23:ba:37:55:
4a:98:fc:b9:bc:05:52:c0:01:4c:93:d0:27:36:93:d5:0a:21:
a2:83:60:22:23:f3:85:fd:c5:2b:fc:1d:e0:c7:89:38:5f:fb:
72:16:15:06:67:42:fb:1f:5b:92:e6:87:08:bd:3d:61:db:fc:
78:3e:0f:ec:b4:11:74:11:de:91:59:18:55:6d:6f:05:66:be:
22:08:35:f8:94:28:e9:da:c4:fb:8b:40:a5:09:d2:ca:38:50:
b1:20:92:f2:30:17:2d:b8:9b:33:87:d8:42:d4:64:6c:6b:40:
b3:25:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:53:55 2026 by rpki-client