Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier: 7T2xfBuEfrMQjrPNmmoHfQE6mgOKTEwtF0P5i2j5f/Q=
Subject key identifier: C2:B4:C5:8F:3A:7E:AC:61:04:99:BD:2C:93:74:87:C7:E0:4E:B8:AD
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773
Certificate serial: 019D98186BB035D78F60C43D8DE2F814270D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number: 0707
Signing time: Thu 16 Apr 2026 21:00:30 +0000
Manifest this update: Thu 16 Apr 2026 21:00:30 +0000
Manifest next update: Fri 17 Apr 2026 21:00:30 +0000
Files and hashes: 1: B5aZs_fb6H9CA7D2dUNN42FgKrA.roa (hash: vl+jWifF6DSv9Cx+Cj/2gMjcAyX+Gy1sgrTxm4Q+GFs=)
2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: ZCHzLP/ZUMJfXz1wN4IekvBIcBx6L1mRiU68Pjei0B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:6b:b0:35:d7:8f:60:c4:3d:8d:e2:f8:14:27:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514d5a840049d442df377445394df719201a773
Validity
Not Before: Apr 16 21:00:30 2026 GMT
Not After : Apr 17 21:00:30 2026 GMT
Subject: CN=c2b4c58f3a7eac610499bd2c937487c7e04eb8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:e9:1d:46:4d:20:dc:42:5b:88:30:83:75:
77:99:c0:f0:0f:88:b1:cd:ef:56:71:68:5c:dd:9d:
95:28:2f:ae:77:61:c0:77:2c:f8:38:d8:c9:c6:c3:
4f:3c:2d:52:80:39:07:dd:37:ba:bb:7e:a5:13:a0:
c9:2b:cc:8c:b9:95:10:bb:8e:21:a4:f2:e5:aa:12:
02:55:ab:1f:cf:15:fa:02:ef:f4:99:b7:8b:d6:88:
a0:18:63:6b:c0:3f:0b:ae:03:bc:c2:61:6b:a6:d9:
c0:08:08:e9:8b:03:3a:79:ef:e9:2e:70:d8:72:ee:
57:8b:41:b5:12:8f:25:64:ab:d3:96:0d:cf:98:fa:
d3:9f:77:43:47:93:10:b6:bb:0c:6d:22:da:bc:2f:
cc:e1:ae:f8:c3:d2:f7:03:ca:66:a0:3b:33:d1:1a:
13:55:41:4a:70:00:bc:bb:98:e9:07:64:9a:67:bb:
f7:2d:d2:a4:84:54:df:e2:71:b6:56:b2:ed:44:32:
ab:7b:21:2c:af:86:b6:87:7a:14:4d:27:c9:d0:a8:
68:56:2f:61:c3:bf:a8:39:31:eb:80:05:c3:57:25:
95:1b:12:3d:f5:84:e0:a4:41:dd:97:1c:9d:57:db:
6c:76:2f:a6:84:03:88:e5:f9:78:3a:ad:ce:1c:57:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:C5:8F:3A:7E:AC:61:04:99:BD:2C:93:74:87:C7:E0:4E:B8:AD
X509v3 Authority Key Identifier:
keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ff:3c:79:86:15:6f:24:c0:1f:b2:e2:05:38:f6:4d:f0:0f:
1e:eb:87:fa:d7:03:26:46:f5:f4:26:5f:9f:af:e1:23:17:4c:
12:48:44:a9:e2:5a:4f:6f:10:df:d9:04:2d:e6:e1:6e:76:47:
a7:12:01:a9:b8:94:64:ea:14:1a:a6:11:54:d0:a0:4c:0b:4e:
e6:78:fc:95:f9:81:50:74:7d:08:e9:5c:b8:34:d7:a9:d4:15:
45:f8:1b:06:3f:04:bb:99:69:f9:d8:44:fd:fb:09:7e:34:aa:
98:90:08:c4:98:52:bd:93:41:46:d4:6f:21:ba:0e:31:da:96:
d1:87:26:ce:16:a3:3c:68:94:53:68:ab:8d:51:e0:42:be:b6:
46:70:cf:bd:fe:57:a9:8a:54:37:4e:5e:8e:75:54:84:b6:9c:
46:ba:20:c7:2f:fb:c2:75:19:37:2d:a7:41:0b:b6:fb:00:2e:
2b:a9:2c:f6:5a:43:af:1f:27:3d:6a:2b:b2:cd:6c:4d:c3:2c:
b5:22:c3:be:a8:8a:c7:f8:44:92:4e:59:16:56:40:b5:5f:6f:
85:82:d1:be:21:e1:5a:4b:4c:d4:7d:45:9b:15:92:05:2a:c5:
49:54:14:e1:bf:be:38:5b:40:a9:85:6a:13:6b:5b:34:e1:bd:
cb:e0:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:50 2026 by rpki-client