Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: Exrm0mW7MMg5tHUhhn7lt1iwz/JRIf4TXr7blhw11gI=
Subject key identifier: AC:F6:60:0B:F6:AF:D3:9A:FF:46:52:63:F3:32:44:D2:6A:5A:EC:25
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019D99D045DFAF374B9E24E1A7A8BE466EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 18D2
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: DVTf_5yCOBj02L0_BNQxFYZ6k8w.roa (hash: cTTE0xiWdv+38wchcvOHNRPPWHdMRDsNTimSJDnJNbE=)
2: Dgf7cfRVG5UYWu4NmVQUsVHPJPg.roa (hash: DkeQXBgFh9ImmmNOzjwgdsw8I8ss1Ec5+5QbfzAbm4I=)
3: H66jiOjIkB87nIobF_YVreGxebg.roa (hash: nX0dPkscOxKWgmYZHhHlPPDOqJnygv6Vqh3rpPBUOoA=)
4: KrB7uvE9bKw3yAKVJCQvXlGLopk.roa (hash: 8K9bI6nkeysWqiudvR2q+I1t8ttPCPC4qoTAEiGR6EE=)
5: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (hash: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=)
6: YrEr9LA-khkmEW07gT8B8DqCy0I.roa (hash: 7DVEFprnSovyw9V4VwxHhpglukSCBrVRzQ4rkmRgg34=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: TvghinvUeQeJR0Us13vf4gWPPwdlo8tP4zOzcMlkZoM=)
8: nZDMDILCeZBaSe8pGgkQFEMoBB8.roa (hash: XlYgESaX6EJLoA/4185eSc5A384E8E++jev4s9MD0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:45:df:af:37:4b:9e:24:e1:a7:a8:be:46:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=acf6600bf6afd39aff465263f33244d26a5aec25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:c9:0b:c9:5b:45:0f:c6:b9:65:eb:f8:76:
93:17:3e:86:89:35:10:36:fb:17:e1:f2:fa:5e:1f:
51:d1:05:2c:c6:a7:be:75:7f:62:61:2e:5a:0b:69:
35:c4:fa:60:51:4b:c4:2b:1f:db:8e:7a:af:2f:23:
2c:1d:55:e4:57:69:2d:8a:7a:28:21:9f:7a:39:a3:
ca:f9:34:ff:9e:b0:ce:b3:3e:7d:2d:f3:c0:6d:36:
2a:76:57:56:39:4f:c1:44:1a:73:c6:be:e0:38:a6:
4f:d8:0c:47:e0:7c:27:5e:25:a3:c4:2c:16:7c:ec:
53:ad:99:99:fa:b4:b4:b9:95:b9:56:ed:43:fc:ba:
b3:97:14:a7:95:ee:9a:6e:cd:5c:65:00:9d:87:52:
99:b5:64:6f:8d:fe:50:82:49:e3:78:2f:ac:b0:0e:
c4:d9:44:ef:ef:13:1e:b8:33:e5:71:17:6e:f9:68:
40:af:d4:92:33:60:df:e5:c0:02:71:f2:94:4f:f9:
89:57:94:e3:9c:17:f7:b6:82:fb:29:8a:6a:9c:0b:
b9:eb:aa:1d:79:4c:6e:ee:a6:3b:c7:ed:8d:dc:b1:
5f:50:63:18:2e:1f:c2:d2:4c:d2:aa:d1:66:40:ac:
55:1d:fe:06:0a:c6:bb:3b:09:87:83:33:35:4f:bf:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:60:0B:F6:AF:D3:9A:FF:46:52:63:F3:32:44:D2:6A:5A:EC:25
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1d:73:67:ff:42:b4:1f:a9:5d:8c:11:99:de:68:d6:1c:ce:
5d:18:30:ba:d1:cc:92:2c:71:c6:c5:62:4b:6d:8a:ab:43:a2:
37:aa:fb:b0:44:4c:14:86:ad:a7:92:f8:0b:c3:11:2f:99:78:
4f:80:cb:d0:bc:1c:02:88:fd:31:17:5f:b0:58:b4:a7:27:cd:
56:fa:bc:01:5b:74:2a:9c:72:95:71:93:3b:d0:0f:31:86:88:
f8:65:9e:be:96:99:f5:b8:f6:25:76:b7:62:f3:5b:6e:66:02:
60:bd:85:a1:d6:60:66:05:17:87:97:1f:39:23:c5:44:05:a2:
27:d9:d2:a8:07:d4:0b:c4:a2:94:24:2f:35:0d:6c:68:78:da:
9b:21:f3:8c:65:45:0e:20:1e:fe:f8:f6:f0:b3:bb:91:fa:3b:
e8:54:e6:7d:62:f2:5a:3b:2b:19:e6:d5:2e:ff:20:d9:9f:8a:
ac:ae:b2:09:00:e3:8b:c4:95:a5:74:a7:3d:e4:ce:8c:39:63:
a5:ca:f2:f7:72:c2:fb:8f:73:21:94:76:02:d8:08:5d:b5:d6:
61:6e:39:ad:66:29:ff:4f:61:54:4a:b7:d9:93:a9:8b:79:af:
53:fd:c4:87:70:cf:0a:60:8a:11:5a:71:83:19:2e:20:fe:0b:
30:10:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:12 2026 by rpki-client