Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: 3JqVPdj64FX9psOmUFffYltXMaxVw7/8yZW/FPwq15w=
Subject key identifier: 99:10:3A:63:AE:F7:41:A7:B2:AE:67:A3:18:18:DA:F4:52:F8:45:A8
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 019D3941B04CAF20D52820661D1BD06D6796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:39 +0000
Manifest this update: Sun 29 Mar 2026 11:01:39 +0000
Manifest next update: Mon 30 Mar 2026 11:01:39 +0000
Files and hashes: 1: YYcTpfzg-qxOriFzAQc4sR83vwQ.roa (hash: 5h0JVwXb5CNZ8oS+rmCxklJ1x85gCyuZA9bxlvjYhdU=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: XcjkNDAiHRJETFU8KAWGlgDijiB523d93kYQnJ4iahA=)
3: oxwK7ORpNdbpT88HwfpKeXMaclU.roa (hash: Wa92A7nZrCyu9yJGfUvVy9HkpHlaa9cNxOWmvKp3jX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:b0:4c:af:20:d5:28:20:66:1d:1b:d0:6d:67:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Mar 29 11:01:39 2026 GMT
Not After : Mar 30 11:01:39 2026 GMT
Subject: CN=99103a63aef741a7b2ae67a31818daf452f845a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:ea:b2:31:46:b3:69:80:65:cd:1c:76:29:
04:60:0d:c8:11:ab:a3:82:df:ef:a9:e5:7a:ec:a8:
f6:02:87:8b:f6:10:6a:3f:8f:5b:6e:8f:65:3b:75:
04:3e:fa:82:2f:ea:19:40:a2:7f:59:87:39:ef:8e:
e0:cb:06:f1:ee:a4:5d:c9:40:d4:9a:c3:ad:e5:1b:
1d:e4:23:cc:0b:b2:66:98:ee:fb:98:99:09:5b:9f:
01:f4:8c:c6:e9:24:cf:b4:a3:a1:ab:e2:31:ab:27:
2b:a3:8d:be:ce:ba:d7:99:27:cc:41:59:a0:4f:35:
9d:04:a7:80:9e:f6:45:4e:44:84:28:f8:a8:47:ec:
d2:71:af:b2:38:4f:33:19:2e:67:2c:30:aa:05:85:
50:59:a6:fc:8e:37:7d:ae:7c:4e:f7:0b:c1:42:8c:
3a:62:ca:61:4f:65:4a:19:51:42:23:28:76:7f:89:
65:a1:16:86:00:c6:a3:1c:9f:a4:cf:be:4b:2c:b3:
11:b9:e8:14:75:29:ed:6d:a8:5e:65:f9:72:e9:32:
cc:3a:e2:8c:ad:99:5d:74:4b:ad:90:32:15:fb:d1:
9d:ba:81:26:7b:d0:9d:8b:56:33:68:12:ce:05:fd:
0b:10:73:8f:ea:cc:1f:46:00:64:16:43:5d:4f:34:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:3A:63:AE:F7:41:A7:B2:AE:67:A3:18:18:DA:F4:52:F8:45:A8
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:67:be:b2:04:85:39:fb:73:4d:60:29:ef:e5:a4:5f:90:90:
e3:e6:8f:03:8f:06:d8:0d:82:98:a2:29:a3:6c:bf:d2:be:1b:
38:2b:11:7b:ff:a8:61:b0:01:49:b5:73:15:77:a8:c2:4b:cc:
5a:3f:df:dd:5b:04:44:c6:b1:ce:ad:0a:f7:86:85:24:cb:c4:
a7:73:55:e1:00:b6:98:a2:1a:c4:15:33:e1:9d:94:e0:cf:c2:
b4:8b:45:b9:7a:e8:9f:7b:b0:ec:50:59:62:9b:e9:90:bc:6b:
35:fc:66:cb:9a:6a:55:7b:c8:d3:b9:90:f4:75:3e:6e:ba:4b:
0c:17:bf:79:e0:f4:09:e0:6a:fb:d2:6d:d5:a3:49:f9:2f:65:
41:ad:8d:9f:93:bc:55:e0:16:17:12:bf:c2:74:27:d9:8e:6e:
ad:f3:bc:86:12:8d:0b:30:b9:e6:77:bb:44:7d:73:18:9c:64:
e7:7e:96:bc:fb:b7:64:44:68:7b:18:fe:de:a6:e6:c5:bf:ef:
03:51:ca:53:66:7d:72:cb:fc:37:bf:45:26:15:70:97:e3:69:
f1:cb:68:b9:c5:f4:05:d6:2f:8e:4d:e6:96:ab:04:c9:85:b2:
ed:c2:6c:65:e9:9e:cf:da:a3:e9:d7:5e:5b:21:87:81:7f:96:
7a:8c:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:56 2026 by rpki-client