Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: 4P85F1418VaxOZE2DdajclxQZ3pRLHTxbdbSZEc9Uwo=
Subject key identifier: 33:D8:73:0C:E5:0F:11:C7:25:71:FF:FE:80:D6:41:B1:9F:8D:CC:44
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019DA5D4C12FFB1633CDFF37A70DC005E715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 02D1
Signing time: Sun 19 Apr 2026 13:01:16 +0000
Manifest this update: Sun 19 Apr 2026 13:01:16 +0000
Manifest next update: Mon 20 Apr 2026 13:01:16 +0000
Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: 3tojoao2IBQb3nkAGCmJL4w3TRXkSF5DERJfe9Nf8gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:c1:2f:fb:16:33:cd:ff:37:a7:0d:c0:05:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Apr 19 13:01:16 2026 GMT
Not After : Apr 20 13:01:16 2026 GMT
Subject: CN=33d8730ce50f11c72571fffe80d641b19f8dcc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:fc:68:c8:e7:cc:d5:7f:f4:f1:73:86:27:
7c:9e:90:ee:c0:57:b0:b2:da:8f:3c:7f:1d:87:f1:
11:3d:71:6c:f6:7d:bc:c7:4d:19:26:7f:61:7d:f2:
f8:14:5f:5b:53:19:62:66:f4:31:b2:23:4b:25:1b:
98:52:f1:92:21:0b:25:34:c1:05:70:16:2b:35:e2:
29:a0:99:80:45:e6:76:2e:3b:05:2c:4b:6a:ac:f1:
2d:c1:1b:4f:e1:08:31:8f:a8:f0:c8:6e:79:99:6a:
da:f3:a6:9f:77:18:19:ed:03:d3:06:db:df:62:65:
2e:b9:76:72:02:f9:37:55:21:7f:e9:a6:25:6e:8b:
03:0f:e2:36:1b:c0:7a:db:08:59:50:aa:94:99:57:
0d:1f:6b:1a:f4:f8:46:b6:62:6b:15:d3:c6:51:5e:
e5:32:a3:f0:41:79:c1:4c:15:56:17:5f:19:3d:e3:
34:c3:98:00:a0:bb:9f:f2:f7:2b:76:3a:09:bd:c3:
46:78:4a:2b:f4:1d:8e:78:41:11:d2:69:74:7f:84:
61:d7:f8:07:66:fe:10:ed:3f:a0:74:81:3d:53:78:
67:ab:d7:7b:f4:3a:22:ec:a6:f1:26:20:58:67:f4:
26:04:61:66:a8:51:d6:5a:e8:83:54:27:9d:7a:7e:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:73:0C:E5:0F:11:C7:25:71:FF:FE:80:D6:41:B1:9F:8D:CC:44
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e5:9b:ca:f8:40:3c:3c:e5:74:d5:a5:e7:82:3d:b8:d0:12:
61:87:5d:6e:16:ec:9b:97:3f:84:b2:0a:c8:55:22:67:e2:7b:
ed:2e:2c:e6:e7:22:98:c2:d9:da:85:54:1e:e4:c3:03:a5:7b:
bc:d5:51:14:56:07:e6:0c:37:aa:1b:20:d2:c7:28:55:36:19:
31:e0:0c:fd:e4:fd:88:22:2e:5a:b5:bf:c7:e9:4f:44:69:a8:
4b:c0:d2:31:2a:77:d9:1e:eb:52:3b:3a:30:cb:ad:40:30:52:
7a:79:01:90:92:42:67:2a:fa:c2:e3:4f:3b:0c:88:0d:3d:94:
c7:1c:7b:fa:16:92:2d:46:f4:b9:3b:5c:2b:e6:b3:45:d7:ba:
f4:a7:6f:a5:7b:73:da:b6:bd:33:f6:b2:f7:1d:ea:f8:8f:74:
ab:70:a5:36:4f:6f:1b:2b:99:70:61:aa:0e:2a:fb:d6:09:86:
af:c0:ab:b7:52:1d:ad:2b:97:47:21:b1:65:9f:a2:13:ad:c8:
05:df:1b:6e:5c:cb:63:06:cc:0b:1f:0f:22:85:4a:9c:50:70:
aa:92:99:60:0b:4d:be:12:87:b2:25:8e:da:2f:f3:a3:31:b8:
4b:dc:02:d9:50:d1:66:0a:cb:af:ed:80:4d:7b:38:f3:81:b9:
46:fe:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:09:16 2026 by rpki-client