Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: mKMdvxcpYV7DSYrgS5xnUxG1Kc1AxrK57KCdmEMAEuM=
Subject key identifier: 76:79:B3:A4:52:BD:7D:9C:3D:F4:F5:85:35:BA:30:3F:6C:52:54:6C
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019FA14D33E539756A10EEDB89AFEC6042DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0903
Signing time: Mon 27 Jul 2026 02:00:19 +0000
Manifest this update: Mon 27 Jul 2026 02:00:19 +0000
Manifest next update: Tue 28 Jul 2026 02:00:19 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: QNISxCuOEaTU1iDZxgf4heOoDaCvz5E5QTk0a7XwIWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:33:e5:39:75:6a:10:ee:db:89:af:ec:60:42:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Jul 27 02:00:19 2026 GMT
Not After : Jul 28 02:00:19 2026 GMT
Subject: CN=7679b3a452bd7d9c3df4f58535ba303f6c52546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:14:84:fe:59:7e:f4:19:dd:1f:96:34:fe:
50:77:d9:71:da:ff:80:1b:94:01:56:01:4b:67:b8:
5b:77:4a:94:a0:9d:bc:96:ea:be:b0:08:4d:81:9e:
4a:f0:4e:ed:74:9c:90:36:94:9e:54:21:2e:a4:ae:
d2:f4:ad:b6:e3:02:3c:26:23:6d:49:b0:50:46:0f:
79:9b:ee:be:2a:78:54:25:08:b8:39:eb:8b:cf:c0:
7a:29:90:e4:ba:7b:c5:51:76:3a:15:8c:76:e4:76:
7c:7e:0c:48:9e:3e:65:a2:ab:9d:ff:9c:67:e0:4d:
e5:86:55:fa:b7:72:2e:55:22:b6:61:fa:b4:22:5b:
99:e1:ca:94:81:f2:c0:6e:61:ce:69:eb:56:7d:01:
99:5b:67:7c:cb:03:86:7f:d8:d8:cb:fd:b4:64:aa:
85:99:b8:68:e5:b9:9f:28:9b:7e:9c:b3:53:3c:9b:
74:30:57:23:3d:1d:1b:5e:e4:df:ba:af:90:5e:06:
66:1e:f2:3b:03:7b:42:0c:59:82:d6:ed:f3:ec:64:
a4:15:0e:b2:bd:04:d4:28:26:a3:3b:09:c7:33:36:
e9:83:98:14:fd:64:4a:13:a1:eb:a9:1d:22:de:72:
e9:5b:5e:ae:64:c5:d5:32:94:d4:d2:22:c7:43:0b:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:B3:A4:52:BD:7D:9C:3D:F4:F5:85:35:BA:30:3F:6C:52:54:6C
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:af:09:0f:13:ce:93:04:36:24:b0:de:3c:ef:41:cf:37:ec:
52:42:b8:40:50:f0:b4:fd:d0:0f:57:e2:c4:15:71:ec:0a:22:
b5:4b:0b:f8:40:69:63:64:e0:9f:24:eb:d0:8c:67:7c:7e:67:
02:98:cf:6c:81:9e:a5:4a:66:ed:29:7c:79:ff:96:1d:d5:99:
a0:52:13:50:7b:f7:e5:d5:61:9c:f0:93:d3:81:7f:e1:5f:ac:
1c:01:02:86:8c:ef:eb:a1:81:00:a1:15:5d:3a:13:bb:73:d1:
12:5c:44:aa:2f:21:57:54:de:74:0a:a0:78:0d:cc:6c:0c:63:
cc:d3:ef:22:d9:6d:e5:ed:8e:c7:27:72:d7:5a:d6:df:3f:af:
4d:90:61:07:8e:2d:e0:c6:97:97:46:2d:4d:43:80:22:7b:a4:
ad:fe:ba:b9:ec:05:0a:5a:af:34:c1:80:b0:1e:5b:a6:4c:dc:
3a:54:78:3f:24:94:d1:1e:48:96:97:a1:c1:d4:5f:f2:d0:53:
aa:6c:d2:cf:14:7e:84:a4:28:b3:85:18:dd:7f:c2:f1:4d:de:
6a:92:89:c0:46:75:1e:aa:c2:9e:d4:04:9e:26:31:8e:b9:4a:
82:50:7d:79:28:3a:d3:d0:85:ac:50:81:2d:0e:64:ec:29:73:
f5:8f:2e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTTPlOXVqEO7bia/sYELdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx
Y2Y0ZDYwHhcNMjYwNzI3MDIwMDE5WhcNMjYwNzI4MDIwMDE5WjAzMTEwLwYDVQQD
Eyg3Njc5YjNhNDUyYmQ3ZDljM2RmNGY1ODUzNWJhMzAzZjZjNTI1NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq20UhP5ZfvQZ3R+WNP5Qd9lx2v+A
G5QBVgFLZ7hbd0qUoJ28luq+sAhNgZ5K8E7tdJyQNpSeVCEupK7S9K224wI8JiNt
SbBQRg95m+6+KnhUJQi4OeuLz8B6KZDkunvFUXY6FYx25HZ8fgxInj5loqud/5xn
4E3lhlX6t3IuVSK2Yfq0IluZ4cqUgfLAbmHOaetWfQGZW2d8ywOGf9jYy/20ZKqF
mbho5bmfKJt+nLNTPJt0MFcjPR0bXuTfuq+QXgZmHvI7A3tCDFmC1u3z7GSkFQ6y
vQTUKCajOwnHMzbpg5gU/WRKE6HrqR0i3nLpW16uZMXVMpTU0iLHQwuFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ5s6RSvX2cPfT1hTW6MD9sUlRsMB8GA1UdIwQY
MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt
ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl
LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq8JDxPO
kwQ2JLDePO9BzzfsUkK4QFDwtP3QD1fixBVx7AoitUsL+EBpY2TgnyTr0IxnfH5n
ApjPbIGepUpm7Sl8ef+WHdWZoFITUHv35dVhnPCT04F/4V+sHAEChozv66GBAKEV
XToTu3PRElxEqi8hV1TedAqgeA3MbAxjzNPvItlt5e2Oxydy11rW3z+vTZBhB44t
4MaXl0YtTUOAInukrf66uewFClqvNMGAsB5bpkzcOlR4PySU0R5IlpehwdRf8tBT
qmzSzxR+hKQos4UY3X/C8U3eapKJwEZ1HqrCntQEniYxjrlKglB9eSg609CFrFCB
LQ5k7Clz9Y8uvg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:25:55 2026 by rpki-client