Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: oMfwwJdEzh4xs4RuOf+Y4QCRHqsvItwS7lG+dbEPWQM=
Subject key identifier: FC:AC:CF:90:9A:A1:75:06:3E:E5:17:22:08:96:FA:BC:69:6E:09:6F
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 019D28BB74BE53801DFACAACB3CCC3EF3677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 1828
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: SqT04Isptyde5wXmLVevas1OzSaKuwuYv1kIZiijE/A=)
2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:74:be:53:80:1d:fa:ca:ac:b3:cc:c3:ef:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=fcaccf909aa175063ee517220896fabc696e096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:cb:31:35:1b:e8:cc:0f:bc:6d:d8:25:aa:
c3:8d:7a:ce:84:a4:2c:41:7a:e5:42:0f:05:a4:ea:
67:7a:91:b3:de:17:b4:68:30:fb:63:2f:07:67:a1:
fa:32:48:18:8b:41:d9:b2:91:b2:21:bf:86:4c:35:
ad:8c:8e:d2:6b:2b:54:d3:79:38:7a:3f:da:0b:c9:
6f:88:15:4c:3a:9a:5e:80:93:79:7c:83:1d:50:19:
20:82:84:70:5e:a4:5e:2b:8c:54:86:e5:f8:ae:c6:
08:dd:70:bf:90:c4:73:49:da:8d:25:35:be:5c:24:
22:cb:36:6e:91:d0:5f:9c:b4:a1:ed:71:ae:19:12:
c5:90:23:1b:b6:b9:20:3c:62:8d:49:dc:11:8f:56:
58:d4:68:e6:1f:70:5e:ee:0c:9e:3f:fa:d7:e1:50:
46:c2:41:87:29:0f:4d:67:7b:4e:f5:66:1b:0b:71:
da:cb:9c:03:f0:b3:6a:81:65:49:8c:4a:29:45:fe:
e2:b9:06:69:1a:af:0f:c8:90:10:9b:2b:4f:00:90:
87:3c:23:14:05:9b:06:8d:93:64:ea:fe:8a:40:6b:
9f:1d:a1:68:50:98:81:65:8f:07:77:16:b1:14:e7:
d9:a2:13:09:c6:ef:6f:c0:6d:1f:d6:76:85:06:dd:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:CF:90:9A:A1:75:06:3E:E5:17:22:08:96:FA:BC:69:6E:09:6F
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:a5:66:30:64:39:b3:27:3d:27:a4:0d:b2:69:0d:83:9b:
96:a3:43:c6:2c:2a:e1:32:35:e2:4f:9d:50:d9:42:6c:39:88:
b7:0e:d3:a4:c8:e8:1f:6c:4d:85:64:cc:31:b6:79:fd:63:11:
0f:48:5d:88:e5:95:ca:62:ab:f8:1f:8c:e0:01:4a:61:6b:77:
7e:68:7e:ba:d5:a0:10:c9:97:41:c5:fa:d5:ca:f0:70:b2:b5:
75:41:4b:3a:c2:5d:77:25:5b:e4:71:8e:f4:df:e1:9d:df:6c:
6a:1e:29:d7:74:49:c3:5d:8c:e1:16:7c:9f:96:28:5c:42:b8:
ad:75:75:42:c6:4a:12:41:1c:13:19:5a:9d:ea:5c:f7:eb:45:
40:cf:fe:ef:ab:03:09:55:d4:4f:ea:5b:cf:21:62:d5:73:70:
94:55:a5:f7:68:a0:a4:6c:59:a9:42:3f:d1:2c:89:f6:10:7c:
8f:d9:4c:27:83:45:a5:0b:27:13:c6:65:e5:a8:f8:ff:fa:01:
c4:c5:6b:68:63:e3:a6:7b:d7:8a:32:15:21:90:cd:77:ef:4d:
7d:63:b9:6e:89:7a:f8:7d:df:13:88:2e:ac:a4:14:e6:d5:d7:
1f:d5:56:c8:84:5e:f6:ee:af:06:92:7e:10:aa:37:c7:b3:5e:
d2:a0:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:32 2026 by rpki-client