Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
File: LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json)
Hash identifier: AKXAun8w7JxA742JezEZKZd3UZ8TyM7DRbhnN646wOA=
Subject key identifier: 13:9B:CE:4D:CF:9E:0C:E3:A5:D0:B8:48:44:52:A8:C1:88:B1:82:36
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial: 019D38666439AAAB51EBAC96DF91F0E100AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
Manifest number: 1872
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: 417x_tVp2zupRI19gmGtEr42pAU.roa (hash: jM5VoBmYgAi+dYDgZAd7It6YdKGwaYgeQqIUOmodcEY=)
2: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: LvF4pqhiPX13NOdOZqQICwIxEW1YLIVvZ7rtmtzurKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:64:39:aa:ab:51:eb:ac:96:df:91:f0:e1:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=139bce4dcf9e0ce3a5d0b8484452a8c188b18236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:a2:a1:c7:6d:3c:46:2e:2f:8a:7e:13:f6:
db:60:15:84:a3:9a:ea:a4:25:24:9e:d7:de:e8:29:
1d:cb:0e:99:b2:c3:85:c1:ad:6d:ea:ac:2d:97:fa:
bc:85:8d:a4:5f:5b:bf:fd:7d:58:a9:37:92:78:4b:
48:11:68:46:ef:bf:87:13:4e:30:ff:a9:57:fa:de:
10:15:e7:55:f0:76:9a:da:c8:27:91:25:bf:cd:1d:
4b:ee:39:dc:a1:a2:88:39:0d:cc:8d:ac:3f:ac:30:
a6:aa:82:4b:c2:b7:e1:41:da:69:84:31:91:a5:15:
04:23:2b:33:dd:0e:10:06:0f:13:2d:c2:a0:fe:59:
d2:13:66:29:39:43:56:9a:3c:ea:90:c8:ca:49:52:
43:7b:21:35:1c:5c:c5:8d:a7:a9:39:26:43:db:61:
9c:32:4e:ab:31:0a:a8:80:8c:ab:2f:26:38:82:88:
e7:e2:68:3c:af:2f:85:f8:08:e5:3d:78:04:4d:8d:
f0:c5:c0:cf:6c:0a:b3:a7:a5:11:0d:d9:55:33:29:
07:65:b5:5e:af:90:c5:bc:eb:8a:e9:a6:72:73:5c:
4b:93:fc:34:40:97:11:6e:c8:bd:99:5d:3a:07:d7:
00:21:d5:9c:68:4e:96:7d:69:4b:bd:eb:e3:25:b6:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:CE:4D:CF:9E:0C:E3:A5:D0:B8:48:44:52:A8:C1:88:B1:82:36
X509v3 Authority Key Identifier:
keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e0:b1:07:1d:f5:5d:8b:8a:45:98:4c:8c:49:33:f3:52:3b:
ae:be:ef:a2:65:e0:7f:7f:6d:50:c2:66:46:e0:48:f9:d4:e4:
00:3d:07:e7:2f:e2:ce:8e:35:e0:72:8e:6a:43:7b:8e:cb:d1:
22:5e:12:36:55:e0:f8:55:e6:d2:1e:0c:a0:cd:db:9e:33:37:
43:24:46:14:53:fa:b0:1d:78:43:fc:ff:6e:3f:58:28:4e:ce:
8f:86:eb:59:72:24:c1:1f:4a:a1:53:f8:0d:a9:17:be:94:b9:
03:30:0b:a1:41:4a:da:bd:04:cb:5d:ee:16:d4:5a:53:c9:e9:
56:9a:0c:25:01:04:75:35:3b:f3:5a:53:10:74:3e:39:1d:35:
61:1f:15:57:d2:50:4b:1e:41:f9:5a:a6:a6:4b:48:6d:4e:9d:
3a:42:de:2a:da:c9:a9:db:f9:8e:e4:31:35:cf:eb:62:6a:eb:
09:3a:c1:03:2a:dd:78:92:31:17:c0:85:ce:1c:2d:51:82:fc:
b6:28:4a:7c:7c:ca:9b:a0:83:04:6d:0f:3c:26:92:36:21:20:
ac:ea:b4:cb:81:4b:46:96:49:0e:3a:48:47:29:61:42:85:08:
b9:cf:70:ea:c3:00:f2:76:aa:01:96:d4:f4:52:b0:11:36:e3:
4b:0c:3e:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmQ5qqtR66yW35Hw4QCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTgxNWIwYzlkYzllZTIyMDdlYzk0MTdjZGVjMmJjNGJl
MjNjNjEwHhcNMjYwMzI5MDcwMjA3WhcNMjYwMzMwMDcwMjA3WjAzMTEwLwYDVQQD
EygxMzliY2U0ZGNmOWUwY2UzYTVkMGI4NDg0NDUyYThjMTg4YjE4MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI2iocdtPEYuL4p+E/bbYBWEo5rq
pCUkntfe6Ckdyw6ZssOFwa1t6qwtl/q8hY2kX1u//X1YqTeSeEtIEWhG77+HE04w
/6lX+t4QFedV8Haa2sgnkSW/zR1L7jncoaKIOQ3Mjaw/rDCmqoJLwrfhQdpphDGR
pRUEIysz3Q4QBg8TLcKg/lnSE2YpOUNWmjzqkMjKSVJDeyE1HFzFjaepOSZD22Gc
Mk6rMQqogIyrLyY4gojn4mg8ry+F+AjlPXgETY3wxcDPbAqzp6URDdlVMykHZbVe
r5DFvOuK6aZyc1xLk/w0QJcRbsi9mV06B9cAIdWcaE6WfWlLvevjJbZTdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBObzk3PngzjpdC4SERSqMGIsYI2MB8GA1UdIwQY
MBaAFC0YFbDJ3J7iIH7JQXzewrxL4jxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQt
ZDIwMmYyYTQwMDgxLzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQtZDIwMmYyYTQwMDgx
LzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOCxBx31
XYuKRZhMjEkz81I7rr7vomXgf39tUMJmRuBI+dTkAD0H5y/izo414HKOakN7jsvR
Il4SNlXg+FXm0h4MoM3bnjM3QyRGFFP6sB14Q/z/bj9YKE7Oj4brWXIkwR9KoVP4
DakXvpS5AzALoUFK2r0Ey13uFtRaU8npVpoMJQEEdTU781pTEHQ+OR01YR8VV9JQ
Sx5B+VqmpktIbU6dOkLeKtrJqdv5juQxNc/rYmrrCTrBAyrdeJIxF8CFzhwtUYL8
tihKfHzKm6CDBG0PPCaSNiEgrOq0y4FLRpZJDjpIRylhQoUIuc9w6sMA8naqAZbU
9FKwETbjSww+Fg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:29 2026 by rpki-client