Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: YiVYxodIb44SlwMLQycUG7MxJ86thV0LsyyyKRwIy0U=
Subject key identifier: 51:D8:5F:44:C5:9B:CA:C8:E9:7B:F7:6E:2C:A9:0A:CB:58:26:FC:56
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019DA754D76FD2FD1F82E3A594762D98E92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 18D9
Signing time: Sun 19 Apr 2026 20:00:48 +0000
Manifest this update: Sun 19 Apr 2026 20:00:48 +0000
Manifest next update: Mon 20 Apr 2026 20:00:48 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: pg1pkwjM0nnFFjfGwIFTg8HU2x16p2jB5P0m/BMLW4g=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:d7:6f:d2:fd:1f:82:e3:a5:94:76:2d:98:e9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Apr 19 20:00:48 2026 GMT
Not After : Apr 20 20:00:48 2026 GMT
Subject: CN=51d85f44c59bcac8e97bf76e2ca90acb5826fc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:46:4a:e6:8d:88:8d:42:78:1e:26:cf:57:
2d:4b:7c:48:f2:f9:70:93:a7:7b:e8:17:09:7a:79:
ce:b2:71:dd:bb:9e:ab:15:69:d1:34:bf:76:8e:0a:
ed:eb:c3:ae:9f:aa:6f:03:93:51:ac:81:e5:7b:26:
40:4f:7c:90:f9:cd:53:70:66:4e:88:90:92:3d:48:
0f:e1:d5:28:d9:f5:ba:e5:7b:15:7a:95:f1:ed:81:
b0:8e:7c:98:50:6f:36:a5:df:08:f7:29:f0:11:84:
00:8f:b9:fa:7a:a6:1d:78:9f:29:c8:29:e1:b8:0e:
7b:7e:7a:4f:6f:33:d2:38:e8:5a:42:52:b7:e8:2c:
e3:f9:d5:67:2b:4a:bf:bc:d8:40:0e:5c:7b:ef:db:
04:00:2c:da:90:b7:e2:0a:8e:59:00:11:03:b4:38:
99:33:e9:13:bf:15:8f:48:ee:20:ca:64:ea:83:50:
5b:a7:aa:bf:b8:1e:d5:ba:23:9b:83:21:71:9b:83:
96:6b:52:85:d5:fb:0e:80:9a:c0:01:3b:1a:6f:2e:
20:6b:1e:aa:3a:87:de:ea:86:93:53:db:96:27:6d:
16:26:7e:97:c6:f5:23:f1:2e:5e:76:3f:22:7a:c9:
24:42:5a:65:46:e2:78:29:79:91:92:20:0d:18:84:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:5F:44:C5:9B:CA:C8:E9:7B:F7:6E:2C:A9:0A:CB:58:26:FC:56
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cb:ce:07:f8:0a:f5:dd:cf:59:20:a5:27:0b:c3:c2:98:22:
4c:7e:f0:ae:05:59:e3:6d:32:05:62:c9:af:78:a8:eb:28:dd:
3a:47:85:8e:a6:44:fb:11:78:d8:c3:74:7e:d4:b2:4b:dd:55:
b7:4b:0e:9b:92:56:cc:67:4a:59:bb:3e:45:91:ac:a1:97:c3:
76:89:46:f7:e1:31:c5:4d:d3:7a:3b:74:ca:7a:32:ce:3f:ed:
a5:6d:70:71:e6:ff:eb:40:b5:71:48:11:a0:7a:6a:e8:9f:eb:
d0:e3:40:8a:a3:e4:41:c1:22:e4:06:36:90:cc:7d:66:32:56:
06:9c:92:bb:e0:7b:65:3f:0c:80:a1:bf:79:ce:8b:88:9a:70:
ea:a6:df:7d:0e:eb:10:30:f8:8a:a5:50:42:d3:b0:bf:7a:b3:
a2:2e:9b:a2:cc:1a:17:3e:93:92:9f:88:e7:8f:41:9f:fe:a0:
b2:e3:82:9b:ce:e9:ea:30:d3:ae:16:fb:39:00:7b:2f:f8:85:
8c:51:6d:53:64:47:0c:09:8d:c7:6e:dc:89:4a:8e:26:2f:08:
37:8e:73:a8:e1:97:5e:bb:e8:8d:84:44:8c:be:b8:dd:d9:b0:
61:3f:b5:24:c0:70:ff:b1:9d:ad:7a:1b:0e:48:9e:cc:e1:5a:
67:10:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:18 2026 by rpki-client