Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: WPffnH7c+PvPhgTSq4I/w0OMbRwTT/jUbLp7Ygxjed8=
Subject key identifier: 90:16:7B:56:C2:11:BC:7F:D1:D9:75:90:68:4B:C5:DB:00:E6:7B:95
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019EB98F29244BC5D8419A0DCA1C6EF78123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 18E7
Signing time: Fri 12 Jun 2026 02:00:27 +0000
Manifest this update: Fri 12 Jun 2026 02:00:27 +0000
Manifest next update: Sat 13 Jun 2026 02:00:27 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: k5zYHXcoyp5UOuuSCKM0ANIrLoLY4LJFxeYriNjkmpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:29:24:4b:c5:d8:41:9a:0d:ca:1c:6e:f7:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jun 12 02:00:27 2026 GMT
Not After : Jun 13 02:00:27 2026 GMT
Subject: CN=90167b56c211bc7fd1d97590684bc5db00e67b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:86:1a:c5:cf:7f:e3:c3:93:44:ca:e9:27:
54:2c:a5:57:59:12:23:c6:18:48:c6:43:b7:62:d5:
48:38:c5:cf:8c:aa:7f:9e:5f:00:34:22:ac:18:3a:
5f:c2:2d:7d:ad:5d:d1:7c:6f:66:20:66:bd:7c:aa:
f6:b2:6d:f1:f9:72:42:3d:98:06:80:89:44:a6:67:
97:75:90:ff:24:2c:03:c6:30:f9:7c:c7:9b:f1:68:
99:69:6e:ce:c1:34:b1:21:46:6e:a2:6d:9a:db:35:
12:3d:b4:9e:83:b9:b0:af:ef:19:ab:ca:b6:d9:5d:
24:ce:29:29:36:07:c4:61:6b:b0:9d:10:db:68:f3:
37:72:d0:a8:9a:ee:5a:97:4b:91:c8:af:a5:ca:c1:
a6:8e:44:ef:1e:e7:bf:48:35:87:78:19:af:29:24:
c0:7e:b4:61:82:e7:cd:aa:8d:2c:a9:98:20:63:dc:
3c:74:b8:b3:72:f8:f4:32:99:92:ca:2b:82:f4:09:
e4:07:14:8c:07:ca:e0:c7:e9:2d:18:21:cb:bb:a6:
a6:5b:ee:f7:4b:05:58:c8:a2:1a:bc:80:9f:91:be:
18:d4:ad:93:10:1a:8f:cd:f2:8e:8c:6c:00:71:03:
a1:df:ea:1c:03:70:dc:8e:94:1e:1c:75:bc:27:53:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:7B:56:C2:11:BC:7F:D1:D9:75:90:68:4B:C5:DB:00:E6:7B:95
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:7b:14:99:84:7d:cd:36:85:85:13:8f:04:fc:7a:48:11:de:
ef:ba:19:69:aa:7e:79:63:88:9e:f4:9f:57:d0:ae:3c:bb:60:
b2:8c:af:80:45:72:24:48:ab:28:72:92:27:24:fa:82:92:63:
e8:b3:20:38:e0:bb:b7:35:d4:ec:13:d1:77:d8:5b:1a:2c:68:
36:ff:16:eb:fb:90:ae:bc:a5:d7:ca:9c:b9:d1:02:5f:58:1b:
7a:d7:22:2b:6a:ce:8c:e7:a6:f2:ba:97:97:de:83:0c:25:ae:
b8:e9:4f:0e:87:69:f3:19:31:d7:8c:7d:c5:60:70:01:d4:99:
54:3c:38:56:06:f1:39:c7:61:00:f4:2d:dc:de:5d:18:2a:b1:
2c:d0:fc:08:4b:0c:21:72:13:9a:b9:e8:7c:55:59:c6:19:b8:
e7:e1:9f:3b:9f:d0:36:f6:36:c7:00:07:74:24:d3:7d:71:d1:
32:ec:10:4e:93:af:33:d8:84:60:3c:92:9f:ab:32:95:a2:8d:
13:a5:76:65:43:8a:d9:69:0a:03:cb:c7:df:1e:38:32:6a:4a:
03:93:f5:73:8b:b2:78:1e:a3:9b:49:72:2b:f6:02:0a:4b:69:
88:f1:ed:ed:d3:17:af:56:36:c8:50:ea:83:6e:cf:cc:f9:f1:
fb:ef:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:52:57 2026 by rpki-client