Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: OAzB3qizXgu/P9CmaEj8K8VDmj76/iFvwMIcTzdigXo=
Subject key identifier: 6A:7C:AC:ED:A1:42:92:5F:64:EB:9C:79:FC:A0:48:59:79:BB:41:5C
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 019D2A72AA1D02AB77847F88CD1958B64B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 159B
Signing time: Thu 26 Mar 2026 14:00:50 +0000
Manifest this update: Thu 26 Mar 2026 14:00:50 +0000
Manifest next update: Fri 27 Mar 2026 14:00:50 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: 2hp39WRhEk19qadiuslg+bGb6+MQ0r0BWAvI+vM9JcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:aa:1d:02:ab:77:84:7f:88:cd:19:58:b6:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Mar 26 14:00:50 2026 GMT
Not After : Mar 27 14:00:50 2026 GMT
Subject: CN=6a7caceda142925f64eb9c79fca0485979bb415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:04:80:b2:77:8c:4a:ec:bd:05:bb:d1:db:
36:75:82:5a:14:a2:4e:bb:16:c7:b0:db:d3:c5:ae:
de:8c:4c:77:cc:61:a6:df:c6:a8:eb:97:bf:d9:54:
d9:2e:b7:e9:20:32:ab:e8:83:3c:c1:21:f6:5e:eb:
58:9d:f3:13:ba:5e:f1:18:c4:d1:21:38:b0:c1:0d:
1c:08:a6:06:8b:6e:ac:ef:a0:98:5a:ed:fa:4d:fe:
33:96:f6:fe:a9:8a:42:75:d9:e9:74:fd:dd:17:6e:
84:51:8a:37:68:8f:26:53:f6:79:af:96:4c:ea:5d:
fa:1e:d3:2e:55:c8:f5:62:77:6b:4f:9d:5a:9d:76:
2c:ba:c2:60:c5:cc:34:c0:91:0c:6e:2a:71:a6:96:
89:98:03:7f:b9:9b:9c:bd:fb:0a:e4:29:6f:56:32:
93:25:a4:27:35:16:e0:e1:aa:ed:d9:20:d0:b2:64:
e3:91:8e:c5:e7:e5:53:7a:fd:5a:54:e1:7d:af:ca:
c0:ae:33:87:49:ac:b8:21:b4:eb:3d:5e:53:f7:7f:
f3:2f:5b:dc:70:aa:6d:b2:df:06:bc:31:6d:52:60:
44:a7:e1:72:7d:2f:55:9d:9e:11:11:91:06:4d:3d:
16:f4:94:4c:7b:ce:e0:28:36:c8:ed:90:ab:e5:fb:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:AC:ED:A1:42:92:5F:64:EB:9C:79:FC:A0:48:59:79:BB:41:5C
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:03:8f:a8:c3:52:a5:54:b2:30:bc:ef:5c:66:58:db:a3:
90:28:1d:65:1b:76:32:8e:02:f5:ad:32:02:fa:10:26:ad:45:
ed:da:63:f1:63:84:c2:80:09:f2:0c:77:4a:c0:75:ca:35:fe:
a2:50:79:c7:c2:1c:63:14:08:40:e3:37:14:ad:b7:88:1d:02:
99:72:38:89:83:d4:79:80:17:b4:1a:76:82:fd:a5:4f:b1:53:
78:6f:9c:67:6b:f6:ee:15:c0:56:cf:ff:53:43:27:2e:a5:25:
b3:7d:b2:58:53:c1:b7:31:05:76:6a:75:e6:02:68:25:26:e7:
ac:3c:0f:16:4d:de:95:2a:9c:7c:24:a0:81:94:fa:a0:d9:ac:
d8:d7:c0:d6:dd:20:da:65:32:ea:46:8e:cb:87:47:a6:1c:fd:
30:fe:c1:e0:24:a0:bc:41:b8:14:b8:df:de:3e:f2:43:db:9b:
77:ce:d2:b3:d6:cb:b4:b5:2a:a4:32:40:3b:bf:40:e7:79:55:
76:fa:a0:75:83:cf:71:a3:03:25:dc:b9:ab:c8:be:fe:03:63:
3a:17:ce:a1:0f:c7:8b:8a:a3:1b:1d:3b:5e:a1:cb:9e:11:e1:
be:1a:9c:a8:f6:a9:3e:18:e9:2a:91:94:13:48:9e:93:25:44:
44:e1:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:59 2026 by rpki-client