Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: d5ibJhQCSD5pC+tjqybDQjzHYEahCOS+FstRoaUc30o=
Subject key identifier: B9:49:12:42:B7:7C:43:6C:7D:9D:E2:09:7F:75:25:FC:3C:82:47:8E
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019F18678E623CA90357455A99C0BA38F580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 07D2
Signing time: Tue 30 Jun 2026 12:01:07 +0000
Manifest this update: Tue 30 Jun 2026 12:01:07 +0000
Manifest next update: Wed 01 Jul 2026 12:01:07 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: DeO3XyGzmqff7rDa5ajqC0HnLYlDnV/AseHMoZCijaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:8e:62:3c:a9:03:57:45:5a:99:c0:ba:38:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Jun 30 12:01:07 2026 GMT
Not After : Jul 1 12:01:07 2026 GMT
Subject: CN=b9491242b77c436c7d9de2097f7525fc3c82478e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:49:d1:ca:b6:ee:e0:19:72:ef:b0:26:16:
19:ea:78:eb:7c:91:92:60:91:16:30:21:dc:d0:24:
02:78:d2:b7:20:1f:e0:cf:26:34:cc:9e:a7:23:01:
d7:b3:4d:8f:ff:b8:af:fb:06:a9:8e:a5:27:dc:dd:
1b:79:82:04:b7:ff:a0:ef:32:e1:77:c9:48:d9:12:
9d:cf:06:44:43:b4:6a:22:bc:39:25:92:d9:60:73:
fb:be:89:27:b0:5f:01:57:67:b4:ca:13:57:f8:6c:
80:10:c2:ea:98:5a:ae:5f:fd:1b:5b:d1:85:1c:4f:
5b:e7:0d:3e:f3:f2:15:61:14:83:20:17:74:b5:46:
26:96:43:93:bb:8d:a0:56:6e:5d:2b:a3:2d:cf:4f:
ce:cf:d3:56:97:4a:99:25:30:cf:6c:df:5f:04:73:
d1:b3:0d:03:bd:89:4f:a5:dc:78:68:19:a6:d6:a5:
8f:5f:03:ce:fb:6b:1d:ac:2b:c3:89:4a:72:38:b0:
04:91:20:1d:25:8a:c4:74:d3:44:56:78:82:c4:c6:
9f:ae:73:a1:d9:e7:4e:7e:10:fc:4c:29:7e:34:ac:
6a:9f:3e:b3:54:92:63:9b:4f:bc:af:47:39:6b:e7:
fe:a8:67:66:09:cf:ff:e0:d3:58:e7:45:43:15:45:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:12:42:B7:7C:43:6C:7D:9D:E2:09:7F:75:25:FC:3C:82:47:8E
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:06:57:d3:c8:63:93:77:f4:91:e1:f1:a7:47:b3:04:c4:
29:ef:14:2d:a2:55:0d:09:c0:8d:76:85:87:22:20:cf:dd:3a:
10:46:92:e3:24:34:cb:8c:0f:1a:dc:f8:95:ce:79:c6:86:fc:
f9:dc:43:b8:22:42:be:a7:af:27:37:0d:09:9f:43:e3:a3:1f:
37:6f:12:c5:c8:e1:34:70:7e:44:b2:d7:9c:19:45:f3:5e:fd:
4f:40:0c:5f:6e:81:41:ab:91:fb:33:e6:66:cb:4f:33:b7:89:
15:6c:c7:2a:fd:8b:74:23:c8:7e:dc:b7:4a:be:65:50:1b:65:
f8:ff:8a:e9:be:99:90:8e:24:66:5d:e6:4a:a6:86:1d:c2:ec:
2b:d8:2b:fa:9a:7d:4e:5a:fa:80:86:ec:06:20:51:b0:1c:f6:
6b:3a:d2:a0:7c:b8:6b:af:bb:f3:1c:a4:25:f1:88:c2:5f:59:
67:af:6f:17:ab:64:ec:4e:23:f9:22:96:b9:d7:5f:59:32:27:
69:28:8c:11:6e:1f:f6:62:70:7f:a0:c2:07:ae:94:37:8f:64:
99:ce:c7:a0:66:1d:37:7e:50:a0:5a:52:98:e6:29:7a:13:03:
a4:12:a9:a7:f9:e0:14:a4:58:50:11:4b:c9:b0:28:a0:ae:dd:
fe:c9:46:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ45iPKkDV0VamcC6OPWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw
NzY1NGQwHhcNMjYwNjMwMTIwMTA3WhcNMjYwNzAxMTIwMTA3WjAzMTEwLwYDVQQD
EyhiOTQ5MTI0MmI3N2M0MzZjN2Q5ZGUyMDk3Zjc1MjVmYzNjODI0NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w5J0cq27uAZcu+wJhYZ6njrfJGS
YJEWMCHc0CQCeNK3IB/gzyY0zJ6nIwHXs02P/7iv+wapjqUn3N0beYIEt/+g7zLh
d8lI2RKdzwZEQ7RqIrw5JZLZYHP7voknsF8BV2e0yhNX+GyAEMLqmFquX/0bW9GF
HE9b5w0+8/IVYRSDIBd0tUYmlkOTu42gVm5dK6Mtz0/Oz9NWl0qZJTDPbN9fBHPR
sw0DvYlPpdx4aBmm1qWPXwPO+2sdrCvDiUpyOLAEkSAdJYrEdNNEVniCxMafrnOh
2edOfhD8TCl+NKxqnz6zVJJjm0+8r0c5a+f+qGdmCc//4NNY50VDFUXRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlJEkK3fENsfZ3iCX91Jfw8gkeOMB8GA1UdIwQY
MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt
MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz
LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbg4GV9PI
Y5N39JHh8adHswTEKe8ULaJVDQnAjXaFhyIgz906EEaS4yQ0y4wPGtz4lc55xob8
+dxDuCJCvqevJzcNCZ9D46MfN28SxcjhNHB+RLLXnBlF8179T0AMX26BQauR+zPm
ZstPM7eJFWzHKv2LdCPIfty3Sr5lUBtl+P+K6b6ZkI4kZl3mSqaGHcLsK9gr+pp9
Tlr6gIbsBiBRsBz2azrSoHy4a6+78xykJfGIwl9ZZ69vF6tk7E4j+SKWuddfWTIn
aSiMEW4f9mJwf6DCB66UN49kmc7HoGYdN35QoFpSmOYpehMDpBKpp/ngFKRYUBFL
ybAooK7d/slG+A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:46 2026 by rpki-client