Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: eHavPSpU/PxjgtUhfmkpc+9xOUwf+FDBl6PAEqgmV00=
Subject key identifier: 9F:B7:91:FD:32:48:04:F4:FD:C7:4F:37:5E:22:40:FA:17:DF:F8:BE
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 019D9A07505EBFDEC5CA520679B1F392E0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 107A
Signing time: Fri 17 Apr 2026 06:01:03 +0000
Manifest this update: Fri 17 Apr 2026 06:01:03 +0000
Manifest next update: Sat 18 Apr 2026 06:01:03 +0000
Files and hashes: 1: drsnkuosbg6qvFQb_xFsNGudfnU.roa (hash: NBvp9SPTa0IGtzv6khJhiENmtNEIw9wGReWShX2mC+o=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: cKkEWzkNUXtEBHNym2qXpH7H/Nxdhemg/yaB9L05cOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:50:5e:bf:de:c5:ca:52:06:79:b1:f3:92:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Apr 17 06:01:03 2026 GMT
Not After : Apr 18 06:01:03 2026 GMT
Subject: CN=9fb791fd324804f4fdc74f375e2240fa17dff8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:ba:dc:4b:8a:ad:47:13:09:a0:17:20:1f:
a7:78:88:22:04:52:86:31:ed:5d:e9:bb:b9:d9:fc:
44:68:c3:03:2a:2a:12:db:12:57:26:a2:0d:22:7b:
3a:27:d9:45:96:da:c8:e5:a5:55:a3:24:51:fe:6a:
8a:97:23:60:2f:b9:0b:da:4f:c4:8a:ee:18:ab:ee:
f1:6f:b2:82:50:74:dd:4e:3b:5e:5e:ec:c2:e1:0d:
c7:3f:1c:7d:a6:b2:0b:d6:00:bc:f9:a7:74:e9:d8:
28:74:23:1e:b1:ec:f8:2b:f9:ee:89:10:da:d1:03:
b6:70:41:70:15:71:1d:e9:2a:36:04:ef:ab:d7:5e:
d0:40:98:32:22:e1:a4:b1:89:26:36:93:21:26:9b:
36:8a:a1:aa:d2:48:d3:1f:bd:41:d5:52:be:fd:36:
df:00:30:f6:da:26:cd:90:95:53:e9:14:56:c0:ef:
09:b5:38:18:67:e3:81:49:c4:c3:19:99:98:6d:44:
ca:79:46:35:64:ac:0d:54:2b:32:61:bd:6d:c1:f6:
c1:e0:32:a0:3a:bf:0b:35:d2:b9:1f:19:c1:30:46:
95:02:34:6a:4f:19:80:49:a6:6e:61:37:29:c8:cf:
f1:55:78:1c:df:7c:2e:20:fc:1d:53:3c:d0:ac:ff:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:91:FD:32:48:04:F4:FD:C7:4F:37:5E:22:40:FA:17:DF:F8:BE
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:d6:80:96:42:13:62:62:10:3e:b8:85:90:80:d2:86:b9:
b3:ef:5f:b3:02:e2:51:de:38:ab:02:2d:a9:df:dc:0a:d3:6b:
41:81:35:f2:79:f7:87:5d:ae:6c:a5:4a:ff:f3:33:05:fc:a5:
99:e6:6a:dd:2a:ee:18:4e:10:d5:1b:da:7d:d9:36:5c:df:8c:
56:12:9b:65:f7:7e:9a:96:ea:28:4d:20:af:fc:f3:2c:61:3b:
5d:fa:34:21:9c:60:e3:1d:a7:9e:1d:c4:aa:8f:05:0b:56:a9:
40:90:b7:a7:6c:74:4e:4a:9f:a3:ff:c9:ef:fb:9e:df:fe:5b:
a5:c2:9d:a8:b0:19:25:5d:89:4e:32:4e:51:34:24:21:11:3f:
8c:9a:7a:ab:38:04:ad:1d:47:db:3b:e7:cf:d9:e9:7a:95:e5:
e9:8c:62:bc:13:5b:72:ed:fd:e9:f7:32:d6:03:ad:51:c8:92:
e8:15:ba:22:1d:00:e6:d2:de:a9:4c:4c:52:c7:83:ae:bf:64:
1a:db:c8:aa:1c:ab:fd:2a:fc:ac:96:29:95:32:0e:83:42:ed:
3d:7e:82:2c:94:63:ea:38:9b:63:47:05:be:3e:2f:b7:24:55:
a4:2c:24:f8:4b:6a:2b:66:e5:26:17:93:d2:1e:73:53:6f:b6:
91:2b:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:39 2026 by rpki-client