
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: Ncx7ERBQSwivSnStES7B0mLPHE4USOQ2yJlNx6DU6Wg=
Subject key identifier: 8B:81:3F:7F:F2:E4:50:9E:43:DE:5D:F1:81:F1:81:F7:C8:AD:BB:46
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019DA3E5F2B3CF707D0180C964C52AD616D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 0343
Signing time: Sun 19 Apr 2026 04:00:49 +0000
Manifest this update: Sun 19 Apr 2026 04:00:49 +0000
Manifest next update: Mon 20 Apr 2026 04:00:49 +0000
Files and hashes: 1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: kuiVs3TbCdLheqXLBczurR9iSk4rCQWfYQ7pV/9fg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:f2:b3:cf:70:7d:01:80:c9:64:c5:2a:d6:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Apr 19 04:00:49 2026 GMT
Not After : Apr 20 04:00:49 2026 GMT
Subject: CN=8b813f7ff2e4509e43de5df181f181f7c8adbb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:d6:c8:3b:d5:d2:ad:00:9d:97:d0:a2:71:
87:63:6b:96:66:ef:48:02:27:58:b7:fb:d8:62:1a:
37:c5:e7:47:fc:18:f7:c0:28:6d:cf:03:c3:3e:5b:
59:d7:e6:0a:ec:02:1a:66:11:4b:42:3d:ef:51:0b:
1d:9e:7f:9f:bf:85:ce:8f:7e:92:08:3d:61:0a:37:
f9:34:3a:31:df:76:f0:bc:b3:87:54:c9:03:15:a0:
d0:82:9f:4e:03:c5:eb:13:29:c9:cb:c6:f1:fd:63:
93:92:7e:8e:f0:6a:3b:59:f6:b4:27:bd:f2:10:2c:
c8:c4:cf:d7:b8:95:9d:40:db:8a:e1:be:c6:26:6b:
dd:5d:b1:50:fd:c9:b0:4e:ae:65:05:f3:1c:68:b0:
21:e0:d4:1f:18:13:2c:05:cb:7d:38:cc:04:4c:c9:
c7:56:69:45:86:48:30:61:04:b3:12:1f:f9:08:44:
24:0f:f9:96:9b:de:d0:81:90:ac:e0:07:70:93:33:
f3:ce:5b:10:c0:4f:87:65:36:b2:0b:2c:f1:00:db:
99:d8:a7:c9:31:40:1f:b6:26:4d:73:3a:c6:37:89:
ef:be:d0:40:a1:44:89:30:c0:da:de:9e:f9:27:f5:
7a:00:21:1d:ba:90:82:c6:9d:f3:59:e4:73:37:16:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:3F:7F:F2:E4:50:9E:43:DE:5D:F1:81:F1:81:F7:C8:AD:BB:46
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:38:f9:1e:31:5d:c0:81:f0:15:78:2f:15:f4:54:e9:b9:35:
7a:8f:f2:82:c3:93:44:05:91:93:71:21:97:ec:e7:38:74:57:
c5:4f:56:8b:e2:fd:c7:16:95:1f:7e:42:e9:52:19:28:19:1d:
c0:24:f8:50:4e:33:b5:00:16:6b:98:0c:8a:89:50:bf:d5:fb:
2f:51:90:fc:d6:76:e4:65:13:5f:56:4b:69:9c:8e:28:61:b0:
84:1f:a1:b9:ca:19:06:a8:8e:7f:42:17:f2:0d:45:30:6c:70:
b7:ab:b5:d9:4d:2c:6c:19:d7:73:54:1d:db:aa:15:ba:c8:c0:
8e:db:2c:17:e3:4b:b0:09:e9:b1:1a:58:0c:3b:ff:a7:d3:4e:
d4:59:c6:89:af:4d:5e:2f:1d:7a:7d:8c:5d:a4:23:c0:64:47:
93:05:b4:de:d6:24:5b:77:da:2d:72:8e:f9:84:bf:09:4c:a6:
13:42:0a:96:0e:f2:a3:9b:ab:3b:75:fb:5f:3c:b1:bc:22:9f:
23:73:ca:ab:60:0d:77:70:94:8c:bc:be:eb:d0:65:65:d7:12:
59:73:69:2b:08:ad:08:e8:df:ad:8e:c8:92:a8:88:b6:7c:91:
e0:45:11:aa:85:8f:df:f3:2b:de:ae:2b:16:45:24:ac:77:6b:
07:e7:7d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:18:34 2026 by rpki-client