Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: ekVL15W5gaV0wP2w5RhQdG11TvroLSIUpFt4bqHdeKM=
Subject key identifier: A3:6A:8A:FE:A8:D1:EE:76:44:73:89:5E:14:08:26:C9:81:10:02:EB
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019E3185DAD8782486B7CF8EDE53E41890A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 16:01:56 +0000
Manifest this update: Sat 16 May 2026 16:01:56 +0000
Manifest next update: Sun 17 May 2026 16:01:56 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: REifnVIK4VbximwvJSqoH3HpqJEH0rPkRS4tzxZM+ic=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:da:d8:78:24:86:b7:cf:8e:de:53:e4:18:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: May 16 16:01:56 2026 GMT
Not After : May 17 16:01:56 2026 GMT
Subject: CN=a36a8afea8d1ee764473895e140826c9811002eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:a8:bb:b2:5d:d3:b2:90:6a:f5:05:8b:c7:
11:9d:26:b1:93:cc:f9:c9:eb:2b:22:d7:6f:d9:0e:
3e:29:01:7d:bd:d1:75:42:15:85:88:6c:30:d9:ca:
90:3b:42:21:e6:ea:72:37:e4:32:75:92:be:27:8a:
17:0c:14:bc:14:37:ba:fa:7b:14:05:c5:b6:05:3b:
fc:c7:3f:a2:2a:53:3e:74:01:64:f8:47:79:ee:74:
ea:25:b4:9c:3d:bb:2d:e7:87:3f:73:6a:3d:50:91:
8c:f8:76:c2:66:12:13:34:42:f1:3b:3a:b4:91:0d:
7a:31:32:bb:1d:23:10:7f:f0:31:ff:19:76:7b:fa:
ca:bc:3e:c4:5e:3b:75:cb:ae:fa:1c:84:cb:17:4c:
ea:e7:ca:a9:6e:54:9b:6d:23:7e:07:63:37:3e:89:
37:d8:a1:30:ec:7f:a9:39:97:1b:27:9f:ab:89:75:
cc:b5:f5:68:ff:b1:2d:cd:09:1f:1e:2c:15:a5:98:
75:6a:b4:f0:f9:27:72:78:13:28:85:57:e2:c4:b1:
94:cd:17:0c:b7:4f:91:bb:09:88:34:40:5e:42:c9:
4f:e5:98:ac:38:a1:a7:3c:27:92:36:25:16:81:83:
09:c5:1f:21:0e:72:b6:88:b5:0a:90:b1:61:88:70:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:8A:FE:A8:D1:EE:76:44:73:89:5E:14:08:26:C9:81:10:02:EB
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b9:f2:78:ba:83:e4:11:d4:79:2e:de:15:f3:7f:c7:5c:e9:
15:0e:fd:63:93:e7:33:1f:17:89:06:89:21:4a:e6:73:28:48:
e3:10:60:11:8a:4b:4a:ca:38:f2:34:1a:ae:05:93:5e:f2:f0:
46:3c:ed:32:13:69:e3:d1:fa:7d:8e:03:6d:15:7f:51:b1:a8:
1e:10:d0:02:97:4d:e6:d9:d8:23:31:12:7a:06:d5:ab:38:9b:
ad:50:0b:7f:1d:75:1d:06:33:05:f2:8a:cd:31:56:71:c5:9a:
c9:bf:19:8c:a4:fe:cd:12:1d:46:9d:67:a3:9b:6e:0e:8b:83:
06:fe:76:e1:f2:4c:60:59:75:b5:7e:23:06:5a:0c:c7:61:96:
82:fb:97:7b:11:83:e4:bd:af:7d:e2:7b:6a:ec:49:bd:dc:bd:
e9:53:94:6c:d1:15:ea:64:0e:21:f3:29:c7:50:32:0c:99:e5:
9f:08:d4:19:32:a4:96:7c:cb:cc:68:c4:bf:10:de:6e:f8:e3:
cc:7f:82:f5:90:13:b0:08:46:ea:2f:a9:13:07:92:b7:ef:09:
35:33:50:59:33:81:fc:71:db:1a:2f:46:4c:a3:a8:88:ae:e6:
18:0c:7f:70:1c:61:c8:f9:5d:06:24:7b:43:b0:ea:02:ec:4c:
a1:1b:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:40 2026 by rpki-client