Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: ncsDYUxEHQVKILDjOq+SZVX5d3nbttNd0t6hoQCYV6s=
Subject key identifier: 57:70:60:96:EB:CA:CD:A7:FA:53:D8:1E:F8:FC:6F:C6:54:56:7E:75
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 019D99990E16053D265797B55DA1ABA37371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 1538
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: iMOFVp6jNIsYcVogEevqtJaA8PbpdKEVkwL3FhOk7/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0e:16:05:3d:26:57:97:b5:5d:a1:ab:a3:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=57706096ebcacda7fa53d81ef8fc6fc654567e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:23:d8:9d:dd:f4:46:b9:63:3a:97:81:cd:
c1:f5:e0:e9:cd:62:f9:96:61:ed:8e:e3:bd:a1:13:
fd:3d:15:22:97:26:2d:71:34:b1:07:b5:1e:1a:c7:
95:ec:1d:99:ba:a8:eb:51:12:d1:c7:16:10:c3:8b:
50:de:dc:28:40:46:f6:90:c0:d1:6d:7e:7f:84:6c:
db:84:86:52:b4:a0:14:4e:e8:02:60:5d:eb:7e:5b:
8e:7c:b4:73:a4:c2:bd:99:e6:a0:be:cc:e1:33:f4:
5f:45:27:ea:ec:cb:e2:1d:9a:e4:a4:f9:0c:36:a5:
2f:23:4e:84:dd:a6:53:8d:e6:00:79:21:de:de:d6:
a9:56:62:b7:90:f0:9b:c4:57:84:80:07:99:ee:36:
29:11:fb:c0:aa:1e:c5:7b:38:8e:58:f9:c1:03:b4:
f5:11:4d:01:36:9a:9d:c7:b5:ae:f0:79:63:15:b0:
17:40:4c:93:5f:d1:ac:cb:4b:ae:42:4b:76:c0:5b:
ab:d9:4e:35:59:4f:f6:c7:21:4c:ea:d9:4f:a2:33:
6e:b2:9f:2e:a2:6b:04:ec:49:68:88:4a:31:e2:76:
4b:c2:42:a3:e4:9c:42:40:ce:a8:0f:1b:f8:4d:fe:
a6:85:55:e2:e8:bf:d9:00:6b:e2:c9:10:95:e0:07:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:70:60:96:EB:CA:CD:A7:FA:53:D8:1E:F8:FC:6F:C6:54:56:7E:75
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:51:23:c7:f8:16:5b:3e:5a:54:03:f6:12:8f:97:00:f7:3b:
24:04:b0:ac:a0:76:3a:36:36:36:21:6f:1c:30:0a:6b:7d:1c:
33:42:7a:44:dc:72:97:60:97:bd:51:70:d7:58:a8:1c:13:a8:
69:48:fc:9a:9c:23:43:63:5e:ce:bf:9b:6e:6a:13:c3:3b:17:
be:3e:8e:a5:a5:23:c3:6e:31:df:f5:38:55:38:04:88:0c:82:
e1:34:58:68:3c:9e:b9:a7:cc:95:56:23:51:ad:ad:3c:42:38:
46:8d:68:cd:16:66:c2:6b:67:d4:eb:af:79:be:b6:12:f2:49:
b2:75:51:5c:07:ae:30:48:70:75:c3:0c:43:82:17:eb:67:87:
28:68:f9:8e:3d:7e:9a:62:3f:27:18:5f:9c:27:ef:ee:a0:83:
27:60:da:4b:86:d2:af:2e:ac:6a:19:d5:ae:5f:9e:95:16:24:
7a:c6:19:7e:4c:21:ef:ad:d6:d3:f1:c3:83:d6:6a:d4:9a:27:
44:84:f2:bf:34:74:2f:25:83:04:4d:94:33:21:16:0c:5f:26:
cc:0e:63:85:b0:79:c3:51:bc:04:9c:46:b5:cf:ad:8e:c5:cc:
12:cb:eb:5c:ed:9a:73:7b:11:80:66:e2:75:59:2f:59:d1:e7:
d9:86:97:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQ4WBT0mV5e1XaGro3NxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0
NGM3ZjcwHhcNMjYwNDE3MDQwMDM3WhcNMjYwNDE4MDQwMDM3WjAzMTEwLwYDVQQD
Eyg1NzcwNjA5NmViY2FjZGE3ZmE1M2Q4MWVmOGZjNmZjNjU0NTY3ZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN0j2J3d9Ea5YzqXgc3B9eDpzWL5
lmHtjuO9oRP9PRUilyYtcTSxB7UeGseV7B2ZuqjrURLRxxYQw4tQ3twoQEb2kMDR
bX5/hGzbhIZStKAUTugCYF3rfluOfLRzpMK9meagvszhM/RfRSfq7MviHZrkpPkM
NqUvI06E3aZTjeYAeSHe3tapVmK3kPCbxFeEgAeZ7jYpEfvAqh7FeziOWPnBA7T1
EU0BNpqdx7Wu8HljFbAXQEyTX9Gsy0uuQkt2wFur2U41WU/2xyFM6tlPojNusp8u
omsE7EloiEox4nZLwkKj5JxCQM6oDxv4Tf6mhVXi6L/ZAGviyRCV4Af77wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdwYJbrys2n+lPYHvj8b8ZUVn51MB8GA1UdIwQY
MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt
OWZkODM2ZThiMzY2LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2
LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFEjx/gW
Wz5aVAP2Eo+XAPc7JASwrKB2OjY2NiFvHDAKa30cM0J6RNxyl2CXvVFw11ioHBOo
aUj8mpwjQ2Nezr+bbmoTwzsXvj6OpaUjw24x3/U4VTgEiAyC4TRYaDyeuafMlVYj
Ua2tPEI4Ro1ozRZmwmtn1Ouveb62EvJJsnVRXAeuMEhwdcMMQ4IX62eHKGj5jj1+
mmI/JxhfnCfv7qCDJ2DaS4bSry6sahnVrl+elRYkesYZfkwh763W0/HDg9Zq1Jon
RITyvzR0LyWDBE2UMyEWDF8mzA5jhbB5w1G8BJxGtc+tjsXMEsvrXO2ac3sRgGbi
dVkvWdHn2YaXLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:28 2026 by rpki-client