Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: JT1cypLLBdktJ2Gf0+sghfKpysC+x6KjzaR1p2fA8SM=
Subject key identifier: 99:02:75:DC:70:11:3C:D3:57:81:3E:F3:68:20:FB:C1:74:38:79:09
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019DCFAC46ADDF10FA4B302778B016C16C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0369
Signing time: Mon 27 Apr 2026 16:01:07 +0000
Manifest this update: Mon 27 Apr 2026 16:01:07 +0000
Manifest next update: Tue 28 Apr 2026 16:01:07 +0000
Files and hashes: 1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: dY8ge9N9a5XrBGRr3gN39dGcQxpvrrYEnrWP5CcsDpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:46:ad:df:10:fa:4b:30:27:78:b0:16:c1:6c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Apr 27 16:01:07 2026 GMT
Not After : Apr 28 16:01:07 2026 GMT
Subject: CN=990275dc70113cd357813ef36820fbc174387909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:ea:08:b5:a8:e7:c9:51:c5:25:3b:66:fc:
89:4e:aa:f8:97:17:1c:57:de:90:a5:88:73:76:69:
47:bd:3b:fd:ba:fa:0c:63:d6:0c:4a:8b:a5:45:77:
2d:c6:ea:e0:b1:ff:2f:c4:44:5a:96:5f:bf:f1:36:
62:62:23:42:a6:f9:43:7a:d3:f7:35:73:fe:1f:4a:
77:45:67:75:53:b6:8b:31:7a:fd:d2:4f:fb:7d:cd:
d5:b1:01:b9:3a:ec:0e:d2:26:e1:4b:39:09:a4:7e:
38:49:14:a8:a1:15:4e:ea:37:fc:9c:d9:6f:61:14:
f9:b6:f3:20:b3:ad:ef:9f:48:f5:22:4b:9e:3e:cd:
3c:08:59:e2:44:08:e8:26:ac:b5:c8:38:be:ae:f7:
b1:d6:4a:37:90:83:1f:35:9d:9a:90:e0:39:64:c2:
e9:f4:be:bc:32:ca:57:d8:6b:e7:4f:6d:57:15:ac:
e6:21:89:6f:ec:13:4a:9d:97:ef:64:7d:a1:0e:92:
65:09:1f:c7:85:04:47:bc:47:1b:36:45:02:2d:fd:
5e:aa:f6:cf:9a:c8:e0:bd:bf:6e:92:b1:ef:70:9e:
c3:3c:00:2a:75:2c:ae:bc:20:49:0e:96:2e:cf:25:
d6:b6:43:b5:69:e3:c8:8a:0e:dd:76:d0:18:a5:12:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:75:DC:70:11:3C:D3:57:81:3E:F3:68:20:FB:C1:74:38:79:09
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:19:ac:06:e2:b8:29:1d:69:b8:10:59:f8:80:b7:82:e2:1f:
8e:4b:dd:22:6e:84:05:40:25:a6:f7:ca:19:5a:a5:16:26:09:
f9:79:55:fd:5c:fa:9d:cd:9f:2c:de:52:07:4b:45:5c:e3:1b:
6f:6c:3c:cd:3d:8f:04:ee:4e:89:76:3e:41:f0:11:77:13:c2:
77:96:02:ab:cb:18:6e:f3:90:69:a9:0e:64:63:07:06:71:85:
e4:a9:cb:57:ff:a3:35:04:74:c8:e6:1e:ff:c7:2f:76:2a:79:
33:52:2f:50:fd:f0:af:a5:ce:38:96:d4:3b:fa:ea:5d:b4:69:
bf:44:92:1a:14:a6:78:d8:3c:86:06:b0:1a:38:3b:21:c6:d7:
66:08:91:9b:ed:ff:be:8e:14:9b:47:2e:71:ab:2d:94:91:5d:
3e:e3:2d:91:8a:00:b1:98:1a:17:b4:80:86:92:27:37:e4:94:
aa:49:95:a3:8f:80:08:e7:26:55:1f:61:3e:71:26:a4:84:ba:
28:33:5d:91:f5:d3:4e:5e:7d:f8:40:94:32:c4:c2:7d:a6:0d:
4d:1c:47:40:09:36:d3:d2:35:ca:65:25:4c:69:ad:69:d5:4c:
29:cc:1f:6a:26:f7:c2:f9:43:ab:bc:c3:d3:b5:e2:dc:23:5b:
bc:a1:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:30:10 2026 by rpki-client