Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
File: lWmTFkJJYHEcLo7LU2vdArxyT60.mft (raw, json)
Hash identifier: rnKR7AMuAMs946mriH1iZiZ7QtegXf4jfcHGEnYob5c=
Subject key identifier: 80:77:80:EB:B6:1B:5C:CD:18:53:88:51:55:23:8A:19:CB:AE:23:C7
Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad
Certificate serial: 019D9A06E81BD49AF058B8A687F728830047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
Manifest number: 073B
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: lWmTFkJJYHEcLo7LU2vdArxyT60.crl (hash: TCy2wiQodXYE2x/yML/j9FnI44WyVol4PqpA03qGH0I=)
2: t8SQMGrl26r1gRo4N2MntzBn8Fo.roa (hash: KLhgVuuIFKpUzDmtTgaR/z7BuurCfK28TIL8+NxxxH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e8:1b:d4:9a:f0:58:b8:a6:87:f7:28:83:00:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=807780ebb61b5ccd1853885155238a19cbae23c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:0a:55:a1:07:e5:73:ac:3f:41:f0:73:e5:
54:ae:ce:eb:09:07:8f:cd:f1:93:78:19:f4:8a:8a:
be:ec:6a:e8:b6:d8:4b:0d:37:19:5c:88:17:87:4f:
dc:3a:87:b0:39:4e:f6:3e:f6:0b:d4:2c:71:dc:b3:
4e:43:bd:15:04:18:f7:df:c9:60:4d:82:26:7b:51:
ad:6c:b2:d6:0b:4e:2a:69:63:57:a8:8e:54:7e:44:
c7:4e:ef:10:e8:21:af:f1:77:53:1a:b8:25:bc:48:
55:79:d8:2e:26:cb:3b:4a:bc:d3:ed:7e:93:68:c7:
6d:7c:6a:94:64:ba:d3:60:e1:b3:d9:89:19:cb:dc:
e8:a4:2b:6b:82:9c:b5:26:a4:a2:c6:42:d8:8a:48:
a7:cd:18:b3:6a:b8:92:ae:bc:6c:9b:f2:8f:df:74:
0a:34:94:ad:bd:fd:fe:5b:7b:a8:ce:03:1a:af:a9:
06:97:f3:08:c9:a4:bb:a4:e8:50:0b:a5:50:c8:8a:
31:7b:f4:5e:9b:e3:1a:60:f6:2d:3b:47:fd:10:ee:
84:2f:9f:bd:f3:09:ec:bf:ad:ad:89:7c:5f:23:ea:
70:ae:5c:46:cd:82:3b:80:0a:d9:82:a4:64:5c:0f:
4e:f4:5f:f8:86:c2:dc:87:30:01:f3:cf:08:74:29:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:80:EB:B6:1B:5C:CD:18:53:88:51:55:23:8A:19:CB:AE:23:C7
X509v3 Authority Key Identifier:
keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e7:dd:82:23:6b:76:01:77:50:84:1f:89:7a:21:ff:05:be:
b8:e5:e5:b4:2a:1c:ae:1b:10:67:bd:b8:18:e5:86:0b:44:83:
fa:aa:5a:73:c3:3d:59:1c:cd:ea:dc:7f:21:b5:a8:04:b7:ed:
e7:cd:4c:1a:a1:87:0a:01:22:ec:5f:c7:e3:01:b7:c0:f3:9a:
cb:ef:f1:09:fa:cd:6f:71:ad:58:1e:72:31:62:59:5e:4f:e5:
83:1c:f8:c1:db:0a:2a:89:72:cd:50:fc:1a:a8:8e:14:5a:ef:
10:35:e9:08:00:fb:1b:f6:1f:29:5d:c8:14:09:0d:c3:27:73:
0d:3d:45:65:19:7d:01:6e:b5:13:a6:10:41:17:95:7c:c6:b3:
7c:c2:9c:46:29:bc:d3:69:e3:58:ad:d0:cf:3c:b9:67:f7:f3:
b5:a5:e5:f1:13:7e:ed:82:69:75:62:f5:33:d8:e3:90:13:28:
83:17:a8:44:28:ec:bb:4b:e0:50:22:59:83:4b:90:87:70:24:
db:6f:5e:c9:54:e1:1f:96:ae:cf:57:9a:c8:01:12:58:32:a5:
9e:8f:c8:06:36:00:4f:eb:30:84:a4:b0:6d:64:06:03:04:0f:
e5:09:5d:06:fc:be:c3:2d:2d:e5:4b:e4:a8:c3:14:fd:be:0b:
68:a5:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:04 2026 by rpki-client