Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier: LxK2q/ElU5OrhFJ+MncJMiBGaEp+xesfH/woC4rZoXw=
Subject key identifier: E3:32:89:83:EC:A8:EF:BB:3B:BE:8C:5B:BA:20:B9:F4:EE:B1:6E:A2
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial: 019E8FB7F3482988CA88433C5242C7F8FA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number: 1940
Signing time: Wed 03 Jun 2026 23:00:57 +0000
Manifest this update: Wed 03 Jun 2026 23:00:57 +0000
Manifest next update: Thu 04 Jun 2026 23:00:57 +0000
Files and hashes: 1: HRHfBeVR8FCErSeg_f0jsh6Y810.roa (hash: 5Uj4MHwwi5BQxM2HtVlQdjayICr5xhiFmlHmBSv92Ek=)
2: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=)
3: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: Z0QadNUlITvhi02gg4fFiS6PEAo7zs1jnZHRCdx6EcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:f3:48:29:88:ca:88:43:3c:52:42:c7:f8:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Validity
Not Before: Jun 3 23:00:57 2026 GMT
Not After : Jun 4 23:00:57 2026 GMT
Subject: CN=e3328983eca8efbb3bbe8c5bba20b9f4eeb16ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:59:33:b4:c9:59:f7:11:ea:96:62:b3:96:
75:ce:71:ba:43:c7:a2:5c:1d:0e:7a:78:3c:75:02:
e2:7b:a6:ad:23:3a:ac:39:5b:c3:81:ee:2f:11:37:
9b:48:a6:83:ef:e6:5b:6c:c3:c5:59:20:b2:19:62:
80:58:7c:de:55:ec:ac:6c:cd:a3:89:41:13:a7:cb:
07:95:62:43:ad:87:72:1a:aa:88:09:19:7d:3c:c0:
b6:12:23:d2:91:f1:d6:e4:c8:1e:aa:0b:19:65:e2:
80:3c:98:fb:f6:0f:15:d4:58:43:9b:11:c6:5a:81:
86:3c:92:a5:7a:fc:16:0b:72:70:05:7f:89:98:e7:
ea:71:3f:71:13:e0:e4:9a:90:f4:a2:2e:cb:33:e7:
70:f4:e3:c4:47:85:06:60:86:63:75:63:9a:ff:6e:
75:72:ac:d9:ac:e6:88:6c:71:45:8a:51:38:7e:c5:
bd:a0:d4:44:16:40:46:f8:f2:0c:88:9e:1d:40:c1:
0b:9f:c2:9d:b1:0f:c1:c8:f5:68:5c:38:c6:39:51:
bb:6d:cc:5e:d3:06:2c:0d:4f:44:24:a8:de:01:1c:
80:35:37:de:ab:58:56:3f:cc:df:d8:59:f9:24:e6:
47:1f:06:86:22:7c:ef:f9:50:bc:4b:71:c1:cf:87:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:89:83:EC:A8:EF:BB:3B:BE:8C:5B:BA:20:B9:F4:EE:B1:6E:A2
X509v3 Authority Key Identifier:
keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6c:39:e2:cc:db:e6:d2:24:8e:80:43:57:58:53:8d:cc:24:
32:c7:f0:53:13:71:1f:e2:48:cc:75:e3:93:1a:d4:56:18:d0:
c1:c5:64:90:a3:af:e9:29:67:24:45:fe:aa:9b:7c:59:bb:6d:
58:ac:da:32:d7:14:c2:67:cd:9c:3c:d9:ea:f1:7b:8f:5f:ef:
0b:08:a3:ab:0e:3a:cb:3f:cc:02:39:8a:95:25:c9:a7:1d:ae:
fb:83:b5:39:27:14:8c:08:14:44:a2:85:15:ae:27:59:70:40:
43:bb:a2:88:86:fe:5d:91:a0:34:e7:85:85:3f:10:11:fa:1b:
ee:09:76:c6:22:62:1c:8e:e0:fc:d0:09:4c:3f:47:99:91:7b:
7f:d3:b7:0f:57:d9:57:b4:7c:94:52:31:ca:e6:d5:71:91:f0:
0a:93:3a:09:f1:50:98:92:03:48:53:28:23:c0:f4:63:0d:10:
85:d0:92:ba:01:68:92:bf:b3:74:ac:3b:1a:3d:3b:c8:30:1d:
ee:fa:f2:d2:3a:e3:8f:0f:90:18:e5:ce:5e:d1:a7:f1:4d:0e:
07:72:7b:c6:be:74:a1:4d:5f:b4:0e:aa:18:d3:25:02:b9:5a:
fe:fe:0a:13:a1:54:e5:12:9d:e8:64:aa:23:97:57:d9:db:33:
0a:84:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:15:48 2026 by rpki-client