Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: jwb169M+C/1DNqnCIEfmYvPCKNrg+53DA1fJ+jZ4dEI=
Subject key identifier: CA:6C:69:B8:78:75:4D:9E:35:40:5D:E2:E1:AE:11:5F:38:12:3B:51
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019E1DFEA5876FA119B45089D071D95F4A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:28 +0000
Manifest this update: Tue 12 May 2026 21:01:28 +0000
Manifest next update: Wed 13 May 2026 21:01:28 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: 0fkADSZ8/+nV/9Tdh1RRhAlwsO5lkNngwkUuZvH0DqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a5:87:6f:a1:19:b4:50:89:d0:71:d9:5f:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: May 12 21:01:28 2026 GMT
Not After : May 13 21:01:28 2026 GMT
Subject: CN=ca6c69b878754d9e35405de2e1ae115f38123b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:97:19:bd:a1:91:66:8a:0e:43:42:4a:04:
25:91:85:2d:63:4d:e3:b8:3b:b0:ce:9e:a2:58:45:
67:30:92:c2:dd:0b:e1:17:87:3b:44:12:4a:d0:bc:
33:6a:b9:0c:e5:b4:96:cb:63:ec:a7:80:77:45:97:
4a:06:a8:d3:eb:3d:d7:42:bf:79:e1:52:03:92:2f:
fa:7e:71:3d:63:0c:4c:99:0c:44:a9:df:2e:11:4d:
18:e3:69:e7:bd:3c:a6:5d:1f:f9:a8:1f:13:ac:4a:
ed:d5:ef:87:88:17:48:31:ef:21:29:b0:3c:a0:a8:
08:7d:a9:cd:2b:f5:dc:c9:93:38:e8:c1:6b:53:d8:
33:e5:2d:26:ed:3a:c2:48:2c:e3:58:a9:58:3e:2c:
99:9c:4c:ec:2a:17:45:29:4b:dc:6d:e2:0c:56:00:
55:c3:f0:e1:77:20:d2:04:1f:13:79:6e:6b:15:1a:
c4:3c:05:24:01:54:22:28:8a:d9:bc:78:1f:de:c8:
6d:b9:2b:b5:3c:49:42:94:31:b1:00:57:4a:18:f7:
b0:c9:10:53:a0:cc:f0:18:f4:52:dc:b0:58:99:c8:
34:c4:cc:0a:ba:21:2e:be:fa:10:61:73:ec:ed:5c:
17:d1:d7:ea:b3:9a:97:23:ab:a5:d0:ff:75:a7:24:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6C:69:B8:78:75:4D:9E:35:40:5D:E2:E1:AE:11:5F:38:12:3B:51
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:45:6f:3a:9d:0b:b8:a0:27:cd:0b:76:eb:29:24:c7:00:
4a:59:e2:a5:e8:07:c7:12:ce:72:1e:09:d6:d9:ab:90:a4:c1:
f2:87:fb:b5:1f:13:55:71:42:b2:b3:f4:1d:ac:e6:95:aa:78:
60:35:ea:64:83:22:98:e3:d0:aa:c7:0c:b2:8c:42:94:b4:33:
52:92:46:64:a4:31:d2:d4:96:9d:a2:ff:75:d8:8b:47:6b:56:
18:e2:a1:ce:c7:cd:38:52:c9:ca:71:10:d5:6c:37:b9:14:66:
74:87:4d:86:ae:ac:0f:c3:10:1a:43:43:ce:2e:ac:a1:9f:00:
f7:97:85:dc:fc:a5:92:af:8c:f8:7f:67:ea:2e:34:8d:b7:78:
a8:62:16:04:c1:8e:c2:89:0d:c4:25:33:27:07:14:76:46:39:
45:88:43:37:ad:1e:e4:3a:65:c0:d4:c4:bc:d0:5c:09:b8:b0:
d0:50:6c:f7:48:f9:8b:c5:c3:1e:27:5c:8f:68:68:ac:b9:c2:
9f:58:c2:14:f6:33:c8:a2:5b:86:a6:f1:3b:63:20:7c:08:b7:
37:65:5c:26:22:75:b4:ee:ee:29:34:9c:d8:e3:42:10:91:16:
6b:74:4c:de:b8:d0:43:ae:0b:16:ad:b9:02:44:ab:f8:7c:8a:
48:f2:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:55 2026 by rpki-client