Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: A6Y4jUjm0fBlVap/2Rc8fyXlxH//lGUDwQWe0ik8//o=
Subject key identifier: 24:60:2C:55:24:F3:B5:A7:E1:88:AB:17:2D:CA:1C:22:1D:7E:11:03
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019D97E1E6AB12033B3B7760675A0D92439F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1851
Signing time: Thu 16 Apr 2026 20:00:57 +0000
Manifest this update: Thu 16 Apr 2026 20:00:57 +0000
Manifest next update: Fri 17 Apr 2026 20:00:57 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: MK7rpvpc+L+0scSfS87W0wtGVbaFdzXW1awky3DnEp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:e6:ab:12:03:3b:3b:77:60:67:5a:0d:92:43:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Apr 16 20:00:57 2026 GMT
Not After : Apr 17 20:00:57 2026 GMT
Subject: CN=24602c5524f3b5a7e188ab172dca1c221d7e1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:96:74:53:0c:07:26:2e:94:c5:7a:8f:c0:
c3:e3:15:df:8a:ed:61:74:2f:e0:af:ee:69:df:a7:
5d:6d:78:00:2a:ef:6c:63:d6:33:c4:b0:d5:c4:aa:
e4:d2:39:0d:0a:eb:d9:db:5f:6a:a4:21:34:0e:8e:
6c:2d:0f:6c:2c:64:96:d8:d9:b6:18:ab:d0:fd:ad:
23:eb:ed:bc:39:7f:cb:d3:72:eb:0f:84:53:d9:ea:
88:c2:f5:70:f3:4a:4b:c0:51:9c:56:29:c7:2f:88:
96:79:56:ae:97:c7:d5:dc:20:a2:1d:c4:73:c2:91:
aa:c4:3a:ef:65:75:45:9b:1f:16:ea:98:e3:e8:87:
ae:20:57:7a:89:c5:3e:33:e2:97:d9:94:05:b7:8e:
90:2e:f7:c4:23:4e:c1:83:e6:70:25:99:8c:33:c2:
5f:2a:b6:ff:22:6a:4e:c0:08:45:cf:4e:11:7d:bf:
2d:f7:1b:da:ef:c6:b9:f9:69:6b:56:35:eb:15:62:
ae:df:d9:dc:5a:04:27:a0:d3:fd:41:b6:4c:23:ce:
49:ef:33:9e:c0:29:b6:76:8b:39:3a:a1:90:84:06:
b8:4f:3b:6f:c2:ed:e7:ca:ff:42:d6:15:af:e4:d7:
05:37:4b:19:cf:06:7d:be:f0:db:e7:22:5d:fc:21:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:2C:55:24:F3:B5:A7:E1:88:AB:17:2D:CA:1C:22:1D:7E:11:03
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:20:d7:bb:04:56:bb:46:15:84:82:26:db:07:7d:48:1e:
b6:87:32:06:b8:33:7f:be:ff:5e:ad:c5:48:c7:04:6c:b6:5d:
16:30:c1:ec:02:72:a8:ae:7a:06:50:4f:eb:97:1b:36:3f:4f:
3c:65:ce:c2:20:20:b1:57:22:5e:c4:d3:37:76:c3:8b:d8:b8:
d4:64:3a:5a:39:a2:1e:72:5a:c6:a7:56:85:f4:dd:4d:a4:c7:
c5:b7:12:f6:82:51:aa:d1:7c:0b:b8:a4:83:9d:c0:31:f4:c6:
e3:76:44:dc:19:53:2c:cc:27:e2:ac:9e:7b:b4:a1:51:2b:93:
e2:77:db:ef:53:c8:43:9f:e0:7e:2e:68:df:f6:d3:f9:46:1a:
f7:d5:5f:fa:36:d0:8a:21:f8:87:4e:1a:c9:71:52:76:c8:fc:
69:a3:90:b5:ad:65:bf:d3:44:87:f3:08:c6:91:d5:5a:bf:53:
98:11:f2:63:32:b1:75:b7:4d:83:f5:11:64:e3:ca:53:00:56:
6e:93:a1:4f:57:4d:d4:92:8c:6a:c4:8e:ce:84:87:b0:40:67:
c4:e6:81:00:3a:85:66:c8:55:0c:e8:e3:e7:2b:05:b9:a1:1f:
a1:c1:89:59:0f:71:4b:ee:03:3f:ed:22:90:72:1e:22:b5:2e:
d8:31:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:37 2026 by rpki-client