Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: TTQMVVUJJJsXiMZfn39dGaRIsomPBlz3qTEy7uMrdQ4=
Subject key identifier: 1B:B4:F2:E2:8D:17:66:35:23:E1:2D:E7:AF:7C:1F:F5:E4:C9:D5:A3
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019D2628A0E3B4E20064EDED3C5114575560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 18:01:30 +0000
Manifest this update: Wed 25 Mar 2026 18:01:30 +0000
Manifest next update: Thu 26 Mar 2026 18:01:30 +0000
Files and hashes: 1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: 6K5j1wAJK8Xz7/w/Oh/vjgnXAHy862IwueZfMGb7sOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a0:e3:b4:e2:00:64:ed:ed:3c:51:14:57:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Mar 25 18:01:30 2026 GMT
Not After : Mar 26 18:01:30 2026 GMT
Subject: CN=1bb4f2e28d17663523e12de7af7c1ff5e4c9d5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:ae:64:7f:59:0d:cf:43:f7:a5:d1:1d:ad:
01:4a:a2:fd:19:23:37:f2:c8:88:20:63:ce:41:9c:
23:ea:a3:f8:79:dd:8c:46:cd:65:a9:d1:28:fd:ec:
69:ca:8e:9f:fb:7d:24:6e:8e:14:5f:b8:36:f2:41:
75:d9:58:d0:d0:8d:e9:3a:72:f3:6f:36:ad:76:98:
26:36:d1:01:4e:00:b6:f6:dc:11:37:a3:43:91:b5:
fe:8e:11:1b:ad:8e:42:bc:de:1b:4e:a1:12:0c:91:
0a:06:1d:db:34:84:40:c7:6f:6e:f5:c7:ff:c3:4e:
19:c3:3f:51:e2:9f:83:e7:60:41:db:c5:41:07:a9:
6d:2d:d7:7f:92:52:69:e8:cc:53:a7:38:78:55:40:
3e:a1:fc:d5:2f:66:9a:6d:1f:d7:ce:36:d2:4a:f3:
1c:ee:93:8e:30:b6:dc:e7:22:53:cd:c3:4b:f5:62:
11:a3:bc:0b:bb:93:5a:7a:f0:da:2f:a1:2b:70:a6:
c9:0f:f4:d3:c3:c8:16:57:e3:5b:47:aa:18:bb:a0:
f5:16:db:e5:1e:a8:b1:7f:cc:f1:e5:c0:b9:0b:56:
15:be:b8:6e:60:e0:0b:4a:06:c3:6e:e8:4f:75:93:
8e:57:5e:5f:39:19:24:0f:b0:a6:ad:bb:55:5e:c7:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:F2:E2:8D:17:66:35:23:E1:2D:E7:AF:7C:1F:F5:E4:C9:D5:A3
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:e7:34:c4:f3:40:50:7c:1c:4b:53:0b:51:44:34:97:20:
4d:4a:82:59:f8:2d:42:30:2d:d5:c4:6a:bd:f3:cb:aa:0a:cf:
6a:d6:e3:f6:3f:7c:e7:9c:c2:46:d6:6a:ed:ea:c6:c1:00:e4:
f4:01:59:5d:29:72:52:a4:63:06:38:61:d6:12:e0:1c:32:db:
56:c3:a4:2e:d2:3b:e1:06:ce:68:8c:b2:1f:63:0a:07:e5:a5:
f3:d8:bc:5b:d2:89:a8:83:85:ee:60:2d:57:c4:d1:a7:46:ba:
54:76:19:8e:ec:35:4b:a5:01:a6:5f:9f:70:72:98:67:30:d5:
44:ab:b1:b6:6e:e9:42:ac:8f:c6:18:85:f3:03:d7:32:d1:ee:
2c:e8:6f:32:c7:8e:3e:94:ec:58:a1:75:63:ee:d5:40:9c:d1:
b4:5f:fa:29:ce:4e:84:f1:f5:7b:36:bd:70:60:ae:0f:88:59:
71:88:0c:9e:2b:97:db:77:37:fc:b5:6a:9b:7a:20:d8:b6:a5:
b5:a8:4e:93:48:7d:67:df:f4:ca:34:56:72:fd:5e:75:92:65:
10:6b:4c:4a:fb:fb:e5:c0:46:b7:34:88:61:ec:0b:63:9a:2f:
47:65:4a:87:cc:ef:ac:e6:98:c3:3f:f2:cd:8f:d3:34:ba:51:
92:47:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:37 2026 by rpki-client