Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: oFmEINiWVYZLOsmXfSqOK42zRpx5h5gtimRpgB/tV0w=
Subject key identifier: 3C:CE:57:7A:D0:9E:DD:09:00:CE:F8:0C:35:51:1D:8F:6E:BF:31:F6
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 019D27A90FFF26BCAEFF614B3AC0F3093F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: NUAzeiweOuAdospdZKprFcrpT_A.roa (hash: 1ElfmDWVh8gEsGgcrn15DX/GYQtHYpQEuEeNVWQ/qKA=)
2: eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa (hash: zDufrnp/lRdYw6z5myv4nDWlvesG8imRXgNlxsEXDkk=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: gRcV5QpjX8zczLHQ2Y2/Lm+gMcb/Rd+jtDDnEwtccug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0f:ff:26:bc:ae:ff:61:4b:3a:c0:f3:09:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=3cce577ad09edd0900cef80c35511d8f6ebf31f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:74:74:c0:6a:5e:f8:75:f4:87:8b:3d:a7:
6a:f2:8d:d8:ab:de:86:a3:4e:3b:d0:34:43:33:1b:
b8:2b:f2:04:81:13:c4:9c:33:77:2a:09:cf:85:20:
41:96:ed:d9:c8:dc:e1:7f:2a:f2:ed:95:de:bd:da:
1a:c9:4e:83:f1:e8:5f:1c:4b:18:27:66:62:e3:7f:
8e:e9:70:44:61:b8:97:63:92:77:0b:d1:fd:07:cd:
e8:d9:18:ac:5a:85:29:7c:ed:54:14:85:1c:3d:14:
6e:48:1a:06:a1:d3:22:4a:4a:ae:8f:30:c6:44:e8:
fb:d8:8f:ab:22:1d:b1:2e:46:47:cd:22:35:b5:84:
8f:f4:91:67:13:42:f4:6d:f0:e9:0e:51:ad:66:b0:
3f:f0:f9:ef:1e:73:8a:b4:59:d4:cf:7c:82:fe:4b:
3c:d4:5a:3f:db:1d:7e:ef:dc:23:d9:78:a7:db:2b:
07:9c:de:cb:5b:a6:f9:4e:6d:79:fc:fe:d5:20:23:
ff:f7:f1:e7:b8:20:30:4e:87:cc:35:4f:52:ff:ec:
38:fe:3e:62:a4:03:86:07:8a:a7:31:6f:a1:de:a6:
64:d4:e9:bd:c3:61:6a:49:30:a2:c9:e3:a6:47:4f:
6c:bc:1e:4b:98:2d:9e:1a:fb:d0:08:0a:63:61:2f:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:57:7A:D0:9E:DD:09:00:CE:F8:0C:35:51:1D:8F:6E:BF:31:F6
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:ad:ac:cb:00:b7:57:b7:89:73:e4:19:53:11:17:0e:29:
18:8d:0a:bc:d1:2c:68:09:7a:07:59:8f:ea:97:39:19:9d:9d:
8d:cb:cf:28:61:a3:0e:4e:0f:23:26:3f:d2:e8:57:7a:98:03:
9a:98:c7:1e:00:79:4e:9c:1e:23:8d:63:a2:94:b9:24:b3:89:
2f:08:31:0e:c9:c2:e1:31:31:89:59:2f:d9:b1:86:b8:87:c8:
fa:90:83:62:a4:cb:cf:e7:5e:08:16:57:48:97:f4:ba:84:55:
f6:3a:34:e3:bd:b3:6e:34:2d:d3:14:f9:2c:42:c9:d6:3e:dc:
57:c0:c5:dd:8b:6e:5b:8f:01:ca:cf:6f:06:0c:ee:e7:3d:4c:
c8:0d:5c:07:d5:8a:4b:95:81:fd:a5:f2:36:93:6e:4d:c9:9e:
6a:91:cc:2f:43:f6:21:7e:0c:ed:d9:1b:1f:d2:b7:fc:72:58:
cc:18:a2:3d:3d:45:f0:d4:2a:d7:00:0f:c8:08:57:d5:20:4c:
53:36:c1:c8:6b:23:84:fb:c9:30:08:81:d5:d3:62:7e:29:d1:
1e:21:76:c4:8a:73:27:a7:51:cf:cb:a4:9a:e6:2f:dd:cb:1f:
b4:dd:11:32:be:00:c8:7d:13:dd:30:9d:1c:5a:00:d0:50:ca:
91:41:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:29 2026 by rpki-client