Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: CCD35FWVgJ75H/Rf/5hx5zx7iD5TuB/7jkIXycy8eIU=
Subject key identifier: 6F:E5:86:1C:5A:B0:07:C0:1F:2E:CB:E1:9A:2F:0C:FC:AA:0F:7A:1F
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 019D277278D70636AFE82AC07B0942E936FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 16CF
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: mZ3yZoefT3ZVJ4MiAMF+8v/G8b0OITOU+eUoX4CZ3tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:78:d7:06:36:af:e8:2a:c0:7b:09:42:e9:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=6fe5861c5ab007c01f2ecbe19a2f0cfcaa0f7a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:40:c7:89:00:48:59:21:4f:d3:eb:02:16:
91:d0:40:84:0c:55:41:f1:62:71:fc:10:27:dc:4c:
cf:eb:14:48:f9:87:00:85:31:fc:45:99:7f:83:1b:
14:14:e7:79:d6:40:e9:16:18:a2:7a:bd:96:74:2b:
f8:85:4c:66:b2:a7:e0:e7:95:10:e7:88:09:45:15:
c6:ed:49:c7:e6:b5:d0:87:b2:74:b0:01:ac:7b:a2:
05:ad:0e:ea:60:01:75:31:0b:76:9a:5e:0a:c9:1a:
f9:1b:ea:bd:51:48:6e:63:a0:a4:58:f0:98:2e:89:
23:40:08:82:b5:ba:e4:e8:3c:96:8e:f0:ba:f1:57:
e0:13:f1:41:17:00:32:42:fb:9f:42:a3:36:c7:d0:
fe:18:00:54:bd:80:74:0f:38:fd:56:99:df:36:54:
83:f3:3c:49:e8:9f:9d:29:8b:21:57:0d:5b:5b:3e:
a1:d8:e2:10:3d:80:e5:53:15:c0:31:9e:20:91:62:
08:89:da:e5:4a:0d:f0:eb:c1:a0:d6:a7:89:4e:62:
e0:23:17:58:4e:1e:40:2e:a5:31:79:cc:58:af:2e:
50:64:e3:be:3a:80:49:3a:ce:92:b4:20:a1:4d:95:
16:02:9c:5d:75:71:ba:e9:f2:99:2a:4a:cf:9d:23:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:86:1C:5A:B0:07:C0:1F:2E:CB:E1:9A:2F:0C:FC:AA:0F:7A:1F
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ad:2b:f5:16:c3:85:ab:a9:2c:86:74:f0:78:7b:47:75:b9:
f1:b7:77:33:4b:06:60:81:7a:ed:37:0f:ee:78:dc:fd:fb:ed:
d4:a2:2b:bb:49:18:08:46:3d:cf:1b:ce:0f:62:7b:6b:94:99:
a6:d8:ba:66:67:dc:90:6c:04:9d:0f:f3:06:f6:4b:a9:a4:93:
b8:48:d5:a0:a2:fd:b5:ee:45:92:40:8b:74:a2:3b:6b:61:8e:
22:9e:25:c8:6b:d2:8c:f8:0e:55:28:26:45:80:5f:87:49:b1:
35:6f:85:44:08:b5:bc:06:21:8f:ce:66:1a:00:ab:8d:59:20:
34:22:96:ff:ed:23:49:bc:4f:2a:3f:7b:b3:aa:bb:51:02:79:
08:ed:bd:c7:79:bb:90:c9:f0:7c:0b:fa:71:69:5d:4a:2b:7b:
4c:76:f5:da:23:36:2e:bf:f9:7c:b1:3d:7a:03:04:07:08:f2:
bb:5f:45:38:40:ef:f5:a4:c3:01:84:8c:c8:f7:2c:ee:1f:f8:
f3:70:9a:45:1b:bb:2d:cf:4d:ca:d4:77:88:f5:38:9e:48:50:
b3:ef:f2:c7:9e:6a:c0:2c:3a:e4:fe:4a:34:19:66:45:b5:68:
24:0a:21:b3:da:f8:16:f1:c0:f1:87:03:7b:7d:9b:3b:32:11:
b1:1e:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:59 2026 by rpki-client