Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: 8B1BRLniOqZ6yS/WIgseQrCCQbvL3OuHsWH9gb/5mMI=
Subject key identifier: 1A:6C:54:93:3A:10:55:4B:B7:53:0C:84:5F:BC:82:0F:49:FD:41:C2
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019E1D59549F6970B87073ECD96692896592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1602
Signing time: Tue 12 May 2026 18:00:54 +0000
Manifest this update: Tue 12 May 2026 18:00:54 +0000
Manifest next update: Wed 13 May 2026 18:00:54 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: jBiIu1xVa2b25fJlg+SIp6DU+qYg0yv6XGaUu7aDxu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:54:9f:69:70:b8:70:73:ec:d9:66:92:89:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: May 12 18:00:54 2026 GMT
Not After : May 13 18:00:54 2026 GMT
Subject: CN=1a6c54933a10554bb7530c845fbc820f49fd41c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:3c:36:2a:a4:20:e4:1b:6a:b4:22:62:64:
90:d7:29:1e:07:8e:56:a6:2c:0a:2e:6b:7d:44:50:
b3:e2:67:fe:45:7d:b3:29:1c:91:61:cd:21:52:49:
0b:e4:43:86:fc:98:14:3f:8e:2a:da:39:07:34:ca:
12:bf:b8:b9:68:4b:7f:e5:4d:bb:82:d8:83:3a:c7:
e3:0d:02:73:77:b7:83:d0:17:25:08:db:57:56:74:
2f:0c:72:82:01:af:24:05:94:25:b7:dd:c8:99:cc:
8c:8b:a4:75:82:b3:e6:90:52:ca:ec:a6:1c:14:22:
cd:2b:a0:5e:10:80:08:93:d7:06:9a:e4:f2:9f:d1:
49:2e:ab:c3:e7:19:84:8f:9f:4e:93:33:e3:5d:42:
28:cb:a1:6b:15:2f:ff:68:af:4d:85:a1:e9:42:c1:
41:8d:b7:1c:d2:3e:da:55:99:4f:9a:8d:78:ca:9e:
67:b5:6a:42:cb:bf:9a:30:4b:d7:f7:62:3c:86:18:
0b:07:2b:1c:d8:b7:9a:f3:ea:10:62:a6:ca:d9:0b:
9c:c3:da:63:e1:d5:e2:04:d1:45:48:1b:e3:bd:6b:
79:d5:8b:eb:19:04:48:ef:f2:92:af:11:f3:c9:e5:
73:b3:fa:74:70:07:d0:e5:ec:78:56:26:de:fa:2a:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:54:93:3A:10:55:4B:B7:53:0C:84:5F:BC:82:0F:49:FD:41:C2
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:7e:26:f0:16:1a:da:ce:82:16:ef:5c:25:89:f1:de:5a:
dc:a4:b7:88:ba:de:1a:a7:38:a8:07:99:2f:82:7e:12:a9:0e:
9e:ce:56:c9:bc:1f:87:57:fb:17:96:b2:28:7f:6c:7f:5f:15:
0b:c0:3f:56:4c:3d:f5:79:77:aa:10:f5:fb:58:14:f0:f3:77:
8c:01:f6:69:00:dc:19:e3:5d:64:2e:df:c0:36:bc:a6:30:4a:
de:3d:31:00:7b:e4:9a:f4:26:1f:f3:1b:3b:70:2d:35:6b:1e:
be:a9:af:43:8c:a4:82:1e:d5:be:74:9b:5c:d6:e0:a4:ca:54:
11:9b:00:3d:be:dd:8d:64:10:6e:e2:c8:54:fc:96:f6:a3:b7:
33:b5:85:ee:62:8b:12:7b:2e:de:60:8b:bb:5f:08:d6:ad:b3:
eb:77:f1:e4:08:5d:52:72:e6:01:ed:34:89:2d:81:d0:fd:1d:
60:9b:3b:48:a0:bc:17:86:40:17:c3:17:3f:60:50:3c:ee:9c:
42:fe:b3:35:26:16:87:a3:d8:ed:e4:c1:05:91:06:b1:0d:45:
43:01:0b:8a:76:1f:d9:66:78:94:e9:bf:e1:c8:e1:5f:9b:2a:
92:74:ac:0e:fa:e1:56:eb:05:5f:89:29:36:ff:ce:fa:46:9a:
43:bc:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:57 2026 by rpki-client