Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: UGkbBEjDw1IJQzGUSA9DG2W0AupSJ35/Cz48hnJuOyU=
Subject key identifier: E6:4A:D2:6B:88:1B:F9:CD:CC:5F:F8:99:E0:0F:EE:B7:11:0D:89:0A
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 019E1E3571C57A2277DF9B4E5A468FEE1FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:01:19 +0000
Manifest this update: Tue 12 May 2026 22:01:19 +0000
Manifest next update: Wed 13 May 2026 22:01:19 +0000
Files and hashes: 1: 4QLQLdRNistD58V4Gobwba2l7ak.roa (hash: rdeifE6ly74qVEIujDihCPvAKVfy9CBgE4V+s0Ryjsg=)
2: LQXI2pdJJ5uldiP_ZMTBHsyj0zc.roa (hash: p9xq3q/MMRkwXX0B1rVTdYY5jk1Jby2fa+eubc67Btw=)
3: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: 5FGhA4ICfnL8ZYeeBXV2fACF98imsg12c476Y4KyRZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:71:c5:7a:22:77:df:9b:4e:5a:46:8f:ee:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: May 12 22:01:19 2026 GMT
Not After : May 13 22:01:19 2026 GMT
Subject: CN=e64ad26b881bf9cdcc5ff899e00feeb7110d890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:d7:71:51:98:90:98:a5:80:24:92:94:38:
53:e1:9e:a3:18:c4:62:42:31:b4:61:15:cb:2e:33:
c6:ad:b6:e1:63:28:aa:65:b8:f3:b5:87:91:72:d3:
72:04:c3:1b:48:ab:ee:37:f0:53:52:19:95:58:3b:
15:62:a8:ea:6b:e3:42:62:c9:fe:be:52:2b:d3:5e:
c3:d4:13:76:1b:94:fa:0a:bf:ea:ab:d5:67:ed:3c:
c3:01:54:9e:11:dc:7d:f9:cd:9d:2e:c1:ff:50:2e:
ef:e4:19:a6:98:a2:20:d5:fa:05:b7:6e:be:da:c7:
b4:a5:1d:bd:84:dd:fd:a3:3c:70:ed:35:6b:11:6a:
f6:09:15:0c:26:2c:0e:21:05:bc:d9:c2:d5:67:fe:
e0:68:00:94:64:62:f5:cb:df:9a:ad:cc:d5:36:e0:
0a:fe:e4:df:e5:5c:c4:4d:78:f1:a5:31:a9:6f:86:
5e:38:8a:ec:da:64:4e:c2:43:81:df:37:da:69:02:
43:67:56:53:26:04:80:bd:93:fb:c0:26:7c:81:02:
ba:5e:7e:4e:e7:f1:32:ac:13:ff:8e:ca:ca:b6:bb:
41:ba:89:37:fb:f4:a3:71:bc:66:d1:60:ca:49:d8:
73:38:e5:b6:57:6c:11:95:b4:0f:3f:33:c2:02:f2:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:D2:6B:88:1B:F9:CD:CC:5F:F8:99:E0:0F:EE:B7:11:0D:89:0A
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f7:f8:1c:ab:ef:68:a1:89:be:8d:07:3c:fa:bc:a1:a9:27:
57:b8:81:22:2e:47:93:0b:ed:b5:03:02:e2:a0:22:8e:3b:ff:
0b:ec:46:c8:7b:a1:4c:82:b9:e8:55:54:1b:48:60:65:d0:10:
4d:61:fd:2f:7d:35:50:d8:db:29:d9:ec:54:c8:0f:a1:db:d6:
11:21:63:14:5a:f2:9b:3b:4d:23:84:42:34:24:f5:ef:4f:f1:
83:b1:53:4a:a5:58:5d:ac:ce:48:6f:cc:70:33:08:4d:86:f2:
9e:b4:ad:79:9c:57:78:93:97:b2:76:a5:82:df:73:f1:1b:fd:
66:f9:ad:6c:56:4e:07:c0:ca:d3:73:49:62:11:43:32:96:e1:
43:16:d1:6f:06:ce:01:7b:e8:56:f7:c3:f2:7d:0b:93:77:b3:
63:5f:4c:1b:12:03:dd:5b:14:6e:8c:a0:30:60:9b:c9:30:3e:
5b:19:ba:8e:87:bb:83:d8:c3:7d:e1:29:f8:b0:41:f6:90:2d:
67:ef:a9:25:35:38:d6:2b:11:b9:c8:77:52:46:d3:b5:2e:25:
ec:65:49:33:1e:86:ce:ed:a9:b2:e0:be:21:88:2b:44:95:e2:
18:3f:7a:3e:3c:fa:d0:4b:94:b1:13:e1:50:95:52:eb:ec:0e:
01:9e:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:10 2026 by rpki-client