Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: xeBSNHOnSQGGXHvmRIo3KQm9aMpnLnpGlrDDQrT/iQo=
Subject key identifier: 73:E0:20:8C:3E:D1:9A:E9:55:E2:74:D0:8D:E3:BE:64:40:D5:85:69
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019D9AAC18CDAE76BE6A806D1ED1F509298D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 0531
Signing time: Fri 17 Apr 2026 09:01:02 +0000
Manifest this update: Fri 17 Apr 2026 09:01:02 +0000
Manifest next update: Sat 18 Apr 2026 09:01:02 +0000
Files and hashes: 1: 349FQFd5GuBNHJ1XSdLWCNh7MgE.roa (hash: X07/rOHAvRnDnhTDeHpviTIJqNY8MhsZ5tUjK1kXVRQ=)
2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: 9NYYhzaQStZyM+NwlsLH7IPlt6gqxZL6WNEiP/eyaFk=)
3: Ro9U9BJ6f0_Ri9pStBmjPzC3PAI.roa (hash: OME7cIqz4TyEQ9tHIazsSceKPyDQCFfwvggAogmMI2I=)
4: iRueGgNSFlYLf9RROG0f0rTAc00.roa (hash: S/n0OWxnW1sYVn1zOvkt5rV/05+3yi0pPUNZuVoiUaI=)
5: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (hash: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:18:cd:ae:76:be:6a:80:6d:1e:d1:f5:09:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Apr 17 09:01:02 2026 GMT
Not After : Apr 18 09:01:02 2026 GMT
Subject: CN=73e0208c3ed19ae955e274d08de3be6440d58569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:c9:f0:50:ae:66:d7:95:8a:05:c5:a6:37:
3c:07:c6:9e:ba:d1:39:b2:09:0f:6a:a8:d9:2b:29:
7b:45:b8:18:14:f3:da:0f:1a:ae:2e:7c:8f:e0:94:
00:a4:6c:f8:6a:54:6b:f1:da:1c:9c:66:5f:0c:7e:
c5:92:14:95:d1:99:db:18:2d:b6:4d:41:92:0d:76:
75:17:60:71:98:69:7c:f9:30:c9:8d:7e:fb:cd:b0:
32:af:54:af:13:dc:59:d8:0b:a3:5d:cb:02:09:7e:
a3:93:53:6c:89:08:3c:95:b4:f1:4a:a9:fd:82:67:
09:04:4b:71:b6:69:59:63:3b:3b:18:7a:94:c1:57:
75:d0:26:b4:97:33:86:06:ea:65:01:b8:06:d5:e5:
fb:d6:f2:c2:95:6c:2f:5e:fa:58:59:0e:b0:da:ba:
a9:bf:f1:bc:d7:9c:ee:cb:24:1c:01:41:62:1c:dc:
6a:ea:ef:c5:61:da:0d:c8:c5:a0:79:33:d4:ed:7d:
33:6e:35:16:08:2c:ce:bc:9f:2b:24:37:c6:a7:2c:
00:68:90:86:6f:60:65:9b:64:56:f2:10:eb:d0:a4:
d9:ef:f8:a3:1d:ce:46:4e:5a:de:b5:5e:42:07:7a:
89:8e:3f:51:19:c6:02:33:ab:f6:03:b0:64:2d:70:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:20:8C:3E:D1:9A:E9:55:E2:74:D0:8D:E3:BE:64:40:D5:85:69
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:32:c4:aa:8b:c5:5b:e3:cb:e7:a1:39:be:60:f1:89:0f:b5:
e8:d5:c8:d8:54:2a:2e:cd:b9:c4:5e:30:e2:09:8b:b7:2b:d1:
74:08:04:c4:2d:c5:b7:a5:79:27:ca:76:b6:55:32:cd:42:d1:
16:00:3c:3d:b1:10:20:ce:f7:e5:4b:95:fd:50:5f:cc:79:75:
91:9a:04:8c:d8:91:c7:81:cd:2e:53:ec:a4:a0:0b:fb:97:26:
12:a3:af:79:0b:74:ee:67:c7:66:50:9f:52:c0:7f:f7:18:f5:
5f:54:15:03:72:ac:f3:c6:d6:cc:b0:21:eb:ee:0c:c5:a7:ab:
d3:55:b1:35:2d:97:7d:89:6f:1f:e7:22:ca:00:0c:e0:12:49:
d7:cf:b8:30:3c:da:21:8d:d7:18:46:dc:43:e4:66:c3:c9:bb:
ef:f3:5b:0c:b4:71:b4:4f:46:1e:05:ff:fe:c6:3a:5e:c4:e3:
78:5d:36:b4:32:54:18:88:02:dc:5f:6d:36:eb:7f:d4:78:dc:
57:04:93:93:02:2e:a8:ca:b4:fc:fc:1d:1d:1f:c0:48:37:24:
b4:c3:d2:03:b4:c1:a4:a8:82:e4:0d:18:b9:f6:87:ee:8c:9f:
ac:a6:8f:13:95:bf:bb:3a:35:b2:27:89:e2:3d:3b:26:1f:c4:
78:6a:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:48 2026 by rpki-client