Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: tM3OX/UnxeZmIxq7ZcXGKp2++l7TsU71wucE2HxWVXs=
Subject key identifier: 5B:49:96:B9:C6:40:3B:43:38:91:13:02:5F:B7:BB:A1:0E:FD:EE:AC
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 019D27E0047E5FD31A63E4BC7336E6F777DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 02:01:25 +0000
Manifest this update: Thu 26 Mar 2026 02:01:25 +0000
Manifest next update: Fri 27 Mar 2026 02:01:25 +0000
Files and hashes: 1: 6p89_xCOKbaLA_nTNaPhKFJdz_c.roa (hash: 8QYHiVGLqfMhZfw5m6z2kE4Wp9ZlKeYZXiQifht1XBw=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: UVSWMQ8Mvy+W51EiQicMO8PI+3X+rrn+fpLQLZYrjrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:04:7e:5f:d3:1a:63:e4:bc:73:36:e6:f7:77:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Mar 26 02:01:25 2026 GMT
Not After : Mar 27 02:01:25 2026 GMT
Subject: CN=5b4996b9c6403b43389113025fb7bba10efdeeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:22:5d:62:96:d5:07:70:b6:60:25:0e:6f:
f4:a9:01:73:5e:f1:8e:72:fa:ac:a1:0d:48:37:7d:
44:01:18:2e:8d:0f:18:39:dd:eb:54:67:6b:fa:ad:
fc:ed:91:d5:4e:b1:d4:62:b0:c2:1a:71:71:25:c3:
35:c9:df:26:db:13:66:ff:4f:77:b4:82:6b:c7:50:
e0:ca:6c:f9:26:89:e4:92:d8:d8:96:94:da:0c:d1:
86:3b:f1:68:03:21:c3:79:89:13:c8:57:4f:bd:a4:
ef:0c:57:4a:48:74:a7:d0:27:55:52:b2:cd:ab:2e:
d1:6f:33:86:b7:c9:b1:d3:89:2f:c6:08:70:b6:c4:
50:e1:9c:42:75:cd:59:4a:68:b4:76:bb:c2:6a:61:
38:86:f1:4e:3d:69:d0:6a:c8:c2:84:80:51:44:05:
ce:17:35:0f:c2:22:5b:3c:dc:45:9d:24:42:62:da:
79:49:e0:23:82:b2:c6:18:28:54:4f:fe:9f:3d:ff:
e4:c5:6a:16:ba:37:fa:ee:5e:78:b0:ad:f0:a0:42:
02:aa:30:c0:37:59:b0:74:df:85:51:31:ce:d5:f7:
b7:bd:5f:8c:c4:a7:db:0d:df:8b:16:3f:89:19:15:
4d:b8:43:da:6b:a3:82:29:35:5b:c3:cd:35:fa:8f:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:96:B9:C6:40:3B:43:38:91:13:02:5F:B7:BB:A1:0E:FD:EE:AC
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:21:53:0b:8b:39:94:5c:9b:b3:4d:0a:42:82:55:9e:bd:
1f:1a:52:a8:b1:88:96:aa:e7:47:0a:ce:d3:84:25:8d:eb:9e:
72:32:5e:29:e6:6e:f2:2a:34:97:65:6e:42:1e:19:41:28:12:
34:e2:89:0c:97:f8:d2:e7:2a:9e:ec:a6:e2:ff:0f:30:f2:bb:
ad:a3:0a:fe:f7:cc:8a:b3:0f:4f:97:a4:30:55:df:01:03:2f:
c6:a6:ee:1f:f6:fa:00:16:78:56:39:03:58:ae:e4:95:e0:65:
07:ff:1e:f7:54:28:29:07:05:b3:69:e1:92:8c:10:9e:f5:03:
63:74:b4:c3:ca:a3:47:14:d1:6d:4c:52:0b:a6:83:98:f3:c7:
4e:4f:71:d3:bc:56:db:76:c6:cc:94:b1:b9:4d:ac:a4:47:57:
ef:74:b7:9c:e5:68:30:f3:99:96:d8:c6:0c:dd:75:40:fd:2a:
b6:3f:10:c3:46:b9:ee:f4:03:46:6f:c6:09:5d:34:9b:43:10:
af:3a:49:49:49:01:fc:a9:5e:86:84:83:73:5d:3b:5e:b8:fc:
b2:d0:60:38:83:3a:56:44:69:42:f7:50:be:9b:26:9d:32:c9:
1a:74:f1:a7:1e:d0:f9:a5:33:33:e6:51:76:a7:0e:5d:75:d1:
3a:dd:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:01 2026 by rpki-client