Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File: LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier: w2NBE361za1qTYI8ngD7Prfs+0YUPbxP2iQRDFOrME8=
Subject key identifier: 1A:E8:49:20:B0:C8:78:DF:CC:F0:DD:BF:F9:94:1B:88:71:63:6F:40
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial: 019E1F47DFB82A73CA6AB3E0D62AB766BF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 03:01:04 +0000
Manifest this update: Wed 13 May 2026 03:01:04 +0000
Manifest next update: Thu 14 May 2026 03:01:04 +0000
Files and hashes: 1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: DiF5f5FC3VpJ6tpDccCslNJ8YUBPKzM1sbGYrje0j6k=)
3: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:df:b8:2a:73:ca:6a:b3:e0:d6:2a:b7:66:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5894923bb002a434128810607dfb526722004f
Validity
Not Before: May 13 03:01:04 2026 GMT
Not After : May 14 03:01:04 2026 GMT
Subject: CN=1ae84920b0c878dfccf0ddbff9941b8871636f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:67:44:40:e5:de:cd:3c:2b:cd:77:1e:75:
8b:d2:4f:06:40:f3:63:69:96:93:e3:48:d8:09:48:
96:f5:48:6a:20:76:e8:f8:1a:b1:bb:7f:f3:eb:18:
4a:ed:13:50:ad:68:0e:72:28:00:d5:43:7c:af:41:
c0:7f:61:7f:64:d5:21:c0:7d:37:70:e5:41:34:ce:
8d:da:98:b0:26:9f:90:df:9d:a2:41:1e:4d:47:aa:
bd:57:f0:8d:5c:b9:5f:40:12:1d:cd:99:81:86:11:
f0:67:4d:0f:65:d7:5f:8e:82:3f:17:1b:44:d6:98:
97:6b:87:a9:d5:61:58:2c:12:16:1e:f6:c2:41:df:
fc:e5:64:cb:c2:8c:6c:80:1f:bb:a5:08:82:82:fb:
f8:27:bd:0f:ef:6e:7e:87:2b:be:5d:83:3a:d2:70:
14:4a:5c:31:0e:e5:c4:4b:31:89:e9:fc:1e:24:bd:
62:3b:1e:24:d6:59:69:db:93:92:f9:f0:5b:d2:69:
f5:50:ba:f1:0b:02:97:5d:81:6b:f9:d1:96:e8:12:
56:43:cc:a7:2f:c0:c8:98:2c:d2:07:41:e4:87:a6:
81:12:a5:41:87:ca:eb:2f:00:60:7e:8e:17:b4:4e:
1b:1b:c4:c5:1d:f9:39:08:30:7d:4a:25:f5:45:77:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:49:20:B0:C8:78:DF:CC:F0:DD:BF:F9:94:1B:88:71:63:6F:40
X509v3 Authority Key Identifier:
keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:c5:09:31:2c:f8:f7:cb:86:50:60:5d:1b:ad:99:0d:61:
77:08:13:67:08:cc:99:22:fd:2f:a1:ac:e2:32:85:6b:2a:5f:
a9:cb:8c:5e:6c:74:8b:f8:d3:02:00:01:cb:7e:1c:d2:36:ca:
8e:cf:31:86:22:1d:50:07:f7:f8:49:b9:56:72:31:87:8d:47:
9f:52:2a:a9:a0:3a:c2:1b:40:07:c9:c9:68:e4:3c:f1:e6:ae:
e9:63:8f:3f:ea:50:ea:f2:0f:79:6a:db:fd:01:48:39:45:aa:
a8:33:5b:d4:be:7a:c9:23:32:e4:84:dc:49:8a:4c:57:b6:58:
a9:91:7c:97:9e:7d:eb:ed:d3:8e:74:6a:6a:74:26:e7:6f:40:
7f:96:af:67:f0:c6:29:4e:73:40:b0:6f:38:6e:74:b7:86:03:
67:3e:e6:3f:52:64:6c:ea:7d:30:c9:03:84:9a:3c:e3:c8:0c:
a5:86:98:e2:f9:81:82:4d:ef:a5:65:c5:0e:e5:b9:1a:51:99:
b8:a9:d1:71:e4:66:c4:32:20:24:0a:22:cc:ff:b6:03:11:d5:
ad:58:ae:a2:a0:83:c9:7b:c3:c5:1a:c2:b8:90:1e:1f:82:40:
64:7b:68:96:04:78:78:fb:26:d3:fc:4f:be:d0:db:ef:62:cd:
0a:37:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:50 2026 by rpki-client