Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: RnyJMep8/fJAzqK3rEliR4oYHG6+oQjTsAoKamX5AvA=
Subject key identifier: 6C:D3:DA:89:6B:2F:24:BD:08:3A:63:4F:59:1F:59:D8:63:B2:1B:41
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019D28BB9DE5C942CC126687C5D2CF3DEB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: 1-ZahvYxgAa5M_mDA6_2eC-rBenI.roa (hash: 978w808DkY3VDvL0hj5f3PlMqWZxHQFkwmbW19+/jR8=)
2: 7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (hash: uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=)
3: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: g58uOQPNAXvKyGVcSf3zLELAEN1B9pDUoMd4g/cW2Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9d:e5:c9:42:cc:12:66:87:c5:d2:cf:3d:eb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=6cd3da896b2f24bd083a634f591f59d863b21b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:10:d8:01:24:02:ad:79:cc:2e:8c:18:28:
95:e0:c3:c9:98:b4:0f:a2:5a:99:73:3c:5e:7d:a4:
b7:df:ec:a2:da:bb:c8:01:59:7e:b4:74:ad:41:d5:
4d:9d:9a:be:1a:6c:fe:7d:ec:ca:9a:02:78:02:55:
ae:0b:3e:23:74:2f:7b:37:c1:83:85:a2:0a:1d:11:
55:5f:d8:ab:30:fa:ad:09:fe:f2:c6:00:b7:e4:7e:
82:d1:98:40:d5:89:b9:de:8f:79:6e:f7:55:0e:1a:
44:47:80:8c:71:b7:78:20:d4:41:ca:b1:0b:dc:6b:
89:2f:17:14:41:a5:64:c0:ba:ca:0d:48:37:9a:db:
45:e0:3d:1c:4d:72:56:70:58:f2:4e:5c:a9:39:de:
10:88:99:2e:de:cc:ac:b3:ca:cf:87:62:90:f6:c6:
8c:1d:c4:d8:23:f0:1e:f2:4d:6b:50:2f:98:0d:ae:
26:65:90:f0:de:7f:39:bd:c4:33:fb:0a:2b:da:1e:
e6:5b:1d:0a:ac:c7:64:9d:98:6a:a0:ef:34:cd:2f:
f3:ed:e4:26:27:a7:b2:79:98:ec:c4:d7:c5:36:de:
28:25:95:a6:ab:ed:65:4b:9b:84:58:9f:d1:56:57:
31:be:9c:f1:e2:ff:e8:09:d1:37:2b:36:50:85:89:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D3:DA:89:6B:2F:24:BD:08:3A:63:4F:59:1F:59:D8:63:B2:1B:41
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:19:4e:4e:8b:d6:2a:f7:8f:d3:b7:98:06:c3:ea:ce:ae:9e:
ec:e3:35:a6:38:7d:11:31:4d:ef:5e:2f:2a:fe:e4:b6:f0:d7:
07:24:cf:15:20:ac:35:72:0d:31:ff:78:6f:35:15:c8:28:d1:
de:63:f8:a6:1c:15:8c:9f:3f:61:e1:90:66:ea:3c:e9:31:74:
ae:bf:1b:cd:5f:b9:f7:a5:4f:0a:9e:59:81:d3:15:04:2e:e4:
4c:16:be:d8:35:21:f2:43:5b:86:42:ff:9a:e2:11:0e:0e:95:
cd:c8:33:73:2d:56:b4:9b:a4:9e:e7:f3:85:b0:56:c3:02:c4:
0b:c5:5f:49:85:85:78:42:0d:6f:a3:00:19:28:d2:d1:bc:0d:
20:49:d5:32:ee:19:0c:96:55:c1:54:7b:7d:5a:6a:10:38:b1:
03:a7:07:fd:7a:50:c2:fd:d6:ce:ce:f2:14:92:ab:ea:49:26:
e1:14:9d:a0:a6:25:9a:96:1b:f1:bd:20:6c:49:6a:78:29:95:
92:02:10:80:0e:1f:27:a5:69:90:56:bd:b6:c2:d9:7c:f7:8c:
7c:8d:fb:cf:6d:5b:9f:91:ec:89:f0:36:90:de:bd:a6:6a:26:
3e:44:f8:d1:fe:e7:bf:d0:0d:bf:98:d9:b9:8c:aa:3b:29:32:
a6:d3:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:04 2026 by rpki-client