Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: PbveKIjT9z0c8/Vrb9oLpuTTt0z3aW1lb5rY9SJvfRU=
Subject key identifier: D1:AD:F1:56:56:6E:48:2E:D9:35:9E:BA:28:C9:07:09:B1:7D:05:F2
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019D3376338265E7D1DC7E0D265E09C8A7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 181D
Signing time: Sat 28 Mar 2026 08:01:17 +0000
Manifest this update: Sat 28 Mar 2026 08:01:17 +0000
Manifest next update: Sun 29 Mar 2026 08:01:17 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: BOaOm1HrGB06uxeKIxUxkACc0Zuu1NppYQqkWQZuZ48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:33:82:65:e7:d1:dc:7e:0d:26:5e:09:c8:a7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Mar 28 08:01:17 2026 GMT
Not After : Mar 29 08:01:17 2026 GMT
Subject: CN=d1adf156566e482ed9359eba28c90709b17d05f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:37:3d:9e:56:9f:a6:42:8d:76:0a:d5:c5:
c6:fd:e3:57:38:90:19:5d:d9:91:80:14:2f:55:43:
61:15:a1:63:e3:07:9c:41:c2:d6:46:0e:57:c8:2c:
f9:23:58:4a:e9:a8:17:74:96:a4:1a:f3:8f:e9:ff:
1b:69:61:b8:44:46:ad:7a:72:a9:aa:25:fc:34:39:
b9:b1:73:d6:03:50:5f:c5:f6:29:c5:64:8a:84:fb:
59:fe:a7:53:31:3d:d9:01:0b:9e:a9:74:82:9e:ee:
c8:25:dd:48:3b:2b:68:a6:97:9a:2d:75:77:95:5f:
5f:05:b8:6b:98:4f:ed:c6:70:9b:d1:2d:49:83:b4:
ec:d9:e8:07:eb:8a:ff:05:0d:23:2c:9a:dd:a9:d6:
d4:45:7f:12:5d:fa:8f:ce:73:89:2f:8d:59:a8:07:
17:65:63:34:11:30:da:94:95:3c:78:8f:9f:a5:e0:
92:f6:d9:1a:82:4f:c4:fa:50:77:65:55:8f:22:56:
9a:c6:ca:91:27:01:8b:88:73:ba:c0:23:05:c3:41:
e4:96:9a:df:9e:02:fb:b9:38:ba:8f:ea:69:16:fc:
82:e4:87:d4:62:ed:5e:b9:a0:d0:0f:1a:d5:af:0d:
12:fc:0a:7a:d0:0c:b3:6c:8f:9c:7b:22:33:13:b7:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:F1:56:56:6E:48:2E:D9:35:9E:BA:28:C9:07:09:B1:7D:05:F2
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:03:0c:78:ab:7a:b6:68:6a:e5:2d:59:4e:04:d3:fc:4e:f5:
2c:42:21:5f:ea:52:5a:91:69:54:de:f1:c2:77:05:97:8e:f8:
c4:80:a1:7d:90:a9:81:ce:ab:f3:4e:6e:a0:f5:ef:32:ba:46:
29:03:4c:5f:b6:cd:f0:0f:42:5a:47:90:6d:90:6a:3b:7a:af:
69:81:b2:b3:4e:5b:7d:0e:55:1a:26:72:3b:45:7a:65:24:20:
21:b8:1a:c8:05:f6:cc:79:af:92:c6:e0:33:c6:bf:db:7d:02:
c1:a5:0e:3c:8a:2d:56:01:b9:13:3e:10:04:43:c6:e9:ea:b9:
a8:eb:26:fb:90:55:32:56:aa:68:95:5d:1a:f4:13:db:d0:0b:
d4:53:9c:6a:35:86:3c:e6:8a:ba:19:fa:90:a2:35:32:8d:e0:
e8:08:4c:08:c8:60:69:cd:cc:96:fb:2f:2d:47:6f:39:cc:2d:
2a:19:9b:76:63:45:ed:5d:09:f7:96:74:21:e1:87:1c:24:1c:
d6:b3:99:cb:47:ee:d7:70:ae:0f:4d:42:cf:4b:9f:c3:fb:65:
ee:1b:8d:cc:34:8d:45:6c:23:c9:b2:74:23:2d:92:55:66:29:
4e:d6:ff:33:fe:60:14:7a:30:dd:aa:9d:f3:ba:47:3d:6f:9e:
c8:40:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:56 2026 by rpki-client