Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier: 89wnI4I63ZnMb38EU8UUhKqJE42vqQtVjT1zLacEyEY=
Subject key identifier: 02:DC:0B:D5:38:14:68:A0:BC:48:62:B8:C4:77:B5:6A:82:5E:52:BF
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 019D32D1405E43C81FFB0554E9CDC9A61D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 05:01:07 +0000
Manifest this update: Sat 28 Mar 2026 05:01:07 +0000
Manifest next update: Sun 29 Mar 2026 05:01:07 +0000
Files and hashes: 1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: LEfGDQxnfcQeZxv1mU/fUifz71+JfTj1wYbY7+h7J44=)
2: UxsjjV_Gt9-OxRcgz90c19qriuk.roa (hash: 3EeDtpjQ6swXAQQE3Mf+vnblA6AQ2AaH7/97p2AeAtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:40:5e:43:c8:1f:fb:05:54:e9:cd:c9:a6:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Mar 28 05:01:07 2026 GMT
Not After : Mar 29 05:01:07 2026 GMT
Subject: CN=02dc0bd5381468a0bc4862b8c477b56a825e52bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:19:68:14:57:c2:53:30:61:4f:73:ff:9d:
4a:71:78:2f:c0:30:a7:b0:b2:3d:08:db:78:9a:c2:
f4:02:1c:a4:eb:3a:17:92:b2:1b:ef:2e:5d:c6:67:
bc:37:7a:14:7b:3c:b8:be:0d:2c:e0:3d:40:ad:01:
57:6a:44:b6:ea:55:b6:f4:64:fb:c8:1f:18:d0:8d:
b9:91:3c:07:ee:87:23:c3:8b:9c:c2:d5:78:6a:2d:
d7:af:77:7a:2e:d4:47:54:e7:40:82:e9:b1:42:19:
1f:de:79:ac:cc:f8:70:2d:53:aa:ef:b3:68:ed:e9:
83:cc:54:b2:e4:52:58:ed:6d:35:ed:19:72:b2:1e:
70:05:6f:4e:78:8f:a2:07:b5:4a:b1:8e:d2:57:e8:
aa:76:5a:8e:cb:60:8b:b8:9e:63:ce:91:68:c5:e4:
16:23:3e:fb:1b:f9:ec:f4:e2:2e:48:83:bd:ca:9f:
ee:e3:76:af:e8:5d:cc:5e:c9:a7:2a:53:fd:56:4d:
ec:8f:c8:fe:0b:ba:cb:4c:3a:5e:12:95:b0:55:58:
03:c4:33:9f:bf:ea:b3:90:24:75:69:d7:f6:38:da:
d0:c5:7d:de:9e:47:94:89:56:de:df:86:81:3f:1f:
be:3f:a2:5b:73:11:9a:d3:75:1b:e8:d9:10:8a:c8:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:0B:D5:38:14:68:A0:BC:48:62:B8:C4:77:B5:6A:82:5E:52:BF
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e3:85:e4:a6:41:10:a6:86:6e:d3:2d:71:03:42:62:b1:8f:
b8:97:43:44:4f:3d:5c:8b:e5:8d:eb:fc:8a:5b:29:69:ae:27:
6b:4e:17:07:7c:29:5b:54:e2:30:2d:61:03:bf:6b:f3:58:e3:
9d:1c:ed:ba:37:93:b1:ce:fd:a5:82:a3:fd:25:71:5c:42:9b:
9e:76:30:0b:f1:6e:a5:6e:57:90:f3:26:2e:43:12:7a:f6:92:
19:3a:85:cd:ca:35:60:57:ca:dd:1d:27:02:13:34:b7:3f:65:
e1:4e:3b:a0:33:0b:12:a5:55:56:7c:54:7c:bd:ec:13:52:5c:
ab:79:ee:ef:34:68:27:e1:45:b0:47:84:1d:ea:7a:d9:4e:36:
fc:99:37:44:43:a1:a0:87:15:02:1b:7b:e0:bf:e6:f2:4d:a6:
5c:71:89:ef:32:c3:e7:48:59:74:01:9d:30:ac:33:ca:78:02:
04:69:d4:ef:cd:7d:d2:b1:89:b6:c6:52:a2:91:9a:f8:11:5f:
16:81:bb:fe:d6:42:15:ee:b7:ae:a1:46:85:62:6a:f0:14:0e:
d2:c4:4b:a1:bb:68:8f:c2:f1:08:d7:66:1b:93:a9:cd:1a:fb:
0b:3d:71:3a:d0:ab:ba:07:29:4f:a0:8a:08:41:a4:65:24:32:
9c:30:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:26 2026 by rpki-client