Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: jK6/BfvXbe6X8OTBOGTx0I6D8uNqf0qXdwu4kn3dVDg=
Subject key identifier: A3:4E:86:43:11:81:CE:57:1A:00:A8:FC:4A:B9:57:00:5B:A7:77:EC
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 019D375263E1C1661CCED0FA383A033BE580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: zayWZLw88JynC+cBsSJaD6yGxGN8e6ImSfK1d62YCLk=)
2: mggCybH0JuN-k6cQXNUomWKiBlI.roa (hash: FIDIgF+E4Eu8exw8u8XVBLqad5rC9fwdXSSTO7cnhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:63:e1:c1:66:1c:ce:d0:fa:38:3a:03:3b:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=a34e86431181ce571a00a8fc4ab957005ba777ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3e:26:ae:95:64:9b:52:15:d7:ea:cf:45:b1:
6a:69:3c:c0:61:af:ef:fe:43:32:cb:5c:49:90:b7:
f7:80:38:7b:5e:b3:b3:da:4d:75:51:00:fa:1e:78:
c4:26:76:ee:40:9d:6f:53:e0:34:8e:9d:c6:54:78:
0d:0d:f1:65:86:c5:f8:84:7a:32:f6:f6:83:f0:1f:
b1:8a:fd:c7:b4:ee:1a:f3:e6:a2:6c:3c:13:02:cb:
8b:2f:19:09:1a:fb:d8:3f:7f:94:7a:1e:50:9f:78:
83:2a:3b:c8:2b:0d:7b:49:62:a0:62:d7:8f:8e:f1:
53:ef:31:a6:1e:1c:0c:d6:57:61:1a:5f:40:d7:67:
56:93:5e:cd:79:ec:ad:cc:1b:6e:31:3b:22:f9:7f:
12:0d:fc:42:42:14:e6:91:1e:02:d9:36:ed:a0:97:
c9:2e:9c:f2:1f:0c:fe:f2:6d:51:82:fa:3b:a2:36:
96:8f:8d:bb:84:fc:f1:0c:97:20:c0:4d:21:c9:2b:
78:ee:9d:bb:9f:62:d9:ae:da:70:66:10:e0:c7:40:
9e:09:67:ce:5d:0a:74:ef:92:6d:a4:4d:06:2d:2f:
b5:4a:3d:99:30:64:f7:13:89:62:cc:c9:ce:e6:da:
4c:04:e3:24:2b:1c:82:8c:b2:e7:5b:3d:cb:03:ef:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:86:43:11:81:CE:57:1A:00:A8:FC:4A:B9:57:00:5B:A7:77:EC
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:cc:85:cb:e3:b0:35:b9:90:29:1d:45:9c:f9:8a:ed:2e:
69:da:1c:df:e0:fc:cf:cf:eb:3a:c2:bf:a1:86:7e:1d:68:f1:
63:93:da:39:79:15:cf:d7:11:dd:33:3e:f3:ca:8c:ac:4b:95:
92:49:f8:bc:26:9a:d0:5d:5e:78:b3:de:3e:9b:9a:9f:3a:97:
a5:44:86:ee:f4:fa:38:24:2f:ba:e9:4c:1c:b9:57:5f:59:ee:
6d:29:ca:bf:d1:bc:2e:c1:6d:dd:06:c0:99:ee:36:42:d2:5b:
f0:99:97:df:26:d6:f5:49:b1:0c:5f:31:17:46:c2:67:69:62:
22:e3:20:03:77:23:aa:fe:a5:62:7a:eb:d8:96:ba:aa:69:d4:
0c:e4:a8:8c:3c:9c:0c:43:8b:7f:f9:36:80:fc:ad:96:29:70:
c6:13:8b:55:7a:d4:de:8d:43:01:8b:bc:8a:67:fe:f9:23:55:
54:6e:72:e3:43:c3:85:02:ee:9b:b3:cf:e8:a6:b3:47:dd:18:
57:ff:e7:52:34:d2:c2:f8:9c:67:82:df:ed:ee:29:26:e5:cc:
cb:67:9d:bd:ab:4e:ff:84:a4:11:d8:5d:c2:ff:25:9c:a3:f9:
38:7c:4d:e7:8b:b1:21:32:b0:41:ee:56:a7:76:b4:fd:4d:c2:
bb:f1:9c:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UmPhwWYcztD6ODoDO+WAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzJiNGYyYjQ3YmJlMTkzNGEyMjQwODFjYzM3ZjE3MGQ3
MjQ4ZDIwHhcNMjYwMzI5MDIwMDM5WhcNMjYwMzMwMDIwMDM5WjAzMTEwLwYDVQQD
EyhhMzRlODY0MzExODFjZTU3MWEwMGE4ZmM0YWI5NTcwMDViYTc3N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij4mrpVkm1IV1+rPRbFqaTzAYa/v
/kMyy1xJkLf3gDh7XrOz2k11UQD6HnjEJnbuQJ1vU+A0jp3GVHgNDfFlhsX4hHoy
9vaD8B+xiv3HtO4a8+aibDwTAsuLLxkJGvvYP3+Ueh5Qn3iDKjvIKw17SWKgYteP
jvFT7zGmHhwM1ldhGl9A12dWk17NeeytzBtuMTsi+X8SDfxCQhTmkR4C2TbtoJfJ
LpzyHwz+8m1Rgvo7ojaWj427hPzxDJcgwE0hySt47p27n2LZrtpwZhDgx0CeCWfO
XQp075JtpE0GLS+1Sj2ZMGT3E4lizMnO5tpMBOMkKxyCjLLnWz3LA++8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNOhkMRgc5XGgCo/Eq5VwBbp3fsMB8GA1UdIwQY
MBaAFJUytPK0e74ZNKIkCBzDfxcNckjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjct
NDIwNDBkZjNiNmFmLzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjctNDIwNDBkZjNiNmFm
LzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4PMhcvj
sDW5kCkdRZz5iu0uadoc3+D8z8/rOsK/oYZ+HWjxY5PaOXkVz9cR3TM+88qMrEuV
kkn4vCaa0F1eeLPePpuanzqXpUSG7vT6OCQvuulMHLlXX1nubSnKv9G8LsFt3QbA
me42QtJb8JmX3ybW9UmxDF8xF0bCZ2liIuMgA3cjqv6lYnrr2Ja6qmnUDOSojDyc
DEOLf/k2gPytlilwxhOLVXrU3o1DAYu8imf++SNVVG5y40PDhQLum7PP6KazR90Y
V//nUjTSwvicZ4Lf7e4pJuXMy2edvatO/4SkEdhdwv8lnKP5OHxN54uxITKwQe5W
p3a0/U3Cu/GcYw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:36 2026 by rpki-client