Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
File: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft (raw, json)
Hash identifier: ZNAsD7IHJCAPm5bMVio2LNRLpiXJjSnAog9YMXsmGpM=
Subject key identifier: FD:CD:51:17:22:83:CA:14:62:C9:B3:3B:19:E2:0A:49:2A:28:E4:EA
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 019D273B4425CDF0D850E762B311587555C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:28 +0000
Manifest this update: Wed 25 Mar 2026 23:01:28 +0000
Manifest next update: Thu 26 Mar 2026 23:01:28 +0000
Files and hashes: 1: NMR7KZn1Z_LDb0FIsWed94Of3O8.roa (hash: UuPG/G90OEoV3EyjWzry/XA+lmqTIoigWKSMDTb4YCw=)
2: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl (hash: DtcyZ8vKWDkdqpoB2pEGRee9tup1L/YB9omyobjsxlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:44:25:cd:f0:d8:50:e7:62:b3:11:58:75:55:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Mar 25 23:01:28 2026 GMT
Not After : Mar 26 23:01:28 2026 GMT
Subject: CN=fdcd51172283ca1462c9b33b19e20a492a28e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:40:3b:d2:7f:16:95:fa:e5:6f:06:75:9e:
41:7c:66:ca:fb:f4:30:09:f4:35:9d:85:0c:f0:7d:
a5:9a:b1:09:58:ec:99:82:2a:d6:75:38:92:d1:cf:
b4:c1:5f:8a:5c:f9:d7:ed:6f:55:17:b2:9a:8d:8f:
ec:be:77:c2:35:4d:02:72:99:b9:2a:11:e4:a5:9b:
ae:77:40:7c:6e:d3:a5:16:d5:6a:c5:c7:0a:35:3a:
1d:55:cf:bc:aa:c6:22:aa:33:33:e8:3d:42:74:48:
7f:b8:f2:e7:83:7a:02:33:b4:67:fd:a3:9d:f7:96:
19:18:15:50:b5:e2:eb:ee:1e:f8:46:09:c9:af:02:
43:1d:b4:0c:f8:74:34:81:17:62:b0:2f:25:f9:ce:
51:68:a1:2c:4f:c6:63:dd:84:fd:b8:a1:e8:a0:dc:
a7:0e:6c:74:f5:ea:68:b3:b3:1f:85:e7:7c:ea:5a:
5b:a5:53:db:d8:36:ed:28:1a:0b:cc:0b:f4:e0:fd:
42:30:8c:1a:15:22:58:69:43:fd:3e:56:5e:9c:e5:
8a:62:9d:92:ee:92:f4:cf:03:c5:9d:ac:a3:64:04:
ca:dc:23:7f:f4:93:ed:86:48:85:83:5c:a1:a6:07:
a8:57:a3:24:31:4d:d3:b7:38:30:08:1d:e6:67:b1:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:51:17:22:83:CA:14:62:C9:B3:3B:19:E2:0A:49:2A:28:E4:EA
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bc:8f:00:49:ba:48:56:8b:45:53:e5:26:6c:a4:b1:0e:49:
06:1a:b3:bd:46:01:86:e6:03:28:4c:37:64:1b:b4:37:ee:e7:
61:0b:40:65:66:45:f4:a5:12:63:f2:7d:3d:4d:c6:af:13:0e:
00:ae:fd:c1:b2:dc:e3:1f:8e:22:51:6b:d7:a8:50:bb:c9:fd:
2e:ea:f1:1b:1f:50:ef:9e:47:2b:78:7e:c7:93:f0:99:7e:0e:
06:00:e3:99:fc:fc:42:9e:01:bf:6d:32:6a:a4:98:85:d7:1d:
24:1a:7d:d9:55:d1:f3:eb:ed:11:e3:3a:a1:ea:09:83:68:a3:
c9:fc:fd:1d:77:4f:7d:91:3b:1e:1d:53:56:0b:1c:b8:f3:88:
a4:22:a5:e8:35:ec:6c:30:78:2b:2c:ab:99:86:25:db:b8:19:
06:4b:4f:41:7d:ca:99:42:69:92:9f:ef:f9:9d:58:b9:d0:00:
62:da:6a:f6:cf:31:ad:32:18:1a:7e:ed:9f:21:6d:30:f1:b7:
20:ca:5a:15:82:fd:9c:b3:a6:27:3a:5a:48:c1:d9:74:83:3f:
d4:dc:87:b2:23:33:97:6c:60:75:82:c2:a9:ae:0a:9a:c5:f8:
5f:ed:c6:78:fb:ac:43:6b:1b:8f:ac:2d:26:55:df:93:dc:bc:
a4:e4:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:39 2026 by rpki-client