Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: tAuX8Vm5whMBMsjxx/G5gHV0+XgbwFmxv9mM5CCfdzQ=
Subject key identifier: D1:B5:14:AD:B9:2F:5E:32:C9:84:8F:34:65:C7:CC:A7:E1:4E:EC:0A
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 019D27E03C82A9EEC3E8C6A9BF64396792E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: B/yX8QfVI9FY9by35mDLVDokmeIT1edr+F0Y8OyGtgU=)
2: mggCybH0JuN-k6cQXNUomWKiBlI.roa (hash: FIDIgF+E4Eu8exw8u8XVBLqad5rC9fwdXSSTO7cnhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3c:82:a9:ee:c3:e8:c6:a9:bf:64:39:67:92:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=d1b514adb92f5e32c9848f3465c7cca7e14eec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:5e:a5:0b:d9:08:1f:37:de:6a:af:55:89:
02:39:0c:28:7d:05:a8:57:fc:df:5d:f6:a7:86:32:
c6:3d:3a:33:3a:96:a6:f8:84:da:79:71:5e:b6:3b:
fe:9c:46:59:06:f7:43:a5:f5:51:28:01:e2:89:1b:
aa:2e:be:9e:14:7e:2d:95:c1:46:a1:7f:f5:f3:51:
eb:25:43:5a:b4:b6:e9:fe:4c:73:72:c8:86:11:ac:
aa:29:23:84:3a:9b:6d:86:b7:8f:d3:33:b2:93:77:
33:f9:3b:4c:bb:19:4e:3b:86:17:08:67:6e:47:d5:
96:2a:5d:12:68:90:41:33:ec:78:2d:b3:bb:af:78:
48:07:7a:22:d3:e8:4a:5d:aa:c0:33:05:b9:2d:f9:
bd:02:3c:08:b7:26:27:8e:18:cd:17:d5:e2:ff:fa:
24:5a:22:3c:11:64:69:ac:34:8b:19:0f:34:50:17:
3a:56:e8:0c:08:c4:53:73:c8:da:47:ac:c9:34:9e:
88:93:98:d9:e7:a8:3c:00:54:6a:d1:0b:d0:73:17:
e6:ec:0f:b6:88:f8:f6:19:a0:bd:7e:73:3e:22:bf:
66:47:f5:1e:ae:4b:a3:8b:b1:09:3c:9c:18:17:be:
ac:9b:3d:75:2a:05:7e:2c:c8:c2:11:1a:61:a0:0b:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:14:AD:B9:2F:5E:32:C9:84:8F:34:65:C7:CC:A7:E1:4E:EC:0A
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:8d:48:67:e4:74:6d:bf:8f:7c:11:c9:38:5b:64:ad:5a:
30:77:67:e3:28:78:fe:7c:6f:58:bd:c0:c5:b8:1a:40:d3:1c:
e4:67:cd:f2:24:eb:9d:40:9a:6b:89:9e:5c:04:e6:fb:e5:85:
98:37:73:81:f2:a2:ff:d7:e7:a5:74:f1:25:19:16:a1:1b:94:
61:db:bc:77:7c:2b:f4:c3:cd:94:1c:78:be:eb:a9:57:0c:9f:
a6:c4:f3:55:14:c3:bd:95:d1:42:62:e2:9c:9f:73:a8:c0:0a:
da:d7:f1:c3:ae:e4:43:07:b8:60:98:6b:46:67:04:25:44:39:
d1:a5:c9:87:32:d5:88:13:59:e2:16:79:98:b3:5f:73:d9:14:
95:a5:69:bf:bd:06:7d:c2:35:26:46:55:c9:d0:13:70:21:26:
5f:45:76:f6:ef:65:dd:fa:27:b7:03:48:49:3f:f7:6e:93:36:
f8:da:c1:e1:6b:cd:0e:e7:06:5e:57:6f:30:78:ab:be:db:6e:
7b:28:6f:c1:c7:ff:05:ef:cb:65:cc:73:8d:7c:90:15:63:49:
e1:33:88:5f:e6:28:59:c9:76:4c:94:f8:c0:a2:08:f1:c0:70:
c9:5c:ac:75:c9:2d:ad:7f:50:3b:16:6b:e9:e9:0b:24:dc:17:
48:ad:7d:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4DyCqe7D6Mapv2Q5Z5LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzJiNGYyYjQ3YmJlMTkzNGEyMjQwODFjYzM3ZjE3MGQ3
MjQ4ZDIwHhcNMjYwMzI2MDIwMTQwWhcNMjYwMzI3MDIwMTQwWjAzMTEwLwYDVQQD
EyhkMWI1MTRhZGI5MmY1ZTMyYzk4NDhmMzQ2NWM3Y2NhN2UxNGVlYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NdepQvZCB833mqvVYkCOQwofQWo
V/zfXfanhjLGPTozOpam+ITaeXFetjv+nEZZBvdDpfVRKAHiiRuqLr6eFH4tlcFG
oX/181HrJUNatLbp/kxzcsiGEayqKSOEOptthreP0zOyk3cz+TtMuxlOO4YXCGdu
R9WWKl0SaJBBM+x4LbO7r3hIB3oi0+hKXarAMwW5Lfm9AjwItyYnjhjNF9Xi//ok
WiI8EWRprDSLGQ80UBc6VugMCMRTc8jaR6zJNJ6Ik5jZ56g8AFRq0QvQcxfm7A+2
iPj2GaC9fnM+Ir9mR/Uerkuji7EJPJwYF76smz11KgV+LMjCERphoAtG/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG1FK25L14yyYSPNGXHzKfhTuwKMB8GA1UdIwQY
MBaAFJUytPK0e74ZNKIkCBzDfxcNckjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjct
NDIwNDBkZjNiNmFmLzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjctNDIwNDBkZjNiNmFm
LzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSWNSGfk
dG2/j3wRyThbZK1aMHdn4yh4/nxvWL3AxbgaQNMc5GfN8iTrnUCaa4meXATm++WF
mDdzgfKi/9fnpXTxJRkWoRuUYdu8d3wr9MPNlBx4vuupVwyfpsTzVRTDvZXRQmLi
nJ9zqMAK2tfxw67kQwe4YJhrRmcEJUQ50aXJhzLViBNZ4hZ5mLNfc9kUlaVpv70G
fcI1JkZVydATcCEmX0V29u9l3fontwNIST/3bpM2+NrB4WvNDucGXldvMHirvttu
eyhvwcf/Be/LZcxzjXyQFWNJ4TOIX+YoWcl2TJT4wKII8cBwyVysdcktrX9QOxZr
6ekLJNwXSK19Rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:01 2026 by rpki-client