Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: zdv2+79svfthq90THJYXDFcAMCj/p8Xib7OkgyqGRFY=
Subject key identifier: 96:48:3A:7A:19:C5:35:D5:D9:1B:71:82:79:21:43:56:1E:D1:AF:F5
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019DCFE2F2CB9440FD2CCEAA2E5DC5307CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 186E
Signing time: Mon 27 Apr 2026 17:00:50 +0000
Manifest this update: Mon 27 Apr 2026 17:00:50 +0000
Manifest next update: Tue 28 Apr 2026 17:00:50 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: mmPb5xD5IijNZHTCLdal7C8EiVWlSXgVqRyCA6oZ5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:f2:cb:94:40:fd:2c:ce:aa:2e:5d:c5:30:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Apr 27 17:00:50 2026 GMT
Not After : Apr 28 17:00:50 2026 GMT
Subject: CN=96483a7a19c535d5d91b7182792143561ed1aff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:71:6b:bc:e0:18:56:99:c4:4d:46:a6:96:
86:b9:30:bb:5b:43:29:24:4e:fa:9a:39:85:52:8a:
50:17:7b:a9:9c:d1:d1:54:75:18:1a:e7:d1:e7:e0:
a6:04:48:ae:59:f1:11:38:5e:a1:02:5d:fa:b1:fb:
d9:27:b0:08:2b:41:26:cd:23:e8:a0:d9:3f:3d:4e:
c9:33:7c:2b:30:38:bb:f4:22:e2:d6:91:a8:8c:a7:
3d:80:c8:b4:d6:bf:62:e1:7f:3e:3a:57:52:c6:2d:
65:e3:ee:ea:e9:62:d9:9d:53:3a:93:88:fd:cf:6b:
81:e3:91:57:c9:de:80:e7:18:89:06:a7:07:83:cb:
64:13:82:b0:60:9f:28:6d:99:b5:47:5f:54:c9:e2:
66:d4:97:fa:fb:17:1e:d7:ab:cd:ee:8f:8c:79:fc:
fe:6d:de:d2:d7:24:70:67:6c:e5:d8:7e:a0:00:83:
89:c7:66:d2:8e:5f:2b:5e:2f:bf:13:00:ae:fe:3b:
d9:de:e4:0b:aa:d8:08:8e:ed:eb:78:0a:1b:0f:01:
97:f2:8b:d8:cd:3c:ec:24:89:14:60:15:96:79:1e:
c4:a6:7b:98:82:0b:3c:86:61:69:1d:79:a0:2b:cb:
c5:fd:dd:17:9a:11:3e:52:a6:7c:99:d0:81:cf:7c:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:48:3A:7A:19:C5:35:D5:D9:1B:71:82:79:21:43:56:1E:D1:AF:F5
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1f:ba:ce:04:53:b9:e9:73:12:92:70:8f:30:b9:f7:e5:3a:
2c:33:71:a7:2d:5d:79:f1:1f:0c:80:f4:18:62:c2:a2:d7:d7:
84:32:b1:08:6b:e1:26:01:2f:db:7b:ed:17:3f:5c:40:54:89:
4b:b3:b0:53:cc:ab:78:3c:95:65:f2:7c:35:cb:a8:f1:dc:c8:
17:4e:29:f2:6a:d1:e6:b0:a2:55:ad:93:e4:85:df:f7:86:5c:
ed:83:80:94:1b:73:23:81:05:95:a9:9c:99:0c:7b:38:9d:49:
57:15:ea:c1:e0:dd:31:7c:b6:f2:7b:64:ac:04:f3:93:37:69:
f8:a7:65:90:ab:b1:24:78:a1:0a:b7:3d:1d:d8:12:b7:8b:1e:
ed:e5:44:ac:85:8c:94:f9:5f:23:55:d1:ba:e5:c7:ae:b7:e9:
9a:7c:67:3a:5e:3f:57:52:38:4e:c9:c2:83:fc:8f:77:ef:bf:
ea:08:3a:48:ed:22:bf:79:68:68:4a:cb:82:73:ee:a8:16:19:
08:7c:08:ca:44:80:76:d2:49:fe:b3:88:ac:b1:38:17:e3:d8:
62:5b:51:74:74:c8:df:c2:be:ee:78:3c:34:48:47:71:ca:08:
44:f6:ef:26:58:75:d7:24:43:c9:a3:54:40:f7:36:18:79:22:
8a:dd:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:09:05 2026 by rpki-client