Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: mmZpuQo55b7abTc1hj9K5Znb+FpW0QwB/9FyeisQv9k=
Subject key identifier: 1C:EC:CF:55:C3:B0:8E:F4:35:7F:2C:10:71:AE:AF:19:31:77:E3:3E
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019D3909C0B356CE57D887D9D9DB21149EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: AJLXZgxrhMxurmqG6jHwrsrR+Sp0c1HCaAEn0FZglQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c0:b3:56:ce:57:d8:87:d9:d9:db:21:14:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=1ceccf55c3b08ef4357f2c1071aeaf193177e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:d8:85:27:69:43:e8:8e:41:98:cb:a4:86:
68:09:2e:61:00:d0:29:30:99:9a:b4:86:ab:4a:c2:
bd:df:b4:11:c7:72:aa:a0:67:26:81:c8:37:88:c8:
1a:bb:2e:48:6c:a5:75:cd:5c:7b:af:05:d8:aa:5f:
07:6a:6f:ee:6d:98:85:6a:d8:22:31:75:a9:fe:16:
4a:d6:7f:fd:da:4e:68:02:28:d2:d7:3b:e8:4a:63:
8a:d1:23:ac:ca:53:a5:15:5f:c9:d4:0a:69:6a:05:
72:24:b5:7b:dd:62:ec:e7:fa:7a:d6:60:f3:8c:a6:
7a:3e:f3:95:30:a1:c8:f4:97:6d:4f:b8:82:25:cd:
e2:2d:d3:bc:1d:77:ab:d4:a5:26:f5:e3:70:88:e6:
77:8c:40:bf:4c:e8:29:8a:8a:2b:4e:b0:5f:45:2a:
63:e1:e6:0a:4f:15:91:c4:7a:d5:13:2d:87:52:11:
a2:bd:b9:77:f7:f5:c2:c0:c2:63:fa:f8:9b:81:f6:
c6:fc:06:42:55:04:05:0c:5f:da:7a:15:a5:bd:89:
6f:d1:0c:72:a3:21:c8:fe:26:a2:c6:cf:29:88:e6:
62:8e:cf:c7:7a:86:d1:39:b4:54:8c:81:b4:4a:13:
fc:49:51:73:7d:ca:64:6d:15:b5:83:a3:c6:44:e4:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:CF:55:C3:B0:8E:F4:35:7F:2C:10:71:AE:AF:19:31:77:E3:3E
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8c:af:68:b5:39:03:d8:93:ac:34:c3:5f:94:aa:40:8e:8b:
f2:2c:d7:72:3e:f1:d8:97:8d:37:74:f6:85:84:c9:f7:3d:05:
3f:f0:29:2c:f2:dd:84:e8:a9:39:0c:bb:16:0f:1f:10:21:8e:
cf:9d:ad:d9:a0:6a:19:98:7f:cb:3d:47:4b:25:a7:a7:5a:41:
f6:8c:2e:3f:a1:0e:de:d4:ae:f6:d2:b4:a2:04:8a:01:5f:71:
8a:48:74:6c:bb:6a:dc:89:be:2b:a8:c5:8e:9f:7c:27:96:6e:
60:b9:08:ad:3f:ff:e5:a6:1b:e3:db:2f:57:bd:a3:bf:12:22:
e4:fa:50:c6:c4:41:56:5e:73:d7:87:cc:bb:65:5d:bd:cb:be:
07:e4:6c:4e:bf:c4:99:80:8d:8b:3a:87:1c:47:8a:a1:f6:da:
3d:b0:33:cb:8c:ea:f9:c7:8f:93:b6:7c:06:a2:fa:29:2d:b1:
7e:03:d6:93:08:76:1e:d8:fe:62:df:f1:10:d7:98:0c:fe:29:
62:c6:0c:af:54:cf:99:0d:db:2a:de:c0:42:8a:6a:67:b2:2f:
f0:97:e3:fe:5b:ac:63:21:e2:13:f7:64:3e:ab:f2:90:04:84:
b4:d3:45:be:d8:29:98:13:60:94:4d:52:30:e7:d5:40:89:50:
0a:95:28:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcCzVs5X2IfZ2dshFJ60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzU0NjJlYmIyMDI5YTgzZDNlZWFiNDYyZmYwNTJlY2Zh
MGUxYzMwHhcNMjYwMzI5MTAwMDMzWhcNMjYwMzMwMTAwMDMzWjAzMTEwLwYDVQQD
EygxY2VjY2Y1NWMzYjA4ZWY0MzU3ZjJjMTA3MWFlYWYxOTMxNzdlMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWbYhSdpQ+iOQZjLpIZoCS5hANAp
MJmatIarSsK937QRx3KqoGcmgcg3iMgauy5IbKV1zVx7rwXYql8Ham/ubZiFatgi
MXWp/hZK1n/92k5oAijS1zvoSmOK0SOsylOlFV/J1AppagVyJLV73WLs5/p61mDz
jKZ6PvOVMKHI9JdtT7iCJc3iLdO8HXer1KUm9eNwiOZ3jEC/TOgpioorTrBfRSpj
4eYKTxWRxHrVEy2HUhGivbl39/XCwMJj+vibgfbG/AZCVQQFDF/aehWlvYlv0Qxy
oyHI/iaixs8piOZijs/HeobRObRUjIG0ShP8SVFzfcpkbRW1g6PGROTTlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzsz1XDsI70NX8sEHGurxkxd+M+MB8GA1UdIwQY
MBaAFJU1Ri67ICmoPT7qtGL/BS7PoOHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTct
MzhhYmZhNGZhMzUwLzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80ZjlmOWYtMzBhOC00MzcwLTk0ZTctMzhhYmZhNGZhMzUw
LzEvbFRWR0xyc2dLYWc5UHVxMFl2OEZMcy1nNGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoyvaLU5
A9iTrDTDX5SqQI6L8izXcj7x2JeNN3T2hYTJ9z0FP/ApLPLdhOipOQy7Fg8fECGO
z52t2aBqGZh/yz1HSyWnp1pB9owuP6EO3tSu9tK0ogSKAV9xikh0bLtq3Im+K6jF
jp98J5ZuYLkIrT//5aYb49svV72jvxIi5PpQxsRBVl5z14fMu2Vdvcu+B+RsTr/E
mYCNizqHHEeKofbaPbAzy4zq+cePk7Z8BqL6KS2xfgPWkwh2Htj+Yt/xENeYDP4p
YsYMr1TPmQ3bKt7AQopqZ7Iv8Jfj/lusYyHiE/dkPqvykASEtNNFvtgpmBNglE1S
MOfVQIlQCpUo/A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:10 2026 by rpki-client