Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: DqApqEnhkZVtdcBrAv1CQOwSOOzYKQKn0MDrG5o6jpc=
Subject key identifier: 7D:A8:B6:A9:68:1B:1B:73:D4:39:EA:01:9B:43:CE:5B:16:AB:00:6B
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019D2960A60923476362E7935F9B36383F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0CF4
Signing time: Thu 26 Mar 2026 09:01:32 +0000
Manifest this update: Thu 26 Mar 2026 09:01:32 +0000
Manifest next update: Fri 27 Mar 2026 09:01:32 +0000
Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: FOI8hbhGNykgoQtsviNcdDvTrxlF7R6PUTp5v10tpYA=)
2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a6:09:23:47:63:62:e7:93:5f:9b:36:38:3f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Mar 26 09:01:32 2026 GMT
Not After : Mar 27 09:01:32 2026 GMT
Subject: CN=7da8b6a9681b1b73d439ea019b43ce5b16ab006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:1c:a2:d3:2f:22:6c:c1:65:d0:a9:fb:7d:
3c:90:06:a5:f6:07:fa:a6:6e:d5:91:0f:e6:fd:ab:
26:cd:eb:1e:fd:c9:0e:1a:d8:24:3f:80:75:9b:1c:
03:22:a3:f1:45:a1:34:ce:d0:1e:d1:2d:8d:31:a6:
bf:d9:bb:58:59:09:ea:00:08:65:36:08:6f:78:5a:
bb:18:b3:33:68:3e:73:55:de:4b:0c:86:61:63:f6:
48:a5:cc:94:ca:44:15:36:80:f5:4e:3e:55:95:4f:
c2:c5:1e:30:6f:62:8c:82:ac:88:b6:19:5d:af:15:
0c:3c:0d:1a:96:1c:9a:74:d5:a3:e9:45:68:3d:3f:
e0:16:52:b1:d3:d8:f7:c8:4f:a5:42:f9:c4:27:c1:
f0:c0:cb:13:5f:30:7e:1a:90:63:4d:c9:77:6f:94:
f1:5f:ad:60:9b:cf:af:6f:9b:94:2e:72:c8:9f:f2:
1d:0f:fa:cd:df:04:9e:5c:12:07:5c:89:1d:12:56:
24:27:75:96:c1:39:74:f2:dc:09:a3:d1:f6:6c:1a:
5b:66:70:87:f6:a0:b5:31:85:f2:da:5c:b9:07:05:
52:01:cf:90:ae:ea:4e:ab:56:2a:16:ab:15:1a:f3:
23:cd:6d:10:bb:69:d7:ee:29:50:b2:b9:93:14:aa:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:B6:A9:68:1B:1B:73:D4:39:EA:01:9B:43:CE:5B:16:AB:00:6B
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:53:fb:bb:6e:59:c6:35:76:17:49:64:d1:3b:9b:44:7c:ac:
7c:60:f5:23:8f:fe:7b:00:2e:07:33:6c:a2:12:3c:1d:79:af:
d6:53:42:5b:e7:13:58:82:19:a7:02:3f:30:a6:5a:56:46:e6:
65:67:6d:cc:0f:75:b6:9b:2a:00:d4:57:45:d3:1c:1d:f2:64:
0a:e6:6b:99:3b:ca:cb:14:02:da:6c:e5:73:6a:24:9d:0d:ac:
be:25:dd:19:b4:21:c1:68:7b:28:35:e1:c4:7a:52:4c:fe:3b:
a4:31:4e:b4:05:94:b5:52:88:ac:04:08:e9:5d:aa:48:89:89:
09:dd:f2:c4:5e:eb:dc:b4:1b:60:ee:cc:a8:08:d5:69:37:30:
e4:b9:30:59:18:2a:30:fc:08:0c:d7:33:13:88:e6:fa:bf:17:
3b:5e:24:e4:07:b6:f9:4c:2d:e3:2f:59:25:db:6c:77:71:42:
a6:7c:ad:ba:7b:1c:79:58:ed:ec:31:0b:fa:a7:86:7b:15:13:
3e:a7:2a:24:6b:a6:4c:14:b6:74:d1:ab:da:b7:b0:53:d6:ab:
92:10:96:c4:25:24:68:85:9b:47:7b:f6:d8:ed:41:64:27:ea:
b1:04:84:5f:30:d8:50:bb:3b:0d:f0:bc:83:49:13:32:f2:81:
1f:a0:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:18 2026 by rpki-client