Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: mTfqbXoPfzYbdj3B7J3UM+lLwPufUC3s5HiUsFOcON0=
Subject key identifier: 21:5F:84:AC:2F:5D:3A:7C:D8:5A:79:E5:02:64:1F:6D:93:F0:60:8A
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019DA37874B0A6F5ED6273FE2F72A145FCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 02:01:13 +0000
Manifest this update: Sun 19 Apr 2026 02:01:13 +0000
Manifest next update: Mon 20 Apr 2026 02:01:13 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: 68udSQGm8C5LMtvUuGjXWOdiajXrMQnXw3dq0TvC6SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:74:b0:a6:f5:ed:62:73:fe:2f:72:a1:45:fc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Apr 19 02:01:13 2026 GMT
Not After : Apr 20 02:01:13 2026 GMT
Subject: CN=215f84ac2f5d3a7cd85a79e502641f6d93f0608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:70:a7:3d:8c:44:74:d3:0a:24:ac:5b:3b:
78:c4:41:20:e1:23:03:71:45:f8:3a:2b:f9:9b:1a:
98:99:0a:d7:4d:45:6b:53:0f:7a:fc:c1:4b:52:24:
63:7e:ed:93:9f:26:83:e8:26:33:b1:84:d4:2d:c1:
ba:af:14:cd:9b:8a:35:79:a1:c4:54:48:01:08:f4:
06:f4:4a:f8:71:8e:1a:06:1e:4f:fd:4c:a7:cd:7a:
41:c3:3d:5f:22:a6:4a:95:b4:b2:cc:46:a4:bb:06:
8a:25:7e:29:46:cb:9e:02:eb:3f:9d:e8:2c:ec:e2:
d7:25:b0:12:77:f9:c4:6c:70:c0:a3:40:d0:9b:15:
df:e5:86:cb:27:fe:2e:bf:2c:a4:2e:15:9e:ad:5a:
20:ab:b4:8c:84:2a:94:27:75:6d:f3:9f:c1:35:3a:
ab:9e:af:bd:0a:b9:4b:e3:25:6a:d2:eb:6b:b3:43:
45:dd:ea:d8:c8:16:4e:6e:57:9b:e3:36:9f:e0:5a:
de:c9:cc:e6:68:26:47:7d:c4:79:7d:1a:98:48:09:
0d:cc:14:83:df:49:83:f0:e2:26:3d:3d:c4:9f:05:
65:d3:54:f4:12:f0:d9:e8:13:00:6e:59:82:7f:73:
6e:d9:78:ab:fc:e8:ed:29:38:e1:7d:e3:13:ef:a7:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:84:AC:2F:5D:3A:7C:D8:5A:79:E5:02:64:1F:6D:93:F0:60:8A
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:4d:31:ba:7c:9a:6c:47:89:93:97:43:6e:da:b4:a0:40:
d2:6c:e9:72:ce:a8:76:19:11:d6:e6:56:53:e0:4c:10:b3:95:
69:3f:fc:de:71:00:9b:42:cb:de:8f:47:fb:70:37:ce:b0:02:
77:3b:ca:48:a7:35:ea:dc:74:58:f6:08:af:60:f2:81:e9:9d:
11:50:fc:a9:e5:e8:e8:78:8b:af:a8:be:42:00:6e:76:47:8d:
ac:75:d8:fb:53:e5:d9:ad:d2:f0:b8:e6:80:30:d5:35:50:11:
d3:aa:73:1d:75:01:f2:19:80:6e:ed:9c:08:b2:41:6c:a4:5c:
0a:33:f8:af:66:09:5b:41:84:78:9e:7c:c3:08:57:7f:df:40:
db:8b:d6:6f:13:1b:c6:36:96:d4:37:2f:65:42:8f:59:5b:b9:
1d:c2:a0:e9:b3:8b:f8:5f:be:82:e3:3d:02:f4:bf:cf:c2:5f:
42:df:13:23:fd:1b:df:07:b8:46:47:99:82:a9:55:ba:e6:6b:
85:0d:d3:00:c1:d1:0a:a4:5d:3d:a3:a9:9b:89:9d:c6:b1:55:
2e:4d:55:76:62:0d:99:4f:d3:f3:67:97:57:62:d8:df:88:ff:
88:0e:2a:9c:b2:e6:42:0d:f2:96:ff:03:f9:9d:82:3f:bf:3c:
e6:bf:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:50 2026 by rpki-client