Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: 5Hd7Upj78akKC/ib+s/mz6tapcV9tcUkvhQRreKCsCc=
Subject key identifier: 60:64:5B:E4:15:FC:1A:57:47:99:05:9A:80:4A:A3:0A:D4:5E:14:9B
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 01A0CB22866431BD35C2439D36CEDB203299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 0472
Signing time: Tue 22 Sep 2026 22:00:32 +0000
Manifest this update: Tue 22 Sep 2026 22:00:32 +0000
Manifest next update: Wed 23 Sep 2026 22:00:32 +0000
Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: txYaV6HCicQ6jIFEBi5FIzyavMDU8XPT4Lay03CS9Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:86:64:31:bd:35:c2:43:9d:36:ce:db:20:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Sep 22 22:00:32 2026 GMT
Not After : Sep 23 22:00:32 2026 GMT
Subject: CN=60645be415fc1a574799059a804aa30ad45e149b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:2d:f3:7f:04:c5:49:c6:a4:1f:97:d1:80:
d1:c7:3f:5d:00:e5:16:e1:4d:04:43:aa:64:27:ad:
a6:6e:47:19:53:dd:5c:50:58:25:c5:df:a3:2a:39:
30:30:73:ad:b2:ec:70:6b:53:7c:fa:c9:86:86:c8:
da:20:f6:ff:5d:94:11:e1:12:4a:18:eb:ec:38:ba:
0f:a0:a0:74:8e:fc:13:3d:73:6d:e3:0a:7a:70:c4:
89:b1:59:ad:d8:55:33:ee:33:da:a7:b3:09:35:0d:
1b:70:a3:68:9b:56:c1:39:06:37:11:b6:61:3a:70:
d1:b5:a8:0d:93:c6:e6:d4:0b:f8:8c:b7:9a:e1:dd:
36:eb:f5:3d:36:10:ef:3d:bd:f2:51:e4:38:94:a3:
86:12:c9:cb:54:c7:2c:c1:02:33:ac:90:b3:f0:bd:
ff:73:17:c8:2c:a7:8e:cc:9c:9a:85:8a:c2:6a:6e:
80:b0:8e:f8:fd:10:c7:71:6e:03:d3:3b:7c:95:ff:
70:73:d2:36:57:ec:33:c0:b6:39:5d:35:d4:07:54:
54:bc:8b:50:7e:f4:03:25:7d:32:b1:38:0f:e0:df:
8e:f8:42:a7:bb:62:e1:45:73:19:b5:75:d7:05:c8:
23:60:1e:0e:2c:c7:3c:d9:68:26:bc:6c:8e:90:9a:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:5B:E4:15:FC:1A:57:47:99:05:9A:80:4A:A3:0A:D4:5E:14:9B
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:a0:31:42:6a:16:0d:38:b3:a4:1c:80:47:1f:ee:20:cc:
98:2e:f5:59:14:d4:a8:db:aa:87:33:96:c8:3c:51:b4:6f:e5:
b7:0d:b6:0b:80:c6:cd:a2:68:fb:8f:5c:fd:44:11:d0:73:ac:
9c:1b:80:8a:53:d7:66:e7:ad:dc:08:08:0d:c9:5f:4e:6a:da:
f8:66:60:85:03:83:ca:18:ff:c1:3e:1c:63:a6:f0:b1:a8:64:
3f:71:64:08:d7:da:a2:df:01:88:c6:b9:6c:b1:45:29:a7:ab:
92:e3:a1:06:00:b7:61:e1:52:a7:c3:a5:fa:83:ab:94:78:dd:
7c:cc:7b:62:dd:b9:6e:1d:ed:45:2f:89:a0:bc:13:1b:3e:98:
15:88:49:4c:6b:44:ab:4c:6f:dd:3c:b2:9c:be:6e:d2:fd:4d:
07:67:6b:1d:fb:47:b3:18:77:28:22:97:2e:b6:08:29:30:fb:
68:a2:72:82:9d:d1:19:1c:e1:e8:d1:2d:62:4f:06:d8:af:e7:
e6:e8:97:2a:9b:ec:f1:6a:cf:d3:b1:f6:5c:88:4a:bc:21:9c:
63:d3:25:b1:8e:af:29:8b:35:e7:67:16:f1:49:fa:91:94:3a:
8b:63:41:4c:ac:46:21:05:fb:e3:43:86:f3:90:03:ef:1f:a5:
ca:6d:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:36:16 2026 by rpki-client