Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: 8pxRRJyDv2eeH20ZFkVRtDAH0fUir6F1Eo1t0fHI/BQ=
Subject key identifier: 8B:BF:86:89:8C:59:E0:CB:43:96:C4:E6:40:27:A4:08:64:86:5A:B6
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 019D99992CAE27CCA30CB21025396FDE9873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: NUAzeiweOuAdospdZKprFcrpT_A.roa (hash: 1ElfmDWVh8gEsGgcrn15DX/GYQtHYpQEuEeNVWQ/qKA=)
2: eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa (hash: zDufrnp/lRdYw6z5myv4nDWlvesG8imRXgNlxsEXDkk=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: 2g0tH2MSgBAmTtV5AyBnGyqzJoncLGZXgDLJQs2qGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2c:ae:27:cc:a3:0c:b2:10:25:39:6f:de:98:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=8bbf86898c59e0cb4396c4e64027a40864865ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:93:b2:3a:fd:84:c0:5f:8f:5f:a1:7a:d7:
a2:b9:d6:5b:9d:f7:72:bc:b2:fe:31:91:6c:e7:25:
39:48:85:90:4f:c9:c7:e1:3c:e5:b8:e8:30:32:c4:
14:d0:b5:fd:cc:3d:34:1f:4c:4f:6c:5c:d3:49:18:
61:55:b6:0c:15:38:ed:52:81:9c:a8:c8:fc:08:ff:
e0:93:d3:5a:d5:75:23:4e:c4:af:2c:c4:d3:a9:95:
10:76:9b:e2:c1:01:d6:c0:7b:bd:c9:dd:20:39:46:
39:11:b9:9d:6b:64:25:a1:b3:46:6b:23:2a:e2:3f:
8c:72:c7:f8:b0:85:16:ce:c0:bb:20:6a:aa:8d:c5:
b4:31:63:52:27:2d:6b:78:f8:90:d2:1f:88:ba:7c:
01:56:60:27:80:3d:a0:44:e2:d4:a5:27:70:9e:82:
7a:50:e7:2e:46:b1:37:c8:9e:11:14:76:1a:a6:46:
8f:0a:c0:60:37:cc:92:38:62:ab:8e:11:e2:1e:6c:
a3:00:64:a4:40:68:91:11:ee:f4:01:62:e7:35:3a:
f8:79:bb:ec:65:8b:ad:10:03:64:a0:31:bd:dc:5c:
f8:08:69:4f:81:5d:d7:ae:bf:aa:a1:ae:1d:69:12:
c0:8d:e7:62:6b:54:e5:21:ec:b5:5a:0b:5b:f1:2b:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:86:89:8C:59:E0:CB:43:96:C4:E6:40:27:A4:08:64:86:5A:B6
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:3a:d4:fb:28:39:75:03:7d:c8:44:dd:54:3e:12:f4:98:
dc:b7:6b:55:63:8e:68:e7:00:8f:a3:bc:67:d9:dc:de:ba:76:
21:df:fd:20:81:32:84:d6:0e:45:d9:17:c5:97:f5:a8:9d:d6:
a1:f7:2c:44:6b:fb:ac:c4:38:af:f2:d9:75:a3:c5:ac:3f:d4:
8a:fb:c2:13:91:9e:48:79:17:81:f5:1f:5c:8a:a8:54:fb:3b:
21:2f:2d:57:26:56:da:9b:f2:cc:ee:18:58:64:c7:65:b1:c3:
1c:09:0e:22:e6:05:72:db:d6:38:a0:23:ba:b0:af:6a:10:9c:
d4:d1:6a:b4:1a:63:87:77:42:8d:a6:2f:c5:1a:1c:55:d1:cc:
2f:d3:3b:42:2b:c1:59:0b:a9:77:f3:68:9a:3a:e9:a7:19:8b:
02:fc:01:d9:3a:3e:ee:85:57:2c:9b:37:e1:22:a9:d3:ad:42:
f4:e5:9e:06:b1:10:4a:44:45:23:c8:43:62:35:1b:37:e3:98:
1f:ef:9f:34:7a:ab:bf:85:a0:3b:c8:71:7e:a2:e0:03:93:a2:
6c:b1:f5:84:75:65:c4:49:8c:c9:88:e8:1e:91:81:14:45:3e:
b8:e4:f8:4f:34:d8:7d:ab:33:64:4c:eb:5f:56:50:b1:94:32:
99:e7:ea:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmSyuJ8yjDLIQJTlv3phzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGI5ZTE4ZWViMDk0ZDkxMmRlYjU5NWRjN2FhYzg2NjFi
MGQ2YzcwHhcNMjYwNDE3MDQwMDQ1WhcNMjYwNDE4MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg4YmJmODY4OThjNTllMGNiNDM5NmM0ZTY0MDI3YTQwODY0ODY1YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyeTsjr9hMBfj1+heteiudZbnfdy
vLL+MZFs5yU5SIWQT8nH4TzluOgwMsQU0LX9zD00H0xPbFzTSRhhVbYMFTjtUoGc
qMj8CP/gk9Na1XUjTsSvLMTTqZUQdpviwQHWwHu9yd0gOUY5Ebmda2QlobNGayMq
4j+Mcsf4sIUWzsC7IGqqjcW0MWNSJy1rePiQ0h+IunwBVmAngD2gROLUpSdwnoJ6
UOcuRrE3yJ4RFHYapkaPCsBgN8ySOGKrjhHiHmyjAGSkQGiREe70AWLnNTr4ebvs
ZYutEANkoDG93Fz4CGlPgV3Xrr+qoa4daRLAjedia1TlIey1Wgtb8StPswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu/homMWeDLQ5bE5kAnpAhkhlq2MB8GA1UdIwQY
MBaAFJQLnhjusJTZEt61ldx6rIZhsNbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgt
NTY1OTZiZWVkMWM3LzEvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgtNTY1OTZiZWVkMWM3
LzEvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASx061Pso
OXUDfchE3VQ+EvSY3LdrVWOOaOcAj6O8Z9nc3rp2Id/9IIEyhNYORdkXxZf1qJ3W
ofcsRGv7rMQ4r/LZdaPFrD/UivvCE5GeSHkXgfUfXIqoVPs7IS8tVyZW2pvyzO4Y
WGTHZbHDHAkOIuYFctvWOKAjurCvahCc1NFqtBpjh3dCjaYvxRocVdHML9M7QivB
WQupd/NomjrppxmLAvwB2To+7oVXLJs34SKp061C9OWeBrEQSkRFI8hDYjUbN+OY
H++fNHqrv4WgO8hxfqLgA5OibLH1hHVlxEmMyYjoHpGBFEU+uOT4TzTYfaszZEzr
X1ZQsZQymefqGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:55 2026 by rpki-client