Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: 8gZRZjGXzHaUaHibUyGBV8WfbQvIMltuGLBLNNjjFxo=
Subject key identifier: 08:1C:CD:F2:8F:55:D0:6A:E5:67:BA:36:37:0E:BC:8F:1B:97:D3:78
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019F82679DA3E1B032BE91252567EC4367AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 19BD
Signing time: Tue 21 Jul 2026 02:00:56 +0000
Manifest this update: Tue 21 Jul 2026 02:00:56 +0000
Manifest next update: Wed 22 Jul 2026 02:00:56 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: 5oqWiwxwitG3g9EOr3tPq/iJXq81V/3yvEpXWbMFbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:9d:a3:e1:b0:32:be:91:25:25:67:ec:43:67:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jul 21 02:00:56 2026 GMT
Not After : Jul 22 02:00:56 2026 GMT
Subject: CN=081ccdf28f55d06ae567ba36370ebc8f1b97d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:8c:e0:58:ca:45:15:9a:a9:75:ac:94:ed:
74:e7:e0:ac:55:1c:6a:da:3c:91:59:7d:80:5d:37:
34:c0:94:de:fb:e2:8f:94:73:df:19:29:29:36:b8:
50:b7:ca:b2:70:b1:ff:db:ce:eb:4a:af:cf:71:6d:
aa:16:0b:15:a1:12:5d:ba:e5:b0:e1:d3:f5:63:69:
10:0c:14:4d:e5:b4:3f:2f:cd:dc:1a:f4:2c:1b:34:
9f:77:ba:52:b2:0a:f3:e3:68:6d:86:9e:da:5b:85:
d6:1d:31:1e:3f:1b:ae:99:b8:19:95:e2:5b:8e:bd:
48:66:2a:ad:bc:a9:a0:cd:ba:f4:32:58:05:15:f2:
c7:46:a9:14:7d:4b:6d:34:f2:f0:b3:48:a9:7d:40:
03:39:b8:3a:13:93:1d:d8:d1:75:77:4e:67:09:63:
99:41:e3:e5:ba:1f:d4:eb:c1:69:09:d3:43:f1:90:
78:8c:aa:ad:ba:34:31:70:ed:89:f3:f7:b7:14:d9:
16:a9:fd:95:f7:b9:a0:d9:58:14:c8:3c:ad:b6:82:
9f:e1:7e:e1:19:78:dc:3b:92:9f:43:26:5c:0c:fe:
a0:5f:fb:4c:68:6c:84:fd:71:ef:c3:f1:ce:32:cb:
b3:b8:d7:27:32:d5:24:d4:02:4d:d9:ba:66:94:89:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:CD:F2:8F:55:D0:6A:E5:67:BA:36:37:0E:BC:8F:1B:97:D3:78
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:1c:3a:17:2a:74:32:f5:83:18:82:6c:e2:67:c6:f7:6d:
fe:ca:97:ad:4b:6f:52:c0:2c:24:53:93:db:b2:f1:aa:d3:13:
db:e5:a4:17:71:1d:9a:2a:f2:ad:82:11:85:a9:35:a7:ec:f2:
a9:e6:c0:66:e9:06:d2:ba:32:14:ce:6f:37:88:28:54:e7:57:
db:9b:9f:8f:7b:2e:eb:1e:f5:7e:3e:51:98:fa:a3:67:f9:04:
c1:5d:c8:55:c9:47:c0:de:97:28:e1:63:f9:4d:1d:00:36:6b:
aa:77:f2:00:f4:d0:a0:bf:9d:2f:93:44:c1:f5:84:91:90:e2:
31:2d:f1:d4:fd:6f:37:d2:66:ad:c9:a8:03:1d:3b:c4:80:ed:
8b:cb:03:01:eb:89:88:01:3c:b4:cf:2a:e5:15:d8:41:e4:bc:
47:f7:88:01:d3:a0:8b:56:8e:88:bb:5f:04:15:80:4f:4b:6d:
34:24:4c:9a:1b:d4:89:93:e3:b1:56:a2:69:2a:b8:ce:2c:49:
ca:5c:b1:09:5b:26:48:56:1e:f2:ef:c9:35:39:e3:3f:31:37:
ea:84:85:93:a4:17:e8:76:bf:34:9a:64:e6:5f:38:f3:37:82:
0a:1c:f7:e4:4b:06:77:8c:91:35:78:32:57:d9:02:58:99:d2:
4e:91:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:03:03 2026 by rpki-client