Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: zF6n24ET2AcAJ2yM27eg+79KYmXKRe4sVBd2U4HZq6c=
Subject key identifier: 10:EC:86:33:5E:4B:0D:A0:09:F8:F0:8F:71:99:28:EE:56:9E:0F:65
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 019D26CD4EFC460E72945E9A6AF25174599B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 1827
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: cp7F+P8PJkjXiWutQj2rwgXqaxTVErWFwnO4VTcGzRQ=)
2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4e:fc:46:0e:72:94:5e:9a:6a:f2:51:74:59:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=10ec86335e4b0da009f8f08f719928ee569e0f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ef:b0:8e:d0:7f:fe:c5:f8:74:9c:f8:84:0f:
7b:dd:9c:e0:74:e7:64:02:dc:e6:3a:12:1e:ee:4d:
dc:1f:b4:ac:2d:aa:d7:d0:b3:aa:3c:f9:0e:1b:45:
bc:0c:c5:2b:62:24:ef:29:15:2e:68:92:cd:77:d0:
83:a0:b7:64:c4:39:1a:a0:ad:3c:3d:11:d4:1f:ea:
06:f3:b3:8d:05:03:71:33:85:48:4b:d9:00:fe:2e:
fb:81:26:73:33:5b:30:20:b8:7b:9e:a7:84:6e:2a:
7e:08:23:cb:b0:cb:b1:ed:85:7a:87:1d:0c:a7:14:
9d:ee:0e:2b:4c:1a:ee:cf:2f:c1:4c:e7:c1:95:70:
22:89:cb:39:69:48:54:69:04:71:83:8f:a4:d1:f8:
c1:00:5b:02:a6:75:7b:cd:3e:d8:13:c9:f0:00:bd:
30:0d:fd:09:30:21:f6:8f:13:83:52:19:aa:30:ad:
59:54:f9:a8:6e:3d:08:ce:3e:b4:f1:98:aa:61:d5:
30:af:08:89:31:12:68:47:aa:ea:90:58:56:98:29:
1b:d5:9c:c1:66:42:c2:a8:fe:3f:a4:03:e4:65:3a:
f6:84:4b:cb:c0:4d:1b:0f:87:00:97:25:a5:2a:44:
76:b7:f6:8a:db:13:a6:30:fa:cb:1c:4c:86:7d:77:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:86:33:5E:4B:0D:A0:09:F8:F0:8F:71:99:28:EE:56:9E:0F:65
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:01:63:fc:2c:1f:e0:01:36:9a:f9:ca:41:07:c0:e3:43:b6:
cd:d2:f3:54:88:5a:c6:af:56:c2:07:0c:c7:3b:28:40:a8:bd:
cb:41:34:5c:57:2b:5a:97:d2:8b:a2:d0:de:63:a9:0c:52:ee:
65:c7:a2:f0:12:f2:b2:4b:3e:33:52:52:db:5d:17:d0:d9:e1:
6f:14:bc:c3:1b:76:fb:91:39:33:72:35:68:01:01:21:b7:5c:
c6:e2:1a:9a:13:ec:2d:6c:34:2f:bd:4b:af:2f:34:52:f8:77:
66:92:8f:16:b1:94:03:00:24:40:35:aa:63:40:5e:a2:65:8b:
2f:07:43:6f:26:6b:c6:9d:e0:92:b3:1b:c8:eb:6e:10:9d:de:
55:04:f2:61:81:93:a8:24:dd:d7:04:54:b6:72:6e:7a:0d:e7:
dc:ce:e9:f1:14:91:a0:a5:70:9c:6e:38:68:c7:64:50:b9:1c:
ad:cf:23:19:e8:ac:ab:c6:93:9e:17:d6:de:db:12:ef:7a:74:
33:6d:47:4c:57:a4:58:ce:7a:24:46:ce:9b:f2:98:13:29:99:
a2:45:b8:c3:a7:ce:c9:ea:3f:fa:c2:4b:e0:85:ae:7b:10:08:
27:3a:cf:35:e0:03:da:a0:ba:64:f8:fb:ca:ad:e8:c1:d6:d2:
52:36:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:15 2026 by rpki-client