Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: 5Hk+KX0JDeXkLMT2zp13oa7JAuhPi6gt51zJywrQS4U=
Subject key identifier: 64:3C:1B:9C:76:02:0D:B7:BE:9E:D4:F0:0E:CE:98:78:CF:40:79:DA
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 019D37F78060C49AD12F6C64C7B5C89FD2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: 3El05iYRSjjsnnMmSgg5UzcIJzI.roa (hash: lu4N0zTDe8PsZfTOKcSd8MPmVfa3fQOGOtCh01kU1Ak=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: D3IRpAGxoZ2KdjD4TEVz5k1BcJTIMuE/1bYSk6jwjMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:80:60:c4:9a:d1:2f:6c:64:c7:b5:c8:9f:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=643c1b9c76020db7be9ed4f00ece9878cf4079da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:c8:d2:af:26:ee:20:d3:37:c2:b0:67:26:
74:60:78:e9:b6:e3:3b:d2:8e:6c:79:16:4c:fa:f8:
f9:8d:f3:cb:10:c2:d9:cf:86:f0:4d:8d:d4:8f:8f:
40:fe:29:2f:1f:72:2b:f5:a0:55:e4:4c:0c:db:91:
0d:bb:5d:c0:8e:8b:7c:9a:43:43:fd:2f:0e:11:1b:
0c:4b:bc:9e:63:81:e0:3f:84:70:d2:a6:82:3b:38:
ac:08:e1:6b:f9:6a:7e:f4:f6:ff:20:fc:50:5b:6d:
33:18:45:2a:9f:08:b9:0c:6b:f5:19:d7:8d:68:96:
0e:a7:e7:c4:7a:de:2a:ec:36:bf:94:51:b3:63:44:
b8:65:ac:23:c0:14:d4:97:17:f9:87:df:2d:67:4f:
ce:d8:c5:f8:0c:47:07:65:7b:76:dd:42:6e:5e:a1:
26:eb:72:0a:72:2a:e2:43:e4:84:64:be:b3:99:3e:
4e:47:29:ca:65:c5:64:72:28:a3:e9:80:39:64:a1:
c7:b4:05:77:04:f1:e4:44:be:bf:4d:5d:1b:82:95:
00:de:e1:61:74:0d:b5:62:51:75:89:33:1e:eb:4d:
c9:74:30:1d:db:20:0e:f5:d9:de:3f:bc:07:e3:13:
3b:89:c5:e9:1d:5e:74:8e:8d:b1:a0:f6:49:ec:4c:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:1B:9C:76:02:0D:B7:BE:9E:D4:F0:0E:CE:98:78:CF:40:79:DA
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:79:5a:55:1b:8a:1a:c5:06:12:fb:9b:09:70:63:a5:10:7c:
8c:a0:5c:1f:bd:ed:e0:a9:75:fc:8d:72:dd:08:34:7d:3c:29:
38:fc:80:fc:9b:a0:a5:91:89:29:cd:56:1b:6b:3f:bf:02:c2:
e4:12:d4:76:4f:6a:6d:15:5a:5d:2a:e4:e5:22:ba:2a:d3:c3:
76:35:78:93:67:f3:3c:5d:bb:bb:81:b7:99:14:55:15:5e:02:
69:b1:de:36:be:67:48:a3:99:d1:3e:f9:b5:1f:58:37:e3:05:
0d:9a:bc:ba:07:d3:a5:2d:fa:31:e5:45:0f:75:18:81:3e:64:
be:98:2c:db:5a:19:42:9e:d6:ba:70:87:9a:ff:bb:47:18:cc:
ab:38:7b:d9:76:f4:09:03:dc:f9:b1:fb:3b:23:1c:28:be:e6:
ea:9f:42:dc:11:82:66:99:fa:34:35:17:fc:54:90:45:a7:ef:
fb:37:bc:90:65:2b:9c:22:c9:67:5e:d7:38:87:d7:72:8b:f7:
b6:51:a5:ff:c9:27:dd:f7:db:c6:88:8f:db:36:9e:9a:74:6c:
8c:e8:32:c9:51:7e:54:87:c3:c0:45:66:ad:b1:3d:d8:8f:ef:
c0:bb:5a:64:16:e3:d0:cc:ef:07:a7:b6:48:17:e5:7d:db:2b:
13:f9:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:10 2026 by rpki-client