Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: nL6ROGTPYXuqZWUIwS+YREryTLCVVD0KeuIgHG4zCpI=
Subject key identifier: 04:46:29:55:09:6A:B4:09:44:FD:93:36:09:19:5E:C5:AD:03:6A:47
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019D9999A144C57920C1E23991DEB86512FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: yjzX1KM1ZdvjDwbIPo6KlaEkJ4wILwrnBPPrasyyBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a1:44:c5:79:20:c1:e2:39:91:de:b8:65:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=04462955096ab40944fd933609195ec5ad036a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:6d:d7:e0:e1:56:d3:e2:bf:69:4e:8e:d5:
75:46:6f:79:99:4d:07:bf:59:88:b3:26:4a:e5:a2:
9f:f5:04:93:fd:93:ae:92:7a:2d:32:02:ec:3a:92:
ae:56:ad:b7:a2:45:67:1d:b0:2e:fe:e2:5c:6c:73:
26:8a:da:ef:82:02:45:e7:a9:b5:98:ec:fe:24:1c:
fa:1f:b0:1a:25:1b:41:de:60:88:20:c2:d3:0a:cf:
7b:08:3c:6c:3e:fd:f1:7f:8e:d6:f4:b3:96:13:fc:
cf:22:7c:3e:04:7e:99:6b:88:da:b3:11:f6:36:1b:
65:44:c8:40:89:c8:b9:66:db:ce:b8:80:78:ca:ac:
9e:32:82:68:b1:d4:9d:0c:37:5d:9f:d0:c5:89:c9:
41:60:69:30:9e:19:2c:a0:42:d9:a2:80:03:7d:8a:
da:d5:0b:5a:5d:bc:b0:99:65:db:1c:c9:93:14:2a:
1b:dc:42:05:e9:e5:a3:11:4d:b1:9d:3a:c0:10:17:
f1:bf:a5:a2:4c:f0:e4:ae:37:8f:1f:c1:e9:8d:fe:
27:e9:77:4c:40:1d:1f:9b:96:54:fd:8b:60:95:87:
bd:45:e5:9d:e6:b9:63:97:02:6a:9f:e1:a8:18:6e:
2c:6d:46:fc:63:db:3c:df:0b:71:70:6f:85:45:fc:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:29:55:09:6A:B4:09:44:FD:93:36:09:19:5E:C5:AD:03:6A:47
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:21:5f:74:e5:f0:44:02:b1:21:49:7e:58:ce:46:ce:12:35:
c2:50:70:3f:42:4d:b0:e8:d6:f3:ca:d5:57:1f:c9:3f:52:ea:
a0:49:d8:40:ff:df:2a:1d:e6:7f:d4:d2:51:a6:da:d8:16:97:
72:7d:8d:5c:8c:a2:ac:35:c1:47:cc:6b:b9:3b:ba:f9:d8:e5:
9f:f6:18:fc:97:2b:69:15:b2:dd:60:e3:38:3f:68:d4:93:a8:
60:f9:08:a4:33:f0:99:c9:6d:b2:1b:0c:05:64:77:ec:fb:ea:
65:51:bb:a7:48:b5:72:84:3d:30:38:18:5f:06:cf:8d:85:e3:
dc:f8:df:9d:27:73:a9:65:b0:47:50:6c:53:48:5e:d1:ab:d7:
91:89:ce:08:28:b3:9e:35:d8:a8:1c:ba:65:92:f3:d7:6a:86:
36:70:d0:3a:74:7b:93:9a:3f:2d:99:0f:1c:7a:b3:c7:cc:81:
04:af:89:77:06:13:b2:77:37:61:3b:e5:49:f8:e6:22:fa:7f:
fb:b5:21:43:32:1f:41:89:16:c7:ee:6d:4a:75:b3:45:87:97:
3d:95:0b:2e:38:59:88:80:6b:31:29:8e:be:cf:79:db:09:07:
28:39:9f:c0:80:17:ee:ee:0e:f3:e6:6c:07:8d:f9:00:19:8c:
fe:c8:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:58 2026 by rpki-client