Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: bZ4m2s65N/dkikKGXWnP5qRCwp++zLV/0jx9ZIFht4g=
Subject key identifier: 2A:51:A4:F8:B1:26:AE:97:25:F2:2F:4E:71:92:DA:8F:81:BF:56:41
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019D281667F87F687F613782660DB8369944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: /BegSdnQVRr1EgQ2EKWMVb5e+ZjnQctECOzWELIMTO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:67:f8:7f:68:7f:61:37:82:66:0d:b8:36:99:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=2a51a4f8b126ae9725f22f4e7192da8f81bf5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:d0:38:21:07:ff:6c:6f:f8:21:68:f7:a2:
6f:90:8a:c6:df:cd:a3:d0:c6:06:4f:e4:64:2d:b2:
7c:12:7a:23:fc:57:7e:ab:00:74:93:33:be:26:5c:
70:3c:5a:51:22:52:25:38:c6:bc:3c:0d:9f:df:9c:
a0:f3:eb:19:b0:24:25:77:09:22:c0:6d:a5:bc:dd:
87:24:70:b3:6b:85:f8:4a:20:20:76:9a:7f:5b:86:
46:4e:0b:18:2e:a1:33:cd:a8:fb:ba:b9:69:73:8f:
68:3e:c4:ee:4c:2d:00:ba:01:65:4b:8f:c5:ba:37:
01:a5:56:a8:ab:34:1c:e5:b3:81:73:86:e2:4c:42:
1f:f4:6a:bf:8f:8c:62:ce:9d:ae:02:dd:cc:30:cc:
24:33:e5:1d:1e:4b:87:20:8e:3c:18:fd:4a:72:4f:
e1:d2:50:f1:9f:66:d5:fa:dc:67:f2:02:d8:d9:d5:
c5:d1:ba:73:53:01:60:48:5d:43:cf:10:7b:9f:64:
b5:f8:23:fd:21:1d:e4:80:82:5e:d9:44:1d:35:0e:
dd:cb:06:fb:4e:43:eb:f5:89:ea:42:94:e3:10:df:
a7:72:9f:6c:28:9d:ea:34:cf:33:1d:ec:d7:7c:7f:
d0:68:15:e1:a9:b4:51:43:60:3c:37:2c:41:25:57:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:A4:F8:B1:26:AE:97:25:F2:2F:4E:71:92:DA:8F:81:BF:56:41
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:0e:bc:08:35:07:07:67:bb:1d:a2:c5:1c:d6:8a:26:82:
c3:a9:92:46:fc:39:48:36:69:1e:34:31:b6:bb:d2:74:54:c8:
1d:52:6c:30:95:4c:15:b2:9a:b9:32:cd:9e:24:3c:9a:48:ab:
2e:98:82:a8:a4:bf:61:49:09:cc:56:20:3f:51:a7:ea:ba:01:
a4:db:96:9b:80:05:2e:c3:4e:46:4f:9a:77:41:8f:7c:48:07:
89:d6:68:80:e5:f0:85:06:5a:c9:55:24:a0:8f:18:c3:b5:f1:
77:a9:3b:d9:67:91:48:df:7c:5c:96:76:ab:e2:49:a7:5f:7e:
59:ac:81:7b:63:34:d1:46:0a:d6:92:7e:73:4a:40:9d:8e:5a:
96:32:d2:84:3d:8e:52:2b:c0:3d:cd:df:d4:4c:68:c0:e7:af:
20:01:a8:5c:be:c4:5f:67:b4:c1:31:76:af:2a:b9:fc:b8:b2:
e1:61:68:4b:d3:49:f2:63:11:f0:21:a9:fc:b4:b5:79:aa:36:
99:01:7d:6d:18:95:69:1f:7d:1d:6d:1e:b4:0a:ec:a9:88:fc:
5a:2b:68:af:b6:b4:0c:37:6f:0f:9e:45:c5:7f:cb:12:88:e1:
7d:ee:46:a3:1e:34:dd:d7:7e:28:d4:74:3e:49:fe:2c:48:25:
82:77:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:25 2026 by rpki-client