Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: gEJyRUqjpasTa1WgIgOyyZutUsMcNmYgluew8WPeuHc=
Subject key identifier: 4D:AA:EC:39:F8:7E:88:44:D4:3F:33:F3:6A:86:4E:E1:07:6C:31:9C
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019D9C6396CA137A853EDC24264092E49949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 187F
Signing time: Fri 17 Apr 2026 17:01:05 +0000
Manifest this update: Fri 17 Apr 2026 17:01:05 +0000
Manifest next update: Sat 18 Apr 2026 17:01:05 +0000
Files and hashes: 1: Nmcc09Xt79K0jETaPBL1LxCEW6o.roa (hash: 5YHh9vd/uVykgxuhDt7Fxzyb5DssF7KZ7qdP7IjIZZU=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: ue9pICQZ7qstpdxW2SfUdSRMT5grSj6bwAPke0XYEq0=)
3: mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa (hash: 1np7IvcHjiOYMR/ORA7UoY/R2p5vVot2cY5J1yx4uw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:96:ca:13:7a:85:3e:dc:24:26:40:92:e4:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Apr 17 17:01:05 2026 GMT
Not After : Apr 18 17:01:05 2026 GMT
Subject: CN=4daaec39f87e8844d43f33f36a864ee1076c319c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:b3:44:7d:83:38:3a:10:76:d6:dc:d9:7a:
67:12:60:f2:0a:eb:1d:49:99:b7:9a:3c:ad:7c:85:
44:74:b7:f8:66:c7:0f:7d:10:d3:ce:d8:f5:32:ce:
e2:4a:34:93:9c:6d:6d:9e:0d:1d:25:1d:2a:8e:17:
93:13:96:ff:32:98:53:79:1e:95:d4:e2:37:61:19:
01:a6:ec:1f:5c:ae:f1:0c:85:90:89:e0:b3:24:d1:
b0:3c:0e:01:3c:3e:1e:09:e2:7b:a3:92:39:f8:50:
85:e0:20:6f:88:16:32:e8:94:f8:b9:70:f2:c8:5c:
b8:b1:ec:52:aa:9a:60:24:b8:b0:ca:df:6d:16:c5:
30:29:24:90:de:ef:8b:2e:ed:43:2f:db:d7:b6:d9:
b8:58:c5:f3:97:58:c6:62:ab:d1:08:66:9e:34:af:
ae:a8:7a:cd:09:6d:8f:dc:e6:bd:f9:fc:2a:f4:40:
92:70:36:33:26:13:21:ed:0c:54:93:8a:d1:17:17:
f3:df:e0:e9:aa:35:f5:91:55:52:86:0f:52:d6:01:
80:66:22:83:28:34:17:44:c0:c7:bc:b9:8e:0e:3d:
35:f5:61:c2:25:11:8e:2d:7a:8d:ef:86:bd:a9:8e:
e8:49:80:8f:04:01:e2:47:ee:2a:22:c2:7c:87:79:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:EC:39:F8:7E:88:44:D4:3F:33:F3:6A:86:4E:E1:07:6C:31:9C
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:18:09:a8:2c:0e:14:de:13:a0:d9:72:c2:46:84:ea:0f:
c4:f6:52:f5:81:ad:c5:5b:28:fd:13:7c:2b:9b:16:ad:f4:fe:
2d:f3:5e:c7:fd:81:03:3b:bc:7a:b1:86:f3:58:6e:b8:ed:21:
79:da:8d:4f:6f:45:39:c8:9d:e8:df:0e:6b:9c:6b:1a:55:f3:
81:d8:ff:55:41:63:1c:99:31:0f:79:55:3a:44:fa:d5:dd:84:
b1:ef:4c:c8:4d:f9:ae:ab:70:2f:e1:28:d4:06:66:99:01:5f:
60:95:f0:cd:98:f4:0d:d1:b2:d7:25:31:1b:8e:6a:e5:26:30:
d3:2f:fe:e4:1e:4e:05:77:ce:9d:8a:98:eb:66:fd:14:55:5e:
ee:b4:01:c3:0a:c2:a9:3c:f0:8b:12:7c:f2:51:94:7a:ee:1e:
ae:fe:3f:d5:0e:ba:a6:29:5a:fb:ad:9a:39:fe:e8:a2:52:5d:
6e:71:1b:32:8a:4c:a7:05:af:b4:94:3e:f6:39:63:d7:b8:af:
73:93:7e:3f:c5:9c:21:bb:73:2a:1e:0f:3e:ac:b2:37:f3:c3:
5a:bf:7e:cc:36:1e:8d:61:ef:06:c3:17:9b:57:00:b9:9e:d6:
50:3d:2f:2e:16:84:f7:df:37:0b:5f:bf:5b:09:47:27:d6:22:
43:3c:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:39 2026 by rpki-client