Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: Cv+JNmRX8rmoNM7GO0thhdnPndt9DRnYpu3K6p2tiAk=
Subject key identifier: F0:71:41:80:22:34:06:5B:22:56:F9:68:00:CC:F8:47:41:C6:1C:CC
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019E1EA39688E529A23DD6D2581B1ED89583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:37 +0000
Manifest this update: Wed 13 May 2026 00:01:37 +0000
Manifest next update: Thu 14 May 2026 00:01:37 +0000
Files and hashes: 1: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: q5fiIj5PkgMoEUDcfgT8OiHAmI9wZEqNoPmcJSrafXc=)
3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:96:88:e5:29:a2:3d:d6:d2:58:1b:1e:d8:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: May 13 00:01:37 2026 GMT
Not After : May 14 00:01:37 2026 GMT
Subject: CN=f07141802234065b2256f96800ccf84741c61ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:33:52:08:71:04:c8:1c:19:8e:e7:59:8c:
e6:50:ec:79:ba:bc:40:99:f7:cd:ea:8a:5d:7d:b9:
65:3a:26:44:f5:16:e5:2f:40:df:fe:13:8c:c8:49:
b3:66:93:23:3a:e7:e3:9c:34:33:27:be:e2:fc:90:
b2:2d:66:22:e3:6d:93:05:2b:30:56:a2:d4:e2:07:
60:25:21:fc:aa:05:86:0d:6d:46:68:0d:53:6e:2b:
9b:1e:ee:60:be:d4:c1:14:a9:33:2e:d3:f0:02:de:
43:5b:3e:3d:17:5f:9f:e8:16:90:c1:2e:94:0f:8e:
c0:0f:28:3d:40:ef:0e:d2:c8:f5:63:15:c8:ff:e1:
1b:56:08:0d:22:ae:89:3a:39:75:b4:40:e0:47:d4:
0d:d2:1c:50:7d:7d:58:e3:0d:ce:6b:53:c2:d6:9d:
cc:1a:8a:83:6c:0d:7d:25:9e:36:19:9b:f9:d4:e7:
36:fc:83:2e:64:04:ac:d7:5a:c1:a9:5a:6e:be:13:
19:f4:d9:ee:eb:d5:e8:a6:d9:bf:8f:48:df:60:f5:
11:aa:b5:73:23:0f:fd:ea:b3:78:95:26:65:0f:9c:
64:d0:97:c9:4e:4b:d7:d7:2d:6b:9b:3f:78:94:0a:
33:b2:93:dd:70:44:4c:aa:61:ad:bc:08:1b:03:bd:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:41:80:22:34:06:5B:22:56:F9:68:00:CC:F8:47:41:C6:1C:CC
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:97:1e:b8:ab:37:62:79:08:4f:8d:05:a0:8f:07:0e:25:
77:03:ad:71:92:a8:8a:9d:41:b0:08:99:2c:17:fb:54:18:1a:
44:80:e5:bc:26:b9:00:60:91:42:b0:1f:35:ff:0e:b1:bd:46:
d7:2e:d8:7a:9e:cc:26:1a:18:f8:55:fb:7d:db:01:ee:03:53:
c7:df:52:fd:85:47:39:aa:e9:be:43:42:b1:a9:22:41:46:78:
bf:60:d7:66:89:28:4f:4d:63:26:e5:72:fc:e0:7d:3d:a1:1e:
ec:8e:a7:e0:b0:f0:cb:9e:8d:99:26:ed:95:7c:2f:b1:f2:69:
da:5b:5d:14:76:2e:44:0c:2e:6d:45:dd:88:a0:33:98:b7:68:
7a:2c:88:b1:8d:46:bd:9a:24:a6:b8:6f:f7:a2:61:00:b0:c1:
54:7b:35:4a:ea:03:1e:ec:60:9d:e4:14:b5:88:02:40:d8:00:
6b:21:b0:3f:72:7a:9a:96:ce:97:70:3e:37:0a:eb:b8:87:10:
dc:a8:17:4f:1e:cb:f4:f3:54:ea:5d:06:81:54:44:45:68:ce:
99:11:c6:d6:50:9a:55:28:32:4e:de:5e:5d:b0:bd:bb:3d:64:
11:2a:a0:2d:8e:28:b2:c3:62:56:7c:d4:89:74:2a:99:40:e4:
49:f8:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:35 2026 by rpki-client