Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: roV1chxDvoLXLPXbfr+cCNlx5wrBSiAosgv5BYbiqZI=
Subject key identifier: 83:0E:2A:90:84:C3:93:14:A6:61:A2:81:EE:A8:16:56:B8:A6:1C:EA
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019D0741D3C10E79DCFA03250C6A11E80EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 180A
Signing time: Thu 19 Mar 2026 18:00:47 +0000
Manifest this update: Thu 19 Mar 2026 18:00:47 +0000
Manifest next update: Fri 20 Mar 2026 18:00:47 +0000
Files and hashes: 1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: Prhd8aN0tzK6HS5dBKbrHAZJMGEpcMzvXniSgqEoDXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:41:d3:c1:0e:79:dc:fa:03:25:0c:6a:11:e8:0e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Mar 19 18:00:47 2026 GMT
Not After : Mar 20 18:00:47 2026 GMT
Subject: CN=830e2a9084c39314a661a281eea81656b8a61cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:b6:a8:44:16:3a:11:65:b1:ef:8a:5f:e6:
81:8c:04:25:fc:44:da:10:cd:8d:f7:e7:27:0e:e7:
74:de:d3:72:aa:82:2e:26:19:9b:09:7b:3c:3b:f9:
41:6a:2b:53:66:d3:90:78:0e:8f:89:38:cb:19:1a:
9b:e3:5a:83:b4:77:c9:a6:54:fd:f1:b2:10:a4:04:
f2:2e:4d:e7:e8:40:47:f6:97:5f:23:fb:d7:e9:95:
f0:24:e0:b9:76:f1:1d:a3:72:63:f3:f6:41:2c:d5:
29:73:e7:17:38:02:44:2b:9b:c7:cc:16:3b:3c:4a:
30:92:92:1f:77:15:3d:8c:99:c5:6c:88:e6:a3:e9:
5a:eb:72:d7:48:42:43:19:ce:6c:aa:e2:dc:94:2d:
a6:1f:a5:63:41:23:3c:71:4f:7b:6e:f6:ac:dd:10:
34:59:25:84:a0:de:26:e9:0a:ce:5c:10:33:04:bd:
0b:04:ca:94:55:cb:78:45:17:7c:f5:4f:88:d7:20:
a6:9f:fd:89:47:f4:72:bd:a0:aa:ef:1f:61:73:1d:
53:cf:15:df:a5:85:f4:61:a0:95:38:39:f2:b9:56:
5c:a0:af:e9:77:f4:64:6f:7b:d2:9d:18:5b:00:be:
47:47:37:f0:aa:b5:4c:45:e8:cb:46:71:92:ce:11:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0E:2A:90:84:C3:93:14:A6:61:A2:81:EE:A8:16:56:B8:A6:1C:EA
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:fc:82:f8:7e:3e:42:71:aa:0f:e4:cb:ed:50:64:fb:37:
c5:1a:58:c4:6f:0e:d7:cd:20:da:83:94:73:47:11:a4:23:d7:
ad:51:49:ee:28:ed:11:02:a8:6f:43:ba:63:62:20:01:42:c1:
f5:66:62:ed:d3:bf:d3:94:b9:b1:87:ab:45:d3:b5:22:db:45:
93:a2:45:f2:86:fd:5d:6a:63:60:ca:7b:d9:d5:99:74:2a:d6:
31:93:b5:4d:6a:00:bf:78:db:6b:fe:27:65:be:a3:8d:4b:d8:
f0:72:9c:6c:25:c4:12:2f:40:38:0d:24:78:cd:f7:e8:b8:58:
a8:16:75:48:04:bf:af:f4:1f:02:7b:a6:12:ba:01:48:7a:8d:
d8:f8:16:f4:5c:6b:db:87:04:a7:b2:fd:aa:0b:0b:64:6a:3f:
f5:27:c6:d0:84:f8:c5:ee:27:e5:49:7d:9b:01:cd:5b:8c:1f:
a9:74:48:e2:90:77:4c:8c:15:ef:c4:5b:81:c5:e1:21:25:a2:
40:50:dd:cb:23:2d:0b:d9:dc:08:be:49:0f:a7:34:02:e2:a3:
16:1a:12:1a:37:0c:ec:0b:38:78:3f:e9:1e:05:2b:13:21:1f:
07:99:24:df:53:8e:1a:ab:33:3b:99:ec:29:04:45:00:07:31:
d0:89:15:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0HQdPBDnnc+gMlDGoR6A61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi
MTg2OGYwHhcNMjYwMzE5MTgwMDQ3WhcNMjYwMzIwMTgwMDQ3WjAzMTEwLwYDVQQD
Eyg4MzBlMmE5MDg0YzM5MzE0YTY2MWEyODFlZWE4MTY1NmI4YTYxY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRu2qEQWOhFlse+KX+aBjAQl/ETa
EM2N9+cnDud03tNyqoIuJhmbCXs8O/lBaitTZtOQeA6PiTjLGRqb41qDtHfJplT9
8bIQpATyLk3n6EBH9pdfI/vX6ZXwJOC5dvEdo3Jj8/ZBLNUpc+cXOAJEK5vHzBY7
PEowkpIfdxU9jJnFbIjmo+la63LXSEJDGc5squLclC2mH6VjQSM8cU97bvas3RA0
WSWEoN4m6QrOXBAzBL0LBMqUVct4RRd89U+I1yCmn/2JR/RyvaCq7x9hcx1TzxXf
pYX0YaCVODnyuVZcoK/pd/Rkb3vSnRhbAL5HRzfwqrVMRejLRnGSzhE7SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMOKpCEw5MUpmGige6oFla4phzqMB8GA1UdIwQY
MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt
OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk
LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRn8gvh+
PkJxqg/ky+1QZPs3xRpYxG8O180g2oOUc0cRpCPXrVFJ7ijtEQKob0O6Y2IgAULB
9WZi7dO/05S5sYerRdO1IttFk6JF8ob9XWpjYMp72dWZdCrWMZO1TWoAv3jba/4n
Zb6jjUvY8HKcbCXEEi9AOA0keM336LhYqBZ1SAS/r/QfAnumEroBSHqN2PgW9Fxr
24cEp7L9qgsLZGo/9SfG0IT4xe4n5Ul9mwHNW4wfqXRI4pB3TIwV78RbgcXhISWi
QFDdyyMtC9ncCL5JD6c0AuKjFhoSGjcM7As4eD/pHgUrEyEfB5kk31OOGqszO5ns
KQRFAAcx0IkVyw==
-----END CERTIFICATE-----
Generated at Fri Mar 20 02:40:12 2026 by rpki-client