Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: QzgaeGOt0DQn6T2BG2kiEwVPspihuSWMDQ6UgcHXfV8=
Subject key identifier: BD:1E:64:4F:2B:7D:46:AD:2D:4C:C6:62:CA:63:FB:8A:BE:7A:C0:1C
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 019D28171A2C9DA26916D8D7D19F7B0E90B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 172E
Signing time: Thu 26 Mar 2026 03:01:35 +0000
Manifest this update: Thu 26 Mar 2026 03:01:35 +0000
Manifest next update: Fri 27 Mar 2026 03:01:35 +0000
Files and hashes: 1: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: 4qrgQjRg9sqSi60echR0M2l1wXs0S8vFG8mFBriMHK8=)
2: mc0V-dqblb2LS7X-Me9ToDZupDo.roa (hash: TgiXuLIZXRQWoQtj5JAJxLB0Ph8I4D6iEUTij0gXzCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:1a:2c:9d:a2:69:16:d8:d7:d1:9f:7b:0e:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Mar 26 03:01:35 2026 GMT
Not After : Mar 27 03:01:35 2026 GMT
Subject: CN=bd1e644f2b7d46ad2d4cc662ca63fb8abe7ac01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:ca:df:69:0d:81:c9:2e:92:5c:06:fe:1d:
3a:1c:c2:cf:98:60:c5:bb:95:ad:ba:b7:a5:79:e8:
7c:c2:54:d6:81:a9:67:ca:64:5b:c0:a5:ce:b3:a8:
99:45:b9:90:1a:2d:4a:03:bf:7b:60:72:8f:a0:79:
4e:f2:b9:06:dc:83:60:bf:0b:c0:dc:ea:f1:67:a5:
07:e6:ee:23:3e:3f:a4:ad:f6:a3:ca:64:9e:97:f1:
b3:c7:e5:69:8f:9f:dc:c5:fa:4d:89:0a:6c:44:87:
de:4c:9a:c3:15:3e:38:15:87:04:d9:54:a9:bf:a6:
1c:49:01:d6:61:22:3d:35:83:a2:a2:db:e2:cf:b1:
c3:2d:9a:24:69:b5:f6:7c:cc:a9:89:01:b7:b2:19:
ff:7d:8a:fa:df:30:73:44:85:96:db:02:f1:33:d1:
ad:0e:27:64:a2:c8:16:59:b6:dd:0c:82:db:45:47:
7c:78:21:84:20:ef:f1:e6:99:23:98:ee:7f:c2:ce:
4e:43:26:41:d4:f6:d0:d6:df:ba:2b:e8:a4:0f:0e:
80:96:b5:94:ac:ac:ca:86:61:52:62:ad:5b:c1:4f:
6b:5f:c1:72:1f:00:ac:be:7c:6b:bf:f0:7b:57:97:
b9:63:16:0d:b5:8a:4b:bc:dc:b0:cf:2d:5c:72:63:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:64:4F:2B:7D:46:AD:2D:4C:C6:62:CA:63:FB:8A:BE:7A:C0:1C
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:bf:77:03:13:f8:bf:07:8b:af:b6:a7:f6:35:18:1f:96:
b3:b6:83:5e:b7:84:f7:dc:6d:a6:22:d0:a8:30:01:49:15:48:
a9:97:3e:51:28:61:da:e4:f4:f0:fc:10:6c:37:c6:6a:8d:f6:
ac:5a:08:eb:1a:42:0a:0d:65:89:9f:ab:a5:c3:5e:38:3b:6a:
6e:fa:eb:8e:72:fe:44:6c:8f:b6:00:6c:6e:ff:e8:6d:9b:cf:
4f:2e:56:5c:64:3e:e4:23:03:a6:fd:43:b9:f1:8f:70:7f:b2:
8a:79:15:f9:02:90:3f:fd:0e:57:f2:89:c6:af:8a:53:07:90:
d3:dd:67:25:20:7f:69:62:ac:f0:e5:df:6d:9c:0d:81:e2:cd:
7f:7e:75:c7:f8:0d:a7:3e:33:bc:7f:02:7d:55:9e:0f:c9:65:
b4:a8:b4:ba:37:da:8d:e1:08:d4:9c:aa:ba:64:87:4e:0c:67:
dd:f1:3e:64:ec:3e:e6:e9:6c:c0:d9:d9:01:ce:44:12:66:5b:
df:e3:43:bb:e6:28:81:fd:92:45:60:42:32:0b:a2:44:28:fd:
7b:e7:5f:f2:4c:71:a1:65:b4:b1:27:6d:4e:99:47:6f:c4:85:
2e:10:35:1e:55:f0:27:90:ec:0f:d8:83:5b:c3:b6:86:06:fa:
0f:40:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:18 2026 by rpki-client