Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: uyAnEAGvXn7I0q5nwEEt5zW5U8ul4Jf0EXq/baKJSoE=
Subject key identifier: 55:F1:19:DD:53:F3:C1:19:7F:E0:CB:6C:5B:E2:37:E8:7B:C2:92:13
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 019D265FEDFF1E3E05203A599F70DBC5FCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:01:54 +0000
Manifest this update: Wed 25 Mar 2026 19:01:54 +0000
Manifest next update: Thu 26 Mar 2026 19:01:54 +0000
Files and hashes: 1: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (hash: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0=)
2: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: 5xfLjuCv72MPcekoO7EZ3YGVV7X/oA/AN2zqGv50kEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ed:ff:1e:3e:05:20:3a:59:9f:70:db:c5:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Mar 25 19:01:54 2026 GMT
Not After : Mar 26 19:01:54 2026 GMT
Subject: CN=55f119dd53f3c1197fe0cb6c5be237e87bc29213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:dd:3f:ec:e0:da:35:34:74:76:f8:c8:eb:
2b:87:c4:1d:de:d2:15:5a:cc:84:af:d6:66:7f:36:
12:e3:a9:20:90:36:65:94:9f:79:32:a8:cb:d3:49:
7d:18:bf:b7:d6:71:29:56:e5:a5:fa:72:ca:5a:aa:
dc:1d:10:40:ae:80:30:a2:ef:4a:ef:8d:9e:a3:7e:
48:b0:73:3f:1c:e8:fb:f2:22:ee:19:61:da:58:5d:
9b:67:fa:e5:60:b6:50:1a:22:38:4c:8e:4e:40:fe:
16:61:d7:54:e5:ba:1a:76:a6:03:94:1d:f8:bb:48:
ec:43:31:06:51:a5:6d:21:41:6b:bf:c9:54:73:7f:
19:bf:73:97:e1:99:a1:c5:29:b5:f5:c7:5d:ff:85:
38:44:e0:0d:aa:76:3f:be:74:8c:e4:57:6a:dd:56:
40:63:c9:9b:66:8d:26:1f:4a:8f:c6:65:05:82:53:
54:55:7b:93:92:3f:b5:e5:e2:04:d3:64:6b:fe:28:
e4:85:2b:74:61:f5:52:ca:83:10:7d:27:82:b5:29:
92:92:22:02:d0:ac:d9:6d:a5:8f:3b:c8:c1:31:2c:
9b:40:a1:18:eb:9b:d3:02:68:69:9d:1a:46:b2:35:
9c:b5:3b:02:e8:54:82:16:38:68:a6:c6:1c:4e:04:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:19:DD:53:F3:C1:19:7F:E0:CB:6C:5B:E2:37:E8:7B:C2:92:13
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:c8:b6:dc:47:45:90:8d:21:73:0a:4c:17:6d:ae:84:c7:
86:1d:20:c7:10:b2:e4:53:e6:60:a1:5c:7f:27:8a:49:61:d6:
df:55:f5:f4:62:ea:2e:00:83:c3:f6:da:8f:46:fe:75:b9:de:
19:79:b2:32:84:6e:b4:bb:96:97:3b:01:f9:63:01:12:4f:07:
72:91:e8:28:e1:06:70:80:07:ca:dd:de:7b:8e:05:a0:7b:01:
cb:a7:75:01:86:a6:36:01:99:2f:4b:6e:5b:3b:7b:e5:61:10:
ba:82:96:0b:30:4c:94:b5:25:b1:d6:d4:ce:fa:93:7e:96:53:
90:52:bc:85:a5:40:88:69:48:19:1b:09:89:f6:61:ec:f7:b0:
44:f6:29:25:15:c8:67:c6:d1:8b:5e:09:64:18:b5:d5:18:30:
3e:36:35:60:ca:3a:d9:4d:ee:8e:39:d6:30:4c:f7:36:04:88:
4c:21:c6:98:24:e2:a4:26:56:0a:87:a0:67:ee:4b:47:0b:db:
76:aa:c6:c1:69:18:69:0b:59:28:5f:a5:a8:94:61:58:92:7d:
84:e0:e7:b3:3b:5d:4a:42:1f:00:aa:e5:36:08:6a:cd:16:34:
a8:66:58:c9:92:be:e4:79:bd:39:e8:cf:33:c4:02:4c:a5:1c:
a9:42:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:36 2026 by rpki-client