Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: sQV0TGnt3zaZwYkCPQCMFrDPycpf3GlHG3vtF77SYRg=
Subject key identifier: 4D:40:6C:AF:3C:0A:9A:2D:BF:A9:A3:86:06:A8:84:E2:13:12:23:9B
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019D3941781A780CE5535486E78AF0EA5974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: /imdNRE8YDuu2Nal07sJPV3xfn8zBd+u9G/JUXIzQ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:78:1a:78:0c:e5:53:54:86:e7:8a:f0:ea:59:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=4d406caf3c0a9a2dbfa9a38606a884e21312239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:ce:4c:fd:5d:66:b5:63:1d:db:d1:5c:da:
f6:cf:dd:44:88:54:43:06:58:3f:48:ff:f8:e5:98:
dc:e2:df:11:c7:05:8b:28:1d:cb:a4:d6:37:9f:c4:
e9:b8:fe:82:5c:28:90:2c:88:66:0d:2c:84:92:4e:
59:32:15:92:e3:15:28:b4:5c:cc:97:3e:11:27:84:
41:8f:f8:f3:24:d8:32:4b:2d:a9:f3:97:15:e6:01:
ba:e1:91:07:18:f2:7d:b0:8c:6e:3f:f9:6c:95:8e:
68:bb:d2:1e:0f:41:93:65:46:a2:8c:79:da:12:52:
51:44:a3:03:44:38:94:74:ab:9f:34:8f:67:d3:1a:
40:d5:df:6b:b2:5b:7c:8d:33:17:c6:1f:8d:ee:7f:
2b:4e:95:d0:2b:bc:79:03:96:ae:13:af:85:07:78:
ab:62:40:76:dc:59:7c:bd:2a:84:94:f0:53:8a:af:
b9:99:be:24:a3:70:72:78:cc:86:26:9f:77:85:7c:
63:28:08:6b:dc:2a:e5:47:73:cc:e4:27:38:31:5b:
9b:65:85:b2:e9:e5:a8:4a:59:86:8c:1f:1c:b9:23:
55:bd:ac:38:78:10:78:28:9a:e1:d8:59:5b:59:12:
6d:db:0b:05:f9:31:74:f4:17:af:01:67:48:e7:2f:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:40:6C:AF:3C:0A:9A:2D:BF:A9:A3:86:06:A8:84:E2:13:12:23:9B
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:98:2d:46:bc:8f:d5:9a:02:c8:20:4f:17:05:13:f0:1b:
f5:3c:f4:f1:a5:2a:c7:e8:2c:22:ec:3c:fc:a1:bc:50:12:4f:
1d:37:ed:a5:0f:b4:e4:39:bb:89:f4:99:5e:61:76:8e:bf:ee:
a0:57:bc:ea:2c:fe:bc:8c:8a:e8:38:e5:a9:12:82:1c:19:26:
dd:a4:4e:49:eb:8d:38:5b:2e:0d:6f:ec:3f:ed:3d:45:bc:25:
28:ff:c0:c3:5f:6f:eb:f8:46:f1:0c:ea:d2:bf:6b:ae:cd:e7:
dd:88:44:d4:41:27:83:89:2b:9b:8c:d2:e9:f7:58:01:6b:19:
38:02:3a:37:9a:70:66:2c:05:e9:93:54:04:91:31:a1:ca:81:
a0:64:9d:25:7c:ef:04:a3:82:9c:88:7a:9d:76:de:a2:0b:d0:
60:be:5e:41:f6:6f:99:c2:e5:19:f1:23:ce:e6:f5:67:84:6a:
b7:78:9f:78:c7:54:6f:ec:21:68:61:4b:2b:88:a4:38:93:ce:
c9:0b:72:1d:1e:7f:7e:e4:7c:0d:65:f5:93:76:b6:1d:5f:49:
0c:4c:62:c8:ae:37:3b:47:a5:33:2d:e4:cd:42:bb:0b:ed:f0:
4d:57:8c:2b:a5:1e:91:fc:d8:74:09:1f:8d:ee:b3:7f:fc:ea:
66:60:59:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXgaeAzlU1SG54rw6ll0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2FlMmMzN2M4NjYzMGU2MWFmZGY4OTAzZmUxNzRkZThi
OTQ1YmUwHhcNMjYwMzI5MTEwMTI0WhcNMjYwMzMwMTEwMTI0WjAzMTEwLwYDVQQD
Eyg0ZDQwNmNhZjNjMGE5YTJkYmZhOWEzODYwNmE4ODRlMjEzMTIyMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00jOTP1dZrVjHdvRXNr2z91EiFRD
Blg/SP/45Zjc4t8RxwWLKB3LpNY3n8TpuP6CXCiQLIhmDSyEkk5ZMhWS4xUotFzM
lz4RJ4RBj/jzJNgySy2p85cV5gG64ZEHGPJ9sIxuP/lslY5ou9IeD0GTZUaijHna
ElJRRKMDRDiUdKufNI9n0xpA1d9rslt8jTMXxh+N7n8rTpXQK7x5A5auE6+FB3ir
YkB23Fl8vSqElPBTiq+5mb4ko3ByeMyGJp93hXxjKAhr3CrlR3PM5Cc4MVubZYWy
6eWoSlmGjB8cuSNVvaw4eBB4KJrh2FlbWRJt2wsF+TF09BevAWdI5y8feQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1AbK88Cpotv6mjhgaohOITEiObMB8GA1UdIwQY
MBaAFJXK4sN8hmMOYa/fiQP+F03ouUW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUt
MzUxNDg0MWYzNmFlLzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUtMzUxNDg0MWYzNmFl
LzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/+YLUa8
j9WaAsggTxcFE/Ab9Tz08aUqx+gsIuw8/KG8UBJPHTftpQ+05Dm7ifSZXmF2jr/u
oFe86iz+vIyK6DjlqRKCHBkm3aROSeuNOFsuDW/sP+09RbwlKP/Aw19v6/hG8Qzq
0r9rrs3n3YhE1EEng4krm4zS6fdYAWsZOAI6N5pwZiwF6ZNUBJExocqBoGSdJXzv
BKOCnIh6nXbeogvQYL5eQfZvmcLlGfEjzub1Z4Rqt3ifeMdUb+whaGFLK4ikOJPO
yQtyHR5/fuR8DWX1k3a2HV9JDExiyK43O0elMy3kzUK7C+3wTVeMK6UekfzYdAkf
je6zf/zqZmBZQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:31 2026 by rpki-client