Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: M+FPyYOdDrTjjNWzhTBiniBYlgeNiqdm9TY9dv1RcTc=
Subject key identifier: F0:FF:28:6F:84:9E:FE:4F:E2:A4:CE:5D:03:72:77:3E:8E:C8:02:D9
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019D37C04640CD1380998CD37604CAC63E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 0298
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: BROpTe8OAve+3TPbRm26XpQCnJAg0o/cLgj3FFyVQWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:46:40:cd:13:80:99:8c:d3:76:04:ca:c6:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=f0ff286f849efe4fe2a4ce5d0372773e8ec802d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:7e:05:e6:47:ff:0d:51:43:de:60:64:95:
ef:ca:2a:3b:b9:b8:b5:eb:59:9b:e7:45:9b:ee:25:
91:c0:1f:d1:d8:26:09:52:f2:27:bf:05:b0:ac:b9:
e6:74:ca:1a:1e:bf:6e:6c:ef:7c:30:3f:f4:52:a9:
7f:d8:08:f9:bd:53:0f:c8:99:42:99:10:e6:88:eb:
e3:c6:9c:9b:5c:50:5b:00:a6:89:51:09:aa:5e:52:
be:0a:96:b7:99:ac:61:f6:27:25:8d:88:97:1d:d0:
22:a1:90:13:8c:e0:11:f0:8d:62:3d:94:59:ce:58:
56:ee:4b:ff:ca:97:38:b6:de:8c:6c:05:c5:c2:5e:
04:cb:ed:4d:92:29:43:59:c3:66:10:7a:e8:e9:c1:
82:97:82:46:4f:6b:f5:4c:83:0b:a5:ed:84:d5:6f:
cc:26:54:04:d8:89:2a:ab:f6:58:ee:67:d5:be:c1:
65:fe:f2:4f:54:2e:36:39:9c:db:d5:c8:25:9c:71:
30:1f:be:e5:3d:d4:13:a2:d0:bb:bd:23:f6:53:02:
70:a0:d4:4d:97:ed:a1:ca:b2:65:41:5d:24:b1:61:
56:75:75:b3:9c:38:e1:e6:76:96:7b:ab:92:ac:09:
bb:54:61:83:9d:7e:56:09:26:c8:94:2b:39:e9:33:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:28:6F:84:9E:FE:4F:E2:A4:CE:5D:03:72:77:3E:8E:C8:02:D9
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:50:38:8f:c1:81:45:ed:eb:2e:60:5d:6c:ab:3b:6c:36:b2:
24:fe:a1:8a:ba:cb:78:35:28:05:a9:99:94:3b:d4:7d:40:4d:
80:34:cd:e2:fe:6e:3e:b7:e9:bd:75:27:7e:b6:13:96:e1:a5:
3f:04:3f:7d:51:ee:a9:b4:c2:4d:39:e2:f9:9e:74:60:03:94:
dc:c2:74:bf:24:6d:48:1e:a3:c9:70:72:08:46:fe:ab:eb:43:
6f:6e:09:91:e2:f8:7f:14:c3:b7:fd:75:d6:cd:c1:ef:af:19:
bb:c3:82:c8:a3:a6:02:ec:63:c1:ad:c7:a7:e4:52:78:0a:e5:
66:27:4a:97:58:9d:c1:1a:3c:03:ff:d1:09:27:27:d0:d0:6a:
39:eb:b1:d7:ae:3f:f7:07:cb:0e:8f:bd:fb:74:bc:93:ae:e7:
4d:c2:13:cb:8d:31:02:b1:16:7c:79:e7:30:4f:77:52:e8:01:
bd:2d:f4:03:34:14:a3:db:06:63:d6:a9:a0:fd:3e:16:df:55:
6c:99:f2:62:6c:9a:cd:42:8c:7b:d4:b4:e7:03:4a:c6:06:29:
f9:6c:11:4d:90:2b:b3:26:0c:79:b1:23:61:41:da:cd:a5:15:
7c:1c:cc:08:31:42:c8:aa:13:c5:4a:3b:c6:81:01:8d:46:39:
e6:d1:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:38 2026 by rpki-client