Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: mRn3Tf5b8YABlqU8K+7qHG6q0NIZplI5ZrDXeBCUmdo=
Subject key identifier: 56:08:93:0D:3F:8C:69:47:69:59:73:92:C4:E0:DC:AA:6D:42:8F:00
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 019D28844BC99A18958A4FA67594272EF2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: 3El05iYRSjjsnnMmSgg5UzcIJzI.roa (hash: lu4N0zTDe8PsZfTOKcSd8MPmVfa3fQOGOtCh01kU1Ak=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: BeugTdqAhaJGVyZZCw2CilTnoztMEPqUY+BNJzP2HUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4b:c9:9a:18:95:8a:4f:a6:75:94:27:2e:f2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=5608930d3f8c694769597392c4e0dcaa6d428f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:ba:9c:65:ae:78:ba:d4:0b:90:da:29:1c:
4c:bf:31:86:0a:26:18:b6:6b:54:25:a8:d3:12:d7:
13:bf:99:00:c3:8b:70:6a:f8:d6:fb:33:09:3d:31:
46:18:02:0d:99:4f:fb:07:f8:de:6a:06:7a:62:48:
41:6c:8f:20:7f:f3:c3:97:6f:0d:76:cd:3a:1d:e8:
2c:af:18:a4:c6:35:91:67:d6:02:a6:08:21:7f:d3:
d6:b8:e4:9d:be:6b:f5:5b:2b:fb:8c:ae:c0:8b:e7:
6d:af:ff:91:d6:6a:69:a7:0d:c1:db:12:0d:f7:e0:
98:ef:a0:43:47:53:07:6a:9f:60:a8:bc:6d:8f:19:
0f:a9:d1:0b:2d:06:3b:8f:a4:f8:ea:51:5c:73:0f:
29:d2:73:74:29:d4:b1:71:83:e7:9d:d5:5a:f3:c4:
dd:2f:9d:9c:04:c5:e3:fc:5c:3a:62:48:7a:c0:de:
90:7c:b6:c3:92:0a:49:1d:c5:e6:5a:75:cc:11:80:
15:f9:d9:76:16:c6:0e:79:be:58:37:96:5a:e0:16:
76:59:49:5b:19:08:b2:f4:66:10:ea:4f:a5:47:9e:
e5:ea:7e:60:15:46:ba:46:93:4e:93:74:3f:76:f2:
3e:2a:45:d6:d7:c0:10:a6:e0:58:1c:6c:58:f7:95:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:08:93:0D:3F:8C:69:47:69:59:73:92:C4:E0:DC:AA:6D:42:8F:00
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:93:6c:98:48:fb:0a:2f:ff:14:48:95:6f:80:92:2d:cb:4e:
92:ef:92:80:ae:0d:e2:a7:c7:75:3b:a8:cd:3e:45:0a:e2:14:
b8:8b:1f:27:f8:7f:df:e2:55:71:fe:cc:1a:25:1c:cb:53:fc:
a9:a0:ac:2d:6d:67:25:e2:e4:e2:55:11:e4:23:75:5f:60:07:
3e:57:d8:c1:76:a6:37:6a:a3:46:e5:f6:a9:42:b9:39:3a:f3:
09:91:90:8c:0d:8f:77:1c:67:7d:37:24:40:3c:be:ee:0e:ef:
c5:dd:b1:f9:a9:37:06:fe:61:12:58:a7:0d:d6:22:59:ea:b6:
9d:70:de:85:fe:dd:b5:b8:cb:23:e0:e9:6c:b7:3e:1d:6c:41:
41:a5:5d:93:32:ae:f0:33:21:c0:0f:a0:30:56:8a:af:a3:c7:
82:cb:95:f9:dd:38:fc:90:91:11:6b:cb:ee:aa:8d:1b:88:b6:
7a:55:bf:a5:ff:a2:cd:99:34:e4:cf:4d:97:65:41:c5:f8:a4:
b5:0c:61:6b:49:5c:f5:2f:c8:d5:3e:75:4a:a8:a2:87:e2:6d:
40:a2:86:7f:2f:2b:95:3e:cd:7f:36:fe:cb:9d:93:22:74:ea:
41:f7:3f:57:d0:35:36:47:6e:d5:67:5a:d8:0c:aa:6d:ab:85:
c7:b5:c9:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohEvJmhiVik+mdZQnLvKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx
OGQ2NWMwHhcNMjYwMzI2MDUwMDUxWhcNMjYwMzI3MDUwMDUxWjAzMTEwLwYDVQQD
Eyg1NjA4OTMwZDNmOGM2OTQ3Njk1OTczOTJjNGUwZGNhYTZkNDI4ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cu6nGWueLrUC5DaKRxMvzGGCiYY
tmtUJajTEtcTv5kAw4twavjW+zMJPTFGGAINmU/7B/jeagZ6YkhBbI8gf/PDl28N
ds06HegsrxikxjWRZ9YCpgghf9PWuOSdvmv1Wyv7jK7Ai+dtr/+R1mpppw3B2xIN
9+CY76BDR1MHap9gqLxtjxkPqdELLQY7j6T46lFccw8p0nN0KdSxcYPnndVa88Td
L52cBMXj/Fw6Ykh6wN6QfLbDkgpJHcXmWnXMEYAV+dl2FsYOeb5YN5Za4BZ2WUlb
GQiy9GYQ6k+lR57l6n5gFUa6RpNOk3Q/dvI+KkXW18AQpuBYHGxY95VyLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYIkw0/jGlHaVlzksTg3KptQo8AMB8GA1UdIwQY
MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt
NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5
LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5NsmEj7
Ci//FEiVb4CSLctOku+SgK4N4qfHdTuozT5FCuIUuIsfJ/h/3+JVcf7MGiUcy1P8
qaCsLW1nJeLk4lUR5CN1X2AHPlfYwXamN2qjRuX2qUK5OTrzCZGQjA2PdxxnfTck
QDy+7g7vxd2x+ak3Bv5hElinDdYiWeq2nXDehf7dtbjLI+DpbLc+HWxBQaVdkzKu
8DMhwA+gMFaKr6PHgsuV+d04/JCREWvL7qqNG4i2elW/pf+izZk05M9Nl2VBxfik
tQxha0lc9S/I1T51Sqiih+JtQKKGfy8rlT7Nfzb+y52TInTqQfc/V9A1Nkdu1Wda
2AyqbauFx7XJPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:09 2026 by rpki-client