Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: kJRu6MR54MwofsL6irh7BBlWhvW2hesx5Lw4N/XBAdk=
Subject key identifier: 30:BB:05:5B:F1:1E:1B:76:6F:7D:6E:24:13:49:56:CB:83:06:95:00
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 019D39409CFB67D795860A0433A54BEE1A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: 6p89_xCOKbaLA_nTNaPhKFJdz_c.roa (hash: 8QYHiVGLqfMhZfw5m6z2kE4Wp9ZlKeYZXiQifht1XBw=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: QNQnkqv+0dzZmdE1ZE7htyhdk4tr97zkFZHb3N7HW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9c:fb:67:d7:95:86:0a:04:33:a5:4b:ee:1a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=30bb055bf11e1b766f7d6e24134956cb83069500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:e8:c7:51:bf:67:33:e6:16:8d:af:47:08:
d7:11:6f:65:03:3c:b9:46:aa:86:5f:fe:70:1a:73:
91:ce:80:47:96:b5:ec:4b:93:61:8b:91:ff:93:30:
88:27:eb:78:ca:9a:54:e4:d4:e5:33:aa:69:c7:bc:
3f:5e:79:18:2d:ac:38:a1:e9:99:87:cd:50:7b:3d:
9a:19:60:48:b9:ca:8c:89:aa:8c:80:fd:db:31:18:
25:b1:d5:5e:23:15:ab:e0:d3:be:81:55:dc:f8:3c:
45:58:4b:1a:1e:62:c8:0b:ad:aa:93:43:65:bb:90:
12:67:8f:87:29:6a:3e:a9:27:a1:30:46:7f:70:e0:
a3:cf:9d:15:bb:bc:9c:7d:7c:02:00:3f:05:81:d3:
47:6d:bd:f4:4b:6e:56:aa:1f:4b:65:13:a4:cd:2a:
45:86:fa:d8:34:09:21:34:8a:a6:a6:f2:7d:65:cb:
ce:77:f3:51:bc:e1:cc:5e:48:0c:06:c2:f7:c2:3f:
6a:1e:62:5c:45:bf:ee:0f:f5:55:a8:f0:a0:dc:4d:
4c:77:4d:db:0c:63:9c:80:e3:35:4d:3b:7d:32:9e:
ea:24:44:9e:00:d4:34:f8:b8:db:f2:16:0d:34:f5:
a4:2b:60:ad:66:67:18:a8:2f:d5:40:3c:47:9c:ce:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BB:05:5B:F1:1E:1B:76:6F:7D:6E:24:13:49:56:CB:83:06:95:00
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:f9:25:fb:6d:89:e1:1d:bd:f6:a3:89:b8:20:8a:d5:9a:
2c:22:d6:84:86:1e:d7:82:f4:6a:d8:70:2e:23:9f:13:ac:e0:
f4:e8:c0:52:2a:06:e8:21:21:8c:f7:00:fb:d5:2c:b7:1a:77:
cd:6c:26:b7:0e:23:58:a1:5a:29:ef:ce:3e:f6:bd:8f:66:51:
97:10:69:7f:e7:af:09:d7:42:1a:57:31:6c:70:64:9a:6e:56:
0f:27:0f:f9:fd:a5:16:08:53:c2:31:45:0b:bd:cd:0b:38:46:
f1:18:bd:bf:9d:6b:d3:0d:c9:28:c0:dc:2d:3e:8a:2f:0f:fe:
13:a2:3b:5e:36:fa:ce:53:44:11:bb:62:52:bf:61:e8:e3:e3:
eb:b7:5c:82:76:51:06:ff:86:c7:fa:46:e6:2e:68:94:f7:42:
2c:d6:d5:1c:8a:15:5e:0b:0b:ca:3d:b0:09:b0:15:0d:94:54:
11:85:95:6c:f0:4d:0a:ad:97:f9:f9:48:f7:96:a0:25:22:87:
20:e2:1e:3e:7c:a1:47:4b:7f:df:b0:b0:27:b5:b4:e9:90:c3:
0b:25:87:d7:83:bb:4a:45:01:bc:c4:e6:fc:0f:f7:37:e1:07:
b6:57:92:af:d9:25:c5:8c:a3:50:d8:6f:73:c4:14:2f:a0:e2:
57:93:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:01 2026 by rpki-client