
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: xSUQzSVOSF0bZMuq0Z6BJQX4aqBq00+xBMSmrxV5Lw0=
Subject key identifier: AE:AA:12:45:7F:DA:37:FE:E5:31:41:F1:A3:C0:4F:7E:4B:6F:24:71
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 019DA309EE271459FBE19F984962408F3036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 176F
Signing time: Sun 19 Apr 2026 00:00:30 +0000
Manifest this update: Sun 19 Apr 2026 00:00:30 +0000
Manifest next update: Mon 20 Apr 2026 00:00:30 +0000
Files and hashes: 1: NTVDCOcvwg_0-xojn7KdZcbwJAs.roa (hash: pHrfAzpDRM6islT2PP0ZYbhhyp+lERJOZo6wBiT3JqU=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: SDOHIAxmzwcjnjIy2gb2/0l5w9SAzaCU0vdZxolG5uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:ee:27:14:59:fb:e1:9f:98:49:62:40:8f:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Apr 19 00:00:30 2026 GMT
Not After : Apr 20 00:00:30 2026 GMT
Subject: CN=aeaa12457fda37fee53141f1a3c04f7e4b6f2471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:9a:8e:74:3e:fc:8a:f7:2c:ed:7f:93:3d:
1c:14:62:6a:fc:97:13:3e:b3:88:37:a9:e7:76:a5:
9e:a4:97:d5:fb:a8:87:98:79:1a:95:8b:47:e6:e8:
9e:ed:c6:f1:30:56:e5:20:a3:ca:6b:c5:b2:85:52:
18:c3:fa:a3:9d:6b:49:fa:4c:91:35:84:c0:f9:27:
06:93:ac:e1:20:48:fe:28:50:3d:46:af:a4:1c:b1:
e7:d0:ef:c3:62:a0:15:b4:a4:60:7c:d9:ea:5e:22:
34:e0:64:67:d8:2a:ab:bb:f0:87:58:4c:9c:98:c5:
1d:f7:07:a9:7d:6f:38:7a:22:dd:34:f0:51:7f:ec:
50:9f:5d:42:0e:d8:d4:e4:4c:a2:62:94:af:e8:bf:
7b:85:0c:22:1f:0e:f1:f3:93:65:44:b3:f0:78:ee:
e9:97:64:77:f3:f9:a6:04:ec:79:b2:29:68:4f:c4:
81:cc:00:32:41:e7:d9:1c:19:61:d0:29:85:6d:18:
1e:09:a0:55:2f:43:f2:a9:f2:45:1f:5e:d4:52:1a:
8c:38:cc:80:c6:d5:89:61:f2:89:d9:14:27:f4:47:
8c:1c:ae:5e:e8:a8:55:9f:a0:80:1c:0f:66:ee:8b:
37:95:5b:8d:34:e6:e8:cf:02:cb:60:4b:68:e7:19:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:12:45:7F:DA:37:FE:E5:31:41:F1:A3:C0:4F:7E:4B:6F:24:71
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:94:26:b2:a8:a2:b5:f0:3d:62:de:0d:77:e2:b4:48:24:fb:
df:7a:b1:c8:16:51:7d:96:f0:57:94:b7:b3:71:92:5d:25:c7:
76:01:6f:96:07:b0:b0:42:e0:2c:57:68:42:c9:16:4c:ce:f5:
90:f7:80:df:05:37:17:30:96:81:04:66:50:ca:a9:fa:c4:4f:
f4:69:80:74:33:19:30:c4:ef:b6:3f:f4:02:f4:4a:fb:88:45:
db:24:d9:96:52:fa:48:7a:c0:c1:15:62:a4:1b:11:e8:5b:ef:
4a:90:e7:9d:3f:16:46:61:ee:33:4e:50:eb:03:0c:d8:12:68:
8e:99:b7:f1:99:77:e7:b9:c7:80:b1:e8:aa:24:40:3c:06:7c:
7b:c8:b1:61:8d:7e:1c:70:5b:4c:1c:46:92:bd:45:4d:39:ab:
c4:ef:32:ff:a9:63:cb:a6:27:50:33:8e:9f:18:e0:2d:00:37:
f1:53:35:70:c7:65:18:e8:7c:27:32:2c:3d:f5:49:9e:f2:2d:
25:e5:b6:79:c8:8a:ae:ed:0e:bc:d3:2e:3e:16:38:dc:c0:9e:
3d:dc:49:38:20:aa:d7:c9:b0:57:8d:73:5d:94:b5:b7:59:16:
bc:17:92:63:01:bf:5c:77:26:6b:ab:09:c4:51:5b:44:ce:d7:
78:38:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:15 2026 by rpki-client