Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: kP0LdA7aUX/JAPZ14V5UcnRimwILPiMl/g8e6qr3K5s=
Subject key identifier: C0:16:A9:87:42:3A:A0:8B:E7:FC:E9:7E:D3:52:83:32:AE:93:67:49
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 019D2960C56105728483A64E49182B346B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0591
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: 9IHrAt44QyoQXEQYn8yZd1FCGBU.roa (hash: AqcqSMjwHuNGwoWeAKqJtnJMa/jkdc0IN4+ezx8SqwA=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: BmlsctupFUkzEQ7f1YuKIAmIlE++fqnehdHOmdGx1iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c5:61:05:72:84:83:a6:4e:49:18:2b:34:6b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=c016a987423aa08be7fce97ed3528332ae936749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:d8:34:32:d2:9d:92:db:93:e2:cc:e6:50:
1f:f9:cb:34:92:7f:f4:c0:e2:1b:5d:d0:e4:bf:49:
ef:45:aa:0f:05:14:2e:50:5f:cd:aa:30:c8:5f:56:
70:66:fe:17:05:b7:10:e5:3a:60:15:a3:80:fe:69:
db:73:2d:9c:eb:cf:ea:78:93:60:b8:5c:85:de:33:
43:31:c8:81:2a:d2:52:2c:f0:48:70:50:d4:6c:24:
8a:48:0e:03:8a:07:ed:8c:74:2b:7a:1b:10:d0:8a:
dd:5f:18:84:2e:14:49:c8:c2:cd:29:7b:bb:da:71:
c7:af:bf:50:9f:96:20:49:70:a6:bc:94:b8:db:95:
61:cc:f3:2a:ea:76:87:8b:32:6c:4f:aa:a3:79:2c:
7b:71:d0:a0:0d:d3:9c:5b:67:2d:35:86:8e:3e:b0:
64:31:4d:79:09:69:22:01:57:da:ed:9c:81:35:9c:
8f:c1:56:4d:a2:76:8b:f6:29:ba:4e:1e:96:8b:9b:
0d:06:e9:74:bd:42:cd:78:5a:ee:6c:9f:56:f8:9f:
85:91:7b:4c:ae:bb:31:75:13:87:02:42:8c:70:44:
66:5e:46:4e:67:54:f5:a2:d8:56:2b:b7:9f:28:fb:
90:bc:94:81:35:e5:70:63:54:24:a3:cc:57:ff:77:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:A9:87:42:3A:A0:8B:E7:FC:E9:7E:D3:52:83:32:AE:93:67:49
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:52:31:e5:d6:42:20:01:45:f2:54:94:77:f7:cf:5c:34:
b6:c8:fa:ae:6a:6f:e6:b2:07:64:5e:02:6d:78:a8:15:67:6a:
87:bc:af:f7:28:a8:58:10:88:2c:de:ce:bd:8a:44:06:3c:e2:
0f:32:0b:ab:02:0d:3e:3e:9f:8b:ff:25:9c:e9:18:f3:b6:11:
d3:2b:34:fa:57:a1:a1:66:a4:21:55:b2:e6:37:73:bc:8e:92:
98:b1:e0:46:d8:ec:4d:fd:bf:64:69:8b:ed:73:f1:e6:13:ae:
76:15:50:bb:c1:d9:f1:d2:ce:6a:9b:9a:6e:79:ac:f5:29:ef:
c4:ee:e0:8d:8d:c0:5e:90:1e:52:2a:0a:65:b9:23:06:ad:f2:
3c:a8:32:13:b1:7f:76:db:1e:31:55:3c:e0:56:a0:eb:68:a8:
88:fd:65:99:68:11:d1:c6:fc:87:48:b6:a5:fa:c2:6d:3e:cd:
51:28:5d:a9:7b:dc:21:26:6f:d3:f0:e2:5a:9b:e2:d3:62:e3:
cb:96:2a:c8:5c:20:0b:ee:fb:7d:a6:b5:f5:c3:a5:80:3b:f4:
a5:08:cd:63:d6:48:d1:21:88:23:60:af:10:c6:95:66:fc:74:
c2:b3:a2:ba:fd:69:be:23:36:50:a1:e4:0a:a6:38:da:46:27:
7d:85:4d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYMVhBXKEg6ZOSRgrNGsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzk1NWY0YzJjNzE1N2FiYmRiZmU4MDljZjE5NTYwNTk0
OWE2OTgwHhcNMjYwMzI2MDkwMTQxWhcNMjYwMzI3MDkwMTQxWjAzMTEwLwYDVQQD
EyhjMDE2YTk4NzQyM2FhMDhiZTdmY2U5N2VkMzUyODMzMmFlOTM2NzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4jYNDLSnZLbk+LM5lAf+cs0kn/0
wOIbXdDkv0nvRaoPBRQuUF/NqjDIX1ZwZv4XBbcQ5TpgFaOA/mnbcy2c68/qeJNg
uFyF3jNDMciBKtJSLPBIcFDUbCSKSA4DigftjHQrehsQ0IrdXxiELhRJyMLNKXu7
2nHHr79Qn5YgSXCmvJS425VhzPMq6naHizJsT6qjeSx7cdCgDdOcW2ctNYaOPrBk
MU15CWkiAVfa7ZyBNZyPwVZNonaL9im6Th6Wi5sNBul0vULNeFrubJ9W+J+FkXtM
rrsxdROHAkKMcERmXkZOZ1T1othWK7efKPuQvJSBNeVwY1Qko8xX/3e7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAWqYdCOqCL5/zpftNSgzKuk2dJMB8GA1UdIwQY
MBaAFC3JVfTCxxV6u9v+gJzxlWBZSaaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEt
MTE5ODIwYjUyMmFkLzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEtMTE5ODIwYjUyMmFk
LzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARINSMeXW
QiABRfJUlHf3z1w0tsj6rmpv5rIHZF4CbXioFWdqh7yv9yioWBCILN7OvYpEBjzi
DzILqwINPj6fi/8lnOkY87YR0ys0+lehoWakIVWy5jdzvI6SmLHgRtjsTf2/ZGmL
7XPx5hOudhVQu8HZ8dLOapuabnms9SnvxO7gjY3AXpAeUioKZbkjBq3yPKgyE7F/
dtseMVU84Fag62ioiP1lmWgR0cb8h0i2pfrCbT7NUShdqXvcISZv0/DiWpvi02Lj
y5YqyFwgC+77faa19cOlgDv0pQjNY9ZI0SGII2CvEMaVZvx0wrOiuv1pviM2UKHk
CqY42kYnfYVN7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:37 2026 by rpki-client