Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: KajFQmyGGpXJ1v8n1yjVhCbe5kElNMGvgs+0G1CFmXI=
Subject key identifier: 33:4E:D9:F6:42:89:31:82:F1:E1:EC:63:80:28:F3:E4:84:0E:4B:4B
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019D97AAF2B6B4BEC079171DE1B0E1C8C566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 05E1
Signing time: Thu 16 Apr 2026 19:00:56 +0000
Manifest this update: Thu 16 Apr 2026 19:00:56 +0000
Manifest next update: Fri 17 Apr 2026 19:00:56 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: XG9RF8/FLeP+GkQSjqErX4/Jcn0vTwuz0g40GoMhbPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:f2:b6:b4:be:c0:79:17:1d:e1:b0:e1:c8:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Apr 16 19:00:56 2026 GMT
Not After : Apr 17 19:00:56 2026 GMT
Subject: CN=334ed9f642893182f1e1ec638028f3e4840e4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:52:68:ec:37:d2:10:90:b2:a4:1a:53:cc:
91:bd:04:a2:8c:47:26:c5:8e:fb:9a:40:3b:7a:33:
78:57:16:38:81:76:b8:b0:39:67:fa:50:8c:14:58:
41:fe:12:8a:2c:68:fe:97:db:94:23:d7:91:8a:94:
e4:fb:b7:0a:9d:7d:c4:53:b4:a7:2b:39:f7:e0:02:
f2:6f:2f:4a:1f:27:ab:44:64:c2:9b:be:4e:8c:ef:
6c:60:92:c3:56:b7:61:a8:c2:99:7c:c0:65:a9:af:
db:74:41:f8:e7:47:57:32:d8:ce:66:11:83:09:f0:
d0:b1:47:a8:69:c4:a5:ce:9e:f7:48:0b:72:d2:af:
ff:8b:e8:ea:fa:52:6c:9d:c7:fb:b5:33:68:34:fa:
f4:18:42:8b:fc:b8:80:d1:bf:0c:35:4a:9e:cc:3a:
84:a4:1a:fe:02:ed:9f:05:10:de:a9:2d:2a:40:a4:
00:fd:fa:20:68:89:4e:0b:b2:0b:6f:82:ec:77:78:
59:86:8e:af:d0:e6:b8:33:c8:df:29:35:14:9b:df:
8c:6e:b0:72:ba:64:15:7b:e1:af:41:80:c3:f4:12:
e5:b9:f4:54:c1:5a:d6:28:af:24:29:f1:61:16:30:
13:06:cd:85:df:a5:6f:5b:42:51:45:af:e4:15:84:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:D9:F6:42:89:31:82:F1:E1:EC:63:80:28:F3:E4:84:0E:4B:4B
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:95:d8:cc:87:73:3e:85:0e:a5:7a:f0:f9:d0:cf:e0:71:
f6:e0:35:8c:8e:3a:46:9c:d6:de:2e:89:b2:a3:79:e5:ee:95:
23:a0:02:f9:ed:75:16:13:05:6c:2d:74:be:ae:e1:54:6b:b4:
f1:44:70:b4:a8:fe:ea:9b:ec:5c:90:8c:9c:b5:bd:d8:41:58:
2e:1a:0e:60:0b:e4:6e:79:19:e0:c2:d7:af:f4:d7:9c:9f:af:
63:a5:b8:9c:ff:a4:5a:55:52:70:2c:17:8c:01:1d:81:75:28:
46:cd:93:f8:a2:ba:48:b1:b1:b2:17:48:99:ce:23:fc:76:17:
b1:a9:87:5f:4c:48:87:60:51:04:66:60:48:39:12:77:85:b4:
1f:16:4c:6c:bc:86:7b:b2:0d:57:88:a9:0f:1f:98:35:1c:0e:
ff:75:be:4a:2e:11:87:b0:72:7b:7f:21:fa:eb:5a:49:38:65:
be:95:9d:de:8e:94:ec:ce:f1:45:f5:81:63:a7:d5:75:2a:54:
c7:ed:b4:0f:64:45:c2:d7:4c:43:d4:94:6d:14:9f:bf:b9:14:
2b:ba:a8:8c:20:6a:ba:cc:83:ec:44:09:b2:9c:4c:99:4c:d1:
a0:b4:fa:5f:5e:d2:d9:99:06:12:43:b1:d3:83:b2:d9:cf:75:
3a:29:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:54 2026 by rpki-client