Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: jU5B3w+latw3do9DDwMlVw3sLJVF6ZetBqImC95W0cA=
Subject key identifier: CE:67:50:99:58:0D:58:3D:15:98:F3:BC:D8:9D:85:B5:B3:A4:B6:63
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019F10E53818CD556B17C57CDFFFB9789543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 038D
Signing time: Mon 29 Jun 2026 01:01:25 +0000
Manifest this update: Mon 29 Jun 2026 01:01:25 +0000
Manifest next update: Tue 30 Jun 2026 01:01:25 +0000
Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: pEkgguwXEcOzT4LDZvaZKSxLV6zawpW/TfHy4BPMPlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:38:18:cd:55:6b:17:c5:7c:df:ff:b9:78:95:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Jun 29 01:01:25 2026 GMT
Not After : Jun 30 01:01:25 2026 GMT
Subject: CN=ce675099580d583d1598f3bcd89d85b5b3a4b663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:43:13:55:5a:43:a7:d7:0a:70:9e:6e:4b:
50:7b:ec:a2:c2:1a:f5:7f:2f:97:cc:c7:b9:d2:79:
b3:66:cf:06:6e:0a:12:8f:f3:3f:22:2a:fe:63:35:
f6:68:32:c6:c1:b1:cc:e7:1b:1c:26:c7:ba:0d:cc:
c8:e0:71:6b:78:50:15:e2:0f:bc:6f:a4:8c:5c:87:
38:db:c9:9a:c8:03:df:8e:aa:0b:a2:97:7e:01:04:
a4:01:84:30:50:16:77:82:58:0f:c7:7a:32:43:f7:
1f:0d:25:63:72:0e:6a:ac:d0:94:ca:e0:01:08:65:
b2:5b:38:40:05:0b:33:a1:a3:89:48:7a:c2:f2:2e:
8d:fc:ba:56:81:e7:3d:45:46:51:c7:01:cd:d5:11:
b6:63:57:ee:bc:e8:7f:fe:c5:25:d4:61:1a:6f:0a:
f8:3f:6b:71:a2:f5:8c:2d:66:65:d5:56:97:8a:e7:
ee:34:9c:ef:d3:ed:6e:3d:5d:2b:31:d1:71:4c:6e:
18:c9:a0:36:10:d0:2e:de:dc:72:82:2f:4c:00:5d:
da:a7:57:a1:bd:aa:da:cb:36:b9:43:cf:e7:be:d8:
b7:b7:e7:5e:2f:94:8b:7b:96:6f:3b:92:cb:97:4f:
7e:b0:62:7d:b3:0a:dd:e6:14:a3:bd:67:77:0b:b3:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:50:99:58:0D:58:3D:15:98:F3:BC:D8:9D:85:B5:B3:A4:B6:63
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:22:30:66:d1:e8:87:c2:d3:a9:d7:15:7e:46:46:a6:7d:21:
2c:bf:bd:9f:54:18:b1:b0:22:4f:d1:7b:03:9a:72:c4:a1:95:
73:a5:09:40:be:d7:0f:cc:8d:72:50:81:8e:dd:51:ed:77:c5:
56:cf:d2:7c:0c:5b:e8:fc:00:91:15:0a:65:04:5f:b0:34:f3:
35:5a:81:86:e3:cb:63:19:8e:f0:88:ff:00:75:bc:c7:4d:64:
3e:24:bb:99:aa:33:85:f0:32:3e:03:a4:9c:c0:32:a8:bd:9f:
5e:fb:37:8e:d3:87:02:53:ae:7e:01:8f:ae:7c:29:e2:42:19:
3f:f2:ee:04:0f:1a:ed:f5:50:99:a7:bd:4b:58:9b:6c:a8:da:
78:04:9e:8f:8a:f7:e5:a9:3e:39:dc:36:fb:c2:60:f8:01:7f:
7d:88:9a:42:ae:d7:76:1b:fd:08:4f:41:83:c3:63:e9:70:3d:
31:61:bd:f9:73:93:1b:51:33:f0:ee:79:7c:09:a7:a1:bd:61:
9d:71:ac:3b:51:e3:3e:df:bb:1b:d3:cb:ca:41:33:2a:df:50:
af:01:9b:eb:fc:bc:c9:f8:e3:92:ce:3e:cb:63:06:8d:65:d8:
ad:1f:37:59:29:95:b5:7e:14:a8:5c:91:4b:b8:4c:13:c8:b3:
2f:ab:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:25 2026 by rpki-client