Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: rPYceoGI2uLllE0Z1gZaB/3hRpjTTZWOH8PEMFF1ea4=
Subject key identifier: CF:D2:02:D2:F7:34:BB:91:8F:A9:C1:87:A0:93:99:01:1B:D6:EA:25
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019D3866287C5C7F71C8A2D71EB972BDC77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: z8QGpWzfpUM7sOnffs3K1zn0OOB5NeScZZMBcEUycBI=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:28:7c:5c:7f:71:c8:a2:d7:1e:b9:72:bd:c7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=cfd202d2f734bb918fa9c187a09399011bd6ea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:96:84:b1:00:76:dd:5c:4b:c8:0d:c4:ee:
92:6b:19:b1:8e:94:41:42:e5:cb:71:4a:56:a9:76:
f1:a6:f6:ef:e5:bf:26:eb:4f:9f:bd:3e:79:c2:43:
bd:de:5a:bb:7e:ba:89:d5:e8:a0:0e:6c:60:87:09:
3c:ce:32:6f:e0:eb:aa:52:03:0f:0e:6a:91:f5:13:
e9:9b:f0:08:88:2b:2a:ef:f1:e9:7f:43:34:54:a8:
52:c8:ae:3d:7d:12:18:9a:b6:93:de:cd:38:c5:99:
ab:f2:16:a3:60:31:6a:a8:88:dc:04:2b:28:55:3a:
b7:e3:3e:35:f2:b6:41:19:1e:4c:cb:ff:21:d4:3f:
72:b3:0a:e5:c9:9c:f8:07:a1:c2:00:c5:db:9c:0c:
f9:fc:fc:09:e7:a3:5c:82:12:22:86:2f:67:de:bf:
30:d0:a5:4f:bb:62:a3:f5:7d:9b:90:26:42:89:96:
19:18:2b:dd:cd:ae:22:41:9f:3a:ee:3e:ad:df:b8:
d8:9c:7d:a3:63:f0:08:ef:21:d9:7a:66:7f:54:f8:
b7:9f:09:97:c0:4e:c6:81:b5:5d:ae:d3:4b:23:ef:
6d:20:fe:3b:34:8f:8a:30:14:44:03:fc:22:53:e4:
55:e3:36:f1:c1:e9:aa:52:78:78:fa:ae:31:f4:be:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:02:D2:F7:34:BB:91:8F:A9:C1:87:A0:93:99:01:1B:D6:EA:25
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:93:27:bc:08:bb:2b:15:7c:13:db:fa:54:f8:26:d9:76:4a:
c6:2e:3b:bf:56:ca:c1:11:fb:18:6c:ee:3c:1e:7d:1a:65:53:
04:d4:32:e9:5c:08:3b:1e:0c:fa:9e:fb:b3:7d:a8:c8:86:c7:
88:17:87:a6:a1:b5:ff:e0:e7:b0:13:bf:03:cd:f1:50:61:9f:
4e:90:c9:d5:d9:7c:a4:5b:8d:b2:9f:31:d7:02:c7:79:17:3f:
b6:04:74:bc:f1:63:5e:62:1b:89:dc:b3:51:5e:17:1c:2c:9d:
e9:3e:89:eb:65:76:ae:2b:b0:23:5d:c2:05:70:fe:b9:8d:51:
aa:bd:42:20:77:bb:cf:37:02:3b:fa:ff:d2:86:a7:1f:31:29:
69:5a:5e:72:8d:f0:e4:72:f8:44:2d:ef:cb:c5:cf:a8:62:ac:
84:9b:49:99:6f:86:44:2b:12:9f:f8:ef:f6:7b:2d:8a:78:70:
1c:af:de:72:98:a3:76:62:2e:c0:bf:2c:74:50:c8:91:30:ba:
d0:bd:5e:6b:87:03:50:45:04:39:7c:ee:2b:dd:34:bb:8c:07:
3c:cc:d6:c2:fd:96:0f:e9:bf:27:87:a3:01:5b:bd:f4:49:04:
b3:d4:be:0f:37:f7:db:ee:f1:fe:a8:4b:47:e7:e5:01:17:63:
3d:a9:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:50 2026 by rpki-client