Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: 513D2Qk/idFRMmnM0z9hP+zrJauyu13+JE+EKaXFLog=
Subject key identifier: DC:4D:B1:91:8D:81:A4:AB:24:A0:C5:9F:E7:3D:3E:5F:64:24:2C:F7
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 019D33AD0C63709586CD666DF2497497BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 09:01:12 +0000
Manifest this update: Sat 28 Mar 2026 09:01:12 +0000
Manifest next update: Sun 29 Mar 2026 09:01:12 +0000
Files and hashes: 1: K-cjaXfz6hrAFe5r_hKzME7n-j0.roa (hash: c/D1oKxdYXnN+dp7p3G40OM2dsMHZRlxo/zdopbIxGs=)
2: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: PvASMmy1UahTf974E+foTZXnHgpr2GrBXX0ymn5izdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:0c:63:70:95:86:cd:66:6d:f2:49:74:97:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Mar 28 09:01:12 2026 GMT
Not After : Mar 29 09:01:12 2026 GMT
Subject: CN=dc4db1918d81a4ab24a0c59fe73d3e5f64242cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d4:1e:41:78:bc:e4:ba:bd:04:00:51:4e:7b:
1d:d1:56:53:cd:c5:f8:11:b6:b2:16:fa:ee:67:c8:
b4:06:15:07:1c:a6:02:29:d6:7e:27:3b:1a:5b:69:
92:68:ac:58:d5:5b:1c:bf:5c:93:e0:af:bd:ac:14:
e2:59:d4:2a:0b:3d:db:7d:b8:e2:98:5e:99:fd:76:
39:89:4b:29:26:a7:64:cb:04:cc:6e:aa:9c:44:17:
e8:47:b1:5c:ec:50:0a:7e:67:19:cb:8e:da:f6:8b:
93:c7:ec:22:b3:4c:76:f2:45:8b:73:a0:44:d9:2d:
73:33:45:a5:f4:8e:f5:b7:bf:e3:c4:d8:4e:78:06:
dd:a2:00:10:1b:9c:74:95:a4:2f:a0:a6:e1:4a:ee:
4f:8d:68:7f:db:00:79:46:55:e5:34:91:b7:f2:3d:
dc:e2:5e:ae:15:73:78:f7:cd:97:ae:8f:89:53:f2:
eb:86:eb:46:dc:a1:95:89:56:fa:60:12:33:18:9c:
30:40:07:5f:fe:ac:6f:22:bd:18:0f:1c:65:1a:79:
af:e4:b6:bb:69:52:dd:f4:3e:ce:3c:1d:e5:9c:ee:
2b:88:0e:9f:33:d2:da:4e:66:af:49:f8:5e:59:42:
de:59:69:60:b1:e7:5e:54:5b:89:9b:b2:58:bb:24:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:B1:91:8D:81:A4:AB:24:A0:C5:9F:E7:3D:3E:5F:64:24:2C:F7
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:70:4e:86:a2:a8:14:d7:a7:2f:10:20:1b:51:17:d7:69:
42:e5:60:7f:bc:f2:7e:19:50:c1:d2:07:4c:dc:c6:d4:bb:0a:
c9:cc:95:ef:e5:80:e6:89:f0:a6:b2:5d:6e:a8:6b:ad:e2:5f:
6e:8c:54:9f:d9:e1:69:fe:db:d5:de:39:51:de:29:66:0e:f6:
bf:0b:3b:25:5a:2d:37:07:6f:f1:8f:3f:4f:4f:d7:2a:1f:8a:
71:c4:ee:7d:c1:a3:ca:a5:72:e4:ce:34:5b:c8:5c:3d:8e:70:
3b:5b:25:97:c0:a4:c7:bb:6a:63:34:c2:8c:fe:8d:66:5a:84:
3d:d9:a4:f8:77:5f:78:14:2c:ad:fc:6b:79:a6:cc:f9:6c:cd:
13:cf:ee:b5:8e:64:ae:11:0f:b6:0f:72:cf:e7:af:b7:76:e0:
4f:17:a2:4e:d2:93:09:e8:91:59:82:3d:f0:7c:2a:46:7e:02:
b0:b6:89:19:5d:bc:ab:07:7d:10:bd:0e:cb:e6:63:76:a3:b0:
5a:16:de:e7:39:03:e6:92:4b:0a:0a:9e:70:43:55:a6:79:df:
89:ed:2c:dd:2e:96:2b:e3:fe:8a:d9:7b:b9:f8:b6:71:ab:d5:
57:00:d7:ea:c6:f5:d2:42:3c:2b:dd:e6:37:11:7b:c0:4a:a3:
4c:b9:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:29 2026 by rpki-client