Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: Ae6/ggndtrYq64mctO+pK+Sf3BL3u4EVrvOr+MlrjE4=
Subject key identifier: 81:4C:F8:ED:55:F9:D7:60:01:40:DF:03:E1:78:34:13:0C:C9:DB:B7
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 019E1FECEB1FA541A5BC29015C108CC52892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 18A8
Signing time: Wed 13 May 2026 06:01:20 +0000
Manifest this update: Wed 13 May 2026 06:01:20 +0000
Manifest next update: Thu 14 May 2026 06:01:20 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: ee6NOq+AilsP0Xyn91Cax2ZU+HXiw2hYT1kRDHE+fdw=)
2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:eb:1f:a5:41:a5:bc:29:01:5c:10:8c:c5:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: May 13 06:01:20 2026 GMT
Not After : May 14 06:01:20 2026 GMT
Subject: CN=814cf8ed55f9d7600140df03e17834130cc9dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:4a:d6:f0:c2:54:a8:77:57:4e:36:c7:2c:
e4:15:4c:37:6a:e4:bd:47:61:26:e6:a5:47:eb:e8:
8b:c8:ff:7b:ce:03:ba:ee:f4:df:90:dd:a9:f2:ee:
b6:b8:ab:07:2f:bd:85:04:ac:6c:45:16:50:9b:ee:
e6:a1:3a:06:8c:e3:aa:e6:0d:a1:39:4f:32:50:1a:
92:6f:b7:85:ce:b4:0f:fa:4c:81:74:8d:aa:7b:7f:
f2:5f:70:0f:d6:9b:ef:24:38:53:85:22:8b:44:66:
08:78:9b:74:30:01:98:6f:7a:d3:d3:e2:b4:84:99:
5e:b4:b0:23:ef:8c:3b:67:a8:51:3e:9a:28:ea:9e:
bb:a6:37:87:5a:92:09:5e:fb:c8:57:14:0b:43:f6:
53:82:68:89:99:67:00:fa:a7:29:df:2d:2a:fe:8b:
bc:18:56:4f:91:63:5a:9b:ce:d2:91:58:32:56:da:
9a:12:94:74:e9:3c:59:70:e3:a4:76:1f:a7:12:e1:
6e:e9:b2:42:91:68:7a:95:8c:a4:90:c0:00:b1:d0:
44:8e:95:a5:d8:c4:f4:03:16:46:84:8d:39:37:d4:
e4:94:6a:e0:e1:12:e0:34:34:a2:9e:61:02:b0:c5:
61:6e:43:a1:1f:7b:f1:12:97:47:fd:47:df:78:19:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:F8:ED:55:F9:D7:60:01:40:DF:03:E1:78:34:13:0C:C9:DB:B7
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4d:3c:40:8e:c3:26:b4:3c:b6:7a:2f:f6:21:7a:1e:0f:4e:
ee:fb:ca:3f:b6:f3:37:5f:a1:d4:36:d7:a8:b3:3a:d2:64:1c:
13:41:44:b5:7d:a6:c5:11:cf:c7:67:cd:0c:1e:a9:6b:a7:89:
0d:27:c2:43:eb:1b:da:b4:b5:3f:f3:ae:23:1a:18:9a:9f:86:
18:e9:11:82:70:60:ed:d7:d5:4e:96:d7:9b:a9:5e:57:4c:a3:
21:fc:e7:0b:1f:42:11:6d:d1:7f:7a:c0:c6:70:41:19:d8:39:
56:72:bf:e2:ca:d1:c5:c3:c5:76:a7:a8:d5:1c:ff:a4:2d:34:
d2:ad:45:16:e6:f9:19:34:c2:90:54:d0:e2:fd:e7:27:3d:f2:
cb:7a:84:3d:88:21:bd:5e:61:ea:b1:5f:0a:9e:24:9d:34:ab:
d9:0e:d0:d3:5d:99:2c:a0:25:71:e9:83:d6:bc:2a:5a:19:af:
8a:7d:fb:06:65:ab:c0:63:a4:37:fc:ba:0a:5b:79:a5:01:29:
0d:3c:1f:2f:de:d6:d4:36:f3:15:7c:27:ca:3b:73:e8:76:b9:
53:e5:12:90:a8:ad:bd:65:3d:9c:b8:08:bf:f7:1c:8c:02:e4:
f1:c4:6d:c9:25:d6:b1:80:59:c5:6b:2e:17:ad:11:77:d4:81:
1f:13:da:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7OsfpUGlvCkBXBCMxSiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy
Nzg1MjEwHhcNMjYwNTEzMDYwMTIwWhcNMjYwNTE0MDYwMTIwWjAzMTEwLwYDVQQD
Eyg4MTRjZjhlZDU1ZjlkNzYwMDE0MGRmMDNlMTc4MzQxMzBjYzlkYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkFK1vDCVKh3V042xyzkFUw3auS9
R2Em5qVH6+iLyP97zgO67vTfkN2p8u62uKsHL72FBKxsRRZQm+7moToGjOOq5g2h
OU8yUBqSb7eFzrQP+kyBdI2qe3/yX3AP1pvvJDhThSKLRGYIeJt0MAGYb3rT0+K0
hJletLAj74w7Z6hRPpoo6p67pjeHWpIJXvvIVxQLQ/ZTgmiJmWcA+qcp3y0q/ou8
GFZPkWNam87SkVgyVtqaEpR06TxZcOOkdh+nEuFu6bJCkWh6lYykkMAAsdBEjpWl
2MT0AxZGhI05N9TklGrg4RLgNDSinmECsMVhbkOhH3vxEpdH/UffeBlOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFM+O1V+ddgAUDfA+F4NBMMydu3MB8GA1UdIwQY
MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt
ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3
LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk08QI7D
JrQ8tnov9iF6Hg9O7vvKP7bzN1+h1DbXqLM60mQcE0FEtX2mxRHPx2fNDB6pa6eJ
DSfCQ+sb2rS1P/OuIxoYmp+GGOkRgnBg7dfVTpbXm6leV0yjIfznCx9CEW3Rf3rA
xnBBGdg5VnK/4srRxcPFdqeo1Rz/pC000q1FFub5GTTCkFTQ4v3nJz3yy3qEPYgh
vV5h6rFfCp4knTSr2Q7Q012ZLKAlcemD1rwqWhmvin37BmWrwGOkN/y6Clt5pQEp
DTwfL97W1DbzFXwnyjtz6Ha5U+USkKitvWU9nLgIv/ccjALk8cRtySXWsYBZxWsu
F60Rd9SBHxPa0g==
-----END CERTIFICATE-----
Generated at Wed May 13 10:02:26 2026 by rpki-client