Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: exUusEupLtDcFhwp5px0TqZ3cjy+c/uTpoVYljIyH/o=
Subject key identifier: B7:7F:64:B0:22:82:E9:D5:34:A0:63:0F:7B:91:55:48:BB:98:94:DD
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019F1A55E1773A2EEC32ACBE8E60DC6F2279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 07D3
Signing time: Tue 30 Jun 2026 21:01:03 +0000
Manifest this update: Tue 30 Jun 2026 21:01:03 +0000
Manifest next update: Wed 01 Jul 2026 21:01:03 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: b0q9NikrKBw9KzN7Ghj+BbPWuw5CFRy9qEw/XsJKUZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:55:e1:77:3a:2e:ec:32:ac:be:8e:60:dc:6f:22:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Jun 30 21:01:03 2026 GMT
Not After : Jul 1 21:01:03 2026 GMT
Subject: CN=b77f64b02282e9d534a0630f7b915548bb9894dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:4c:71:d5:32:d8:18:87:f4:11:52:4b:4f:
a2:b5:6c:a9:fc:66:b9:42:e8:9e:7e:e1:e3:4d:79:
ba:5e:5d:23:d1:d5:16:9f:45:1f:75:12:52:50:97:
89:47:bf:68:33:71:9a:4d:33:d1:f3:69:13:02:f7:
1f:35:7d:06:35:10:cc:88:9f:d8:db:7e:aa:36:e1:
be:27:b3:f2:50:7b:ee:a5:ce:a9:42:fc:31:a5:d6:
60:d3:de:b0:7c:c1:8a:19:73:70:59:a6:0a:8b:37:
e2:f0:60:11:b8:7c:31:a6:a5:15:2b:4f:cf:f7:33:
af:90:c7:20:91:8c:ce:38:27:ea:69:20:c0:52:b2:
1b:85:b8:64:53:68:8d:30:1f:b5:03:bd:37:61:ea:
06:6e:29:15:bb:6d:5c:0e:75:fb:0a:a6:34:51:fe:
16:4b:bc:40:da:90:3c:ef:55:d3:37:b0:ce:b7:92:
20:1b:7d:b9:ea:39:3e:77:82:f5:7f:a3:2e:08:e2:
48:59:bf:10:f6:32:5b:c2:97:74:b1:80:6f:36:67:
1b:df:dc:4e:07:ee:64:c3:de:60:c7:55:1c:ee:9e:
e2:53:65:b4:60:23:a7:54:70:56:c6:c2:7f:53:e3:
6d:c3:bc:5d:d4:6c:04:3a:8f:a2:0c:26:ed:c5:9e:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:64:B0:22:82:E9:D5:34:A0:63:0F:7B:91:55:48:BB:98:94:DD
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f4:5a:09:29:6a:36:e2:f8:5d:e4:f4:8a:6a:e4:6a:58:94:
91:48:27:31:a4:68:c6:77:6e:fa:ff:9f:30:f5:db:41:9d:0f:
af:1e:9f:2a:b9:d6:8f:5c:88:99:43:56:e6:18:25:8d:ae:d3:
8b:18:f5:01:03:d9:a7:25:e6:88:ce:0b:4a:ac:4a:a3:3b:16:
1b:6d:60:04:a9:52:ff:72:6f:10:3b:be:e3:bd:72:66:f4:23:
5c:5a:5b:0d:fe:73:fe:2a:1d:d6:68:15:85:56:f2:c3:17:7a:
af:cc:b9:e3:87:c8:fd:88:45:33:ce:82:71:d5:6c:4a:a8:75:
64:4a:f1:21:47:5a:af:ac:04:2b:13:10:99:c1:4a:4d:7b:5a:
95:fd:d9:1e:72:23:e5:b6:d4:2d:43:45:eb:58:4e:89:55:4f:
9f:14:47:a9:77:71:7f:cb:9c:77:9c:46:d3:e2:9f:89:31:c5:
9d:92:39:b5:d9:18:71:22:f8:a3:49:26:2b:18:38:06:1e:18:
be:e3:17:28:4f:f4:26:2a:be:c7:c9:9d:16:8b:80:53:f6:ba:
80:a8:7d:de:31:f9:eb:0f:1a:32:b8:c6:13:58:f9:d6:a7:eb:
fc:9f:11:ea:a3:1f:69:02:95:c8:71:dd:e8:0a:80:97:87:e7:
e7:03:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:51 2026 by rpki-client