Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: 5N63CgXDUQ6ggSvkAB3igNmWlhdjbu0qdGpVGLyVhXs=
Subject key identifier: 21:29:64:78:98:E3:C8:F3:94:27:B9:4F:9C:13:23:07:8E:DB:BA:B4
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019E1DFEE0C7FA467F3D4E1E647DBB5D8812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1513
Signing time: Tue 12 May 2026 21:01:43 +0000
Manifest this update: Tue 12 May 2026 21:01:43 +0000
Manifest next update: Wed 13 May 2026 21:01:43 +0000
Files and hashes: 1: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: GCT3/TPFcvuTzQtN0Z2QD0oRnE9ZLUZfGDG+Nxt8WCk=)
2: lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa (hash: d0roMsqX9vnomDLuPDxCBkqVZxb8IXHny4aGCS66Mnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:e0:c7:fa:46:7f:3d:4e:1e:64:7d:bb:5d:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: May 12 21:01:43 2026 GMT
Not After : May 13 21:01:43 2026 GMT
Subject: CN=2129647898e3c8f39427b94f9c1323078edbbab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:7e:8f:3b:e1:8c:64:72:a6:a5:e7:44:d1:
54:0c:16:57:89:81:1c:5b:ae:2b:6b:82:3f:ff:27:
ef:1c:6f:f1:88:9d:f5:0f:01:9d:8b:ac:ca:d9:9e:
5c:4e:7a:d0:64:06:f5:6f:6f:4a:10:3f:d4:47:de:
43:e0:35:8e:8c:70:a7:e3:01:46:9a:a6:0c:c3:56:
34:8d:a0:31:b9:27:f8:34:84:2b:0b:db:ed:07:07:
80:78:3c:18:2e:32:6f:f9:a0:33:69:75:4c:36:a0:
ac:e2:e4:fe:1d:5f:14:fc:cf:6a:f9:e0:13:ab:a4:
68:26:2d:ba:df:68:bb:53:f2:6a:71:54:74:12:1b:
c6:01:ba:19:8b:3b:2c:1d:fc:2a:79:58:67:7f:82:
9a:f5:17:80:6a:1d:84:2b:48:88:4b:9d:0d:c1:18:
48:aa:ec:fb:5c:a0:f9:3f:fd:9f:10:87:50:55:b5:
bc:de:41:bb:37:cb:93:d9:4d:90:2a:7b:e8:90:83:
f6:03:88:2b:e0:88:7d:83:2e:ef:3e:09:f6:c7:3f:
3b:b5:03:9f:59:6a:a1:29:f8:95:73:33:bc:1b:04:
4d:4c:82:bc:3c:ec:18:d4:d2:3c:dc:11:7f:19:2c:
84:39:a2:4f:dc:a0:d6:bb:b6:4d:d0:fc:ca:f4:31:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:64:78:98:E3:C8:F3:94:27:B9:4F:9C:13:23:07:8E:DB:BA:B4
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c3:a9:e5:19:85:3e:a5:a5:ca:eb:41:86:17:f8:35:04:41:
4a:4b:c8:d5:4e:7f:c7:be:5a:74:7c:2c:93:f3:2e:c4:14:66:
9a:c2:d9:7a:bb:f6:cb:06:d6:19:61:4f:ac:d3:b4:92:ad:08:
02:02:0f:95:a9:a0:74:05:31:5d:be:9e:ee:e1:c3:c0:d4:3e:
d1:9f:2b:f2:08:97:cd:64:62:b5:77:19:36:04:a7:2e:af:84:
f1:3a:17:24:08:70:99:b9:ec:8f:cd:0e:c0:01:10:c5:7e:2c:
60:d1:82:8d:98:c9:d7:79:b2:36:82:9b:4c:56:15:82:0a:5b:
ae:56:7f:0b:88:6d:6b:56:9d:b0:23:7a:39:1a:a9:ed:6f:9a:
ed:3d:ba:ab:e3:fb:57:05:0a:f1:bb:28:5d:59:0b:03:1e:d1:
c6:aa:31:36:6c:b5:91:27:34:cf:48:02:05:44:e9:83:95:d8:
57:23:0d:99:64:19:7f:93:70:48:7b:f8:3a:a4:98:f3:fd:9a:
10:50:32:4e:ec:75:99:c7:00:14:2c:1c:1f:36:66:d6:c0:6d:
60:14:a6:c7:a9:ce:64:49:16:2a:f4:94:7d:2e:b0:48:42:36:
bd:e7:fb:30:f9:36:28:10:bb:ae:95:74:02:11:15:82:94:2e:
bc:17:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:06 2026 by rpki-client