Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: S+PPSF2aq23SNh6o7zPxbwOHsUWsUjVjx+ISpfOkS0k=
Subject key identifier: E8:C9:B1:74:53:C8:B1:79:D1:3F:F5:53:74:02:DA:DD:3A:AE:72:BA
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019D28BBA794059C8DC72501A0D52544A405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1494
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: TIAPkd2OXZOPrVxHdkxuMuD2Lot8HKMTnYnlholLYCw=)
2: lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa (hash: d0roMsqX9vnomDLuPDxCBkqVZxb8IXHny4aGCS66Mnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a7:94:05:9c:8d:c7:25:01:a0:d5:25:44:a4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=e8c9b17453c8b179d13ff5537402dadd3aae72ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:fd:7b:1a:52:66:49:cf:66:29:aa:2a:82:
28:f4:9b:cd:4b:6a:76:77:70:db:9b:05:24:60:44:
69:fc:ff:d4:c8:25:28:da:b9:0c:fc:f5:0f:41:1d:
64:77:9c:52:90:2a:25:d2:7c:9b:85:d2:7b:52:b0:
01:13:13:a3:4a:ca:e4:eb:67:cb:a0:d1:45:9b:37:
68:e7:c0:0f:9f:f9:e4:f7:c2:6f:d9:ec:ad:3d:6b:
d1:26:19:a7:16:61:bc:2f:61:cf:8d:9a:80:72:f6:
70:36:3a:69:36:41:ef:bc:54:5d:1a:85:1d:8d:63:
2d:33:21:ac:6b:c8:4f:a4:4f:9b:c3:49:7d:2b:57:
1f:0a:fa:b6:45:94:98:d0:94:28:23:22:5d:0d:49:
0a:b3:c8:b1:91:93:c4:5f:47:eb:a8:a5:72:13:b4:
8a:82:db:17:7b:36:dc:cd:5d:2f:4d:3d:86:a6:ea:
1a:2e:53:c6:66:e4:12:40:4e:81:c9:1c:cf:47:41:
29:81:98:a4:70:f4:a6:bd:ff:35:93:03:84:f7:70:
3f:33:12:41:e5:c8:99:ff:b7:c3:43:f8:35:7c:06:
64:83:d4:55:d9:48:bc:83:0c:21:eb:40:22:84:6f:
df:08:7c:a7:ac:5c:9f:91:64:86:91:53:01:03:03:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:B1:74:53:C8:B1:79:D1:3F:F5:53:74:02:DA:DD:3A:AE:72:BA
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:96:1a:ae:3f:a5:3c:86:14:74:2c:ce:5b:04:c4:04:ca:9d:
dd:fd:49:f0:34:75:53:6f:0e:d4:d4:84:81:7a:e4:d9:56:29:
a3:0e:89:e1:56:ff:69:57:23:8d:18:2d:2d:a6:fa:76:9b:5c:
a2:11:9d:71:44:aa:bc:21:b7:fd:de:86:cd:73:f0:0f:7f:28:
cf:4f:42:dd:4f:a0:fc:76:70:e2:b1:fa:69:7d:bc:6c:d2:e5:
20:dd:0d:57:72:70:97:49:8f:f5:09:23:73:14:0b:dd:4f:c4:
88:a9:53:f4:dc:d6:5d:dd:31:20:d5:f5:2e:60:87:b4:96:e6:
14:24:d3:44:99:2e:26:f1:a2:7f:23:bf:d8:1d:5c:f4:c0:89:
17:03:a2:9e:1c:5b:ea:27:19:82:46:21:93:32:43:97:48:3c:
95:67:52:a8:34:8c:66:dd:1b:95:29:96:60:5d:34:b1:45:a2:
cb:c7:d9:cd:d4:2e:20:17:9d:2f:cc:40:91:8c:c4:9d:cb:3e:
23:7e:4d:06:40:57:3f:c9:1e:55:f4:92:eb:cc:ed:29:17:90:
f9:ca:2f:de:44:4e:75:ba:30:a1:9c:af:6b:6c:02:bc:7d:98:
7c:6f:3c:ea:20:8b:1f:a5:85:c2:26:b0:91:6b:dc:ea:4a:50:
3e:a4:1b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6eUBZyNxyUBoNUlRKQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZmQwM2I1ZjM1YjMxN2I0ZDMyZmYxYTRiMmMxN2JiMzc2
YzIxZTEwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
EyhlOGM5YjE3NDUzYzhiMTc5ZDEzZmY1NTM3NDAyZGFkZDNhYWU3MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUb9expSZknPZimqKoIo9JvNS2p2
d3DbmwUkYERp/P/UyCUo2rkM/PUPQR1kd5xSkCol0nybhdJ7UrABExOjSsrk62fL
oNFFmzdo58APn/nk98Jv2eytPWvRJhmnFmG8L2HPjZqAcvZwNjppNkHvvFRdGoUd
jWMtMyGsa8hPpE+bw0l9K1cfCvq2RZSY0JQoIyJdDUkKs8ixkZPEX0frqKVyE7SK
gtsXezbczV0vTT2GpuoaLlPGZuQSQE6ByRzPR0EpgZikcPSmvf81kwOE93A/MxJB
5ciZ/7fDQ/g1fAZkg9RV2Ui8gwwh60AihG/fCHynrFyfkWSGkVMBAwMkGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjJsXRTyLF50T/1U3QC2t06rnK6MB8GA1UdIwQY
MBaAFJX9A7XzWzF7TTL/GkssF7s3bCHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et
ZDYwZjQ0YTkzNGIxLzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx
LzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5Yarj+l
PIYUdCzOWwTEBMqd3f1J8DR1U28O1NSEgXrk2VYpow6J4Vb/aVcjjRgtLab6dptc
ohGdcUSqvCG3/d6GzXPwD38oz09C3U+g/HZw4rH6aX28bNLlIN0NV3Jwl0mP9Qkj
cxQL3U/EiKlT9NzWXd0xINX1LmCHtJbmFCTTRJkuJvGifyO/2B1c9MCJFwOinhxb
6icZgkYhkzJDl0g8lWdSqDSMZt0blSmWYF00sUWiy8fZzdQuIBedL8xAkYzEncs+
I35NBkBXP8keVfSS68ztKReQ+cov3kROdbowoZyva2wCvH2YfG886iCLH6WFwiaw
kWvc6kpQPqQbsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:58 2026 by rpki-client