Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: /01JFHeMfhWV1ts+gdATUAoImaZVpfwx8RsfCAH0pLI=
Subject key identifier: EC:DE:31:28:71:E4:A9:BA:B6:7E:B9:0E:C9:B1:EA:64:16:19:5B:43
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 019D390983CF7F5191DB801F6B28F7015378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: NUAzeiweOuAdospdZKprFcrpT_A.roa (hash: 1ElfmDWVh8gEsGgcrn15DX/GYQtHYpQEuEeNVWQ/qKA=)
2: eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa (hash: zDufrnp/lRdYw6z5myv4nDWlvesG8imRXgNlxsEXDkk=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: S6WHCRJi2zQ+iT5Sy3c6ecc+uo2LUeCuP6gCceLCf5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:83:cf:7f:51:91:db:80:1f:6b:28:f7:01:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=ecde312871e4a9bab67eb90ec9b1ea6416195b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:12:0a:fd:58:f7:e9:1a:70:27:dd:09:d8:
c2:5b:a4:2d:cd:73:b1:34:2c:2d:21:2c:96:3f:f2:
3c:78:61:8b:6f:d3:6b:6f:2a:9b:41:c9:bc:69:0b:
aa:46:ee:0b:54:87:f3:25:c3:c5:d1:61:8f:bd:6b:
e9:b5:c6:15:db:d6:3e:a1:fe:22:d4:e8:c7:a6:4a:
34:6b:30:91:28:91:53:9c:e8:5f:bc:85:9b:d7:f7:
95:ef:3e:64:b6:5a:83:de:47:86:f3:67:96:db:0f:
dc:85:09:d9:60:39:1a:45:e8:1a:39:9a:78:3a:3c:
19:96:02:bd:b3:c1:db:a9:b2:77:d0:0c:13:6e:bf:
4e:fc:0f:0c:f8:5e:44:44:ed:6d:72:04:33:f7:8d:
17:fd:0e:2a:88:2d:94:d8:d9:43:9a:e7:dd:5b:78:
cc:9d:8a:cd:9c:d7:17:ba:67:9b:20:01:95:1a:e2:
a9:5a:d4:fe:fe:a9:7a:c2:34:bd:4a:ba:52:f6:02:
f4:67:75:6e:36:10:a7:65:bd:15:56:b5:07:ac:0f:
e9:42:dd:6e:cb:84:19:e4:75:58:12:ff:22:a2:cc:
dc:01:fc:c3:9e:94:ae:ff:8e:2c:4d:d1:ed:fb:f2:
4c:1a:ba:56:34:bb:32:3b:ad:28:1b:e3:16:c7:63:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DE:31:28:71:E4:A9:BA:B6:7E:B9:0E:C9:B1:EA:64:16:19:5B:43
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:75:6e:39:b5:34:99:43:0b:61:30:a3:c4:9f:a6:8c:09:
7d:2f:4a:00:63:34:2a:f4:3a:55:e1:de:60:67:a0:f4:d7:2f:
c3:45:d4:f5:f4:41:1d:c4:39:4e:14:65:07:48:35:31:62:13:
26:0a:b9:72:c8:a8:99:94:03:4a:20:54:09:33:d7:d7:d7:b8:
9f:4c:26:cb:3b:3d:9b:ed:a2:07:b0:68:02:99:49:1a:71:8f:
20:d3:b0:5b:93:ec:26:ff:d1:af:e4:9b:b3:b6:be:48:10:ca:
64:da:44:86:ee:21:44:2c:f4:35:cd:07:ce:b0:ac:4a:6f:b1:
10:d0:35:83:0f:32:5c:7c:34:4a:8c:d1:66:cd:14:a9:93:78:
ff:98:c7:3d:bc:97:3b:2d:20:3a:29:c4:07:c9:c1:f5:ae:ac:
74:26:57:f0:51:58:a2:27:72:0c:9a:33:75:68:7b:ae:58:33:
db:5b:af:8a:97:63:a2:f1:ce:ed:05:e7:fd:6a:87:ce:49:42:
ff:7d:16:b3:61:09:7e:87:5e:84:c4:5c:da:42:99:79:ac:0b:
40:20:be:15:7b:a9:27:77:43:34:b4:40:e3:c9:cb:c4:20:38:
a0:93:62:72:90:d6:ff:ac:50:a6:51:eb:a4:dc:90:46:66:6e:
90:68:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:33 2026 by rpki-client