Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: sV8CJw0V5J7zFgfoKsuZUL89cEv2HoDwG2/H+jXMITA=
Subject key identifier: E0:99:34:B3:E9:27:2C:EB:62:98:C2:A8:D4:9B:10:CA:09:67:0E:76
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019D25F146C26F36B7371A6FB2E5A91E1115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:02 +0000
Manifest this update: Wed 25 Mar 2026 17:01:02 +0000
Manifest next update: Thu 26 Mar 2026 17:01:02 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: dDRNAzE80wtKytJWFXfWGdSnkURWYNBV4n3e1LOiUek=)
2: tYHsABD7wqlyFO9X8Yy_-luDgKw.roa (hash: i2ZdarVr8LLRaDGxjRmRFhWtnj6AvxOcMrUABRbNylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:46:c2:6f:36:b7:37:1a:6f:b2:e5:a9:1e:11:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Mar 25 17:01:02 2026 GMT
Not After : Mar 26 17:01:02 2026 GMT
Subject: CN=e09934b3e9272ceb6298c2a8d49b10ca09670e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:36:1b:28:7f:17:f0:b6:aa:78:ce:ed:64:
f0:48:32:5d:be:68:be:19:ca:66:f7:40:91:8f:0d:
58:ab:02:30:14:68:56:ef:83:89:7e:46:6f:19:bf:
35:6e:b3:ea:a2:73:48:13:69:ec:58:b2:00:1c:e2:
f6:db:35:42:49:92:54:9f:b6:42:1b:14:d1:61:25:
5f:29:3c:4a:9a:8b:2e:da:9d:33:1d:4b:21:08:a3:
c8:21:7f:a8:d5:05:4d:f9:f9:2e:ab:c9:bd:ae:4d:
92:ba:38:eb:a9:89:44:c5:15:36:ed:11:6a:d5:23:
b8:d4:e3:b1:d0:2f:96:6f:d8:88:db:77:41:cd:07:
65:41:d8:36:08:ae:a9:14:ad:2f:c2:86:bb:e1:52:
b8:2a:2d:0f:56:59:2b:4b:8b:b8:9f:85:07:7b:aa:
ad:6c:17:32:c5:59:65:77:29:6b:bf:7d:1f:59:71:
60:65:65:ba:c1:fb:37:7a:02:83:d9:ab:b6:fd:96:
71:40:b9:2f:65:97:ac:ec:49:cf:5b:6d:e1:04:84:
ef:98:14:76:7e:24:e4:69:6d:15:03:1e:ed:f0:2e:
e1:50:99:28:26:8c:a9:e1:2e:61:c4:da:0d:65:d6:
40:36:83:bb:72:d2:b6:89:69:97:6c:88:1b:4f:97:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:34:B3:E9:27:2C:EB:62:98:C2:A8:D4:9B:10:CA:09:67:0E:76
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b0:7a:50:83:2d:8b:ad:77:f8:5b:58:f6:22:0e:03:73:d8:
a3:a2:06:c5:24:bd:a3:71:03:d8:b9:ed:01:99:5f:a4:15:b4:
f1:f0:d2:e0:15:b4:65:74:39:e3:59:0f:51:73:36:7b:8c:9d:
f3:85:79:4e:e3:c9:a8:87:78:4c:30:77:e1:70:73:f2:75:d4:
5a:9f:09:0b:97:6d:57:e9:1e:d4:3e:af:1e:f1:ea:12:cb:bf:
f3:b6:93:86:c4:4e:22:1c:0e:6a:66:ae:2b:f1:58:ab:70:e3:
60:54:6d:08:2a:c6:04:65:fc:d5:21:d7:6b:57:43:0f:73:08:
05:52:fb:e5:92:83:d0:11:0e:c8:fd:7b:00:d1:77:d4:4d:d0:
31:3b:d3:74:32:cb:fb:ad:5c:57:ad:e3:fb:e3:f1:5b:4c:df:
ef:a3:84:d3:80:98:1a:0b:04:39:f4:7a:e7:1b:36:45:ba:8a:
f6:7b:49:6e:62:08:fe:c5:2b:ba:c2:4b:8f:ff:80:db:11:04:
68:ad:63:f2:b6:1c:e7:8e:09:ff:73:8b:d8:0e:72:b2:e4:63:
1c:96:51:6b:d9:4f:4c:db:ec:49:85:33:33:44:11:52:a2:da:
07:be:5c:8c:bd:ef:8b:6d:28:2a:fe:4e:bd:f9:80:49:ee:89:
e0:ea:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:21 2026 by rpki-client