Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: ZjopdzoBj5ONhiJynl4ianmvLjDmB6FsHFU/56WJJyw=
Subject key identifier: D3:D2:F4:0E:6E:F8:F0:08:E3:27:9B:46:25:BE:C1:04:14:0C:E1:06
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 019D27724CA60B8EE0D393295E7D53B4D532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 1841
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: konyG3wRd-9i2JxpDmlDMCcy52k.roa (hash: 86FDIPp0O4UJXQA6vPE/wehrfqe3i/KwXCUD7kRjVEo=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: SE7MuyA+8pwLe9LZM7R3kbftYrFN13jrIeC5+YJq6JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4c:a6:0b:8e:e0:d3:93:29:5e:7d:53:b4:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=d3d2f40e6ef8f008e3279b4625bec104140ce106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:b7:00:6a:d8:00:a7:80:80:5d:97:0d:30:
4e:c8:50:ad:28:d0:f0:3d:64:1d:78:f7:b4:c9:08:
44:31:75:86:32:fd:76:2c:ce:7f:cd:62:39:a6:d1:
4c:73:97:ed:3a:3d:a6:7d:b5:07:5d:6d:66:82:b1:
34:28:b7:fa:e5:2a:85:aa:89:25:b9:a2:3c:75:69:
34:05:2f:fc:f0:df:12:fb:fb:b0:ca:00:1a:69:14:
2b:ae:fd:d1:45:c6:33:8d:34:94:30:70:31:86:32:
b4:ea:06:ea:86:cd:d6:f8:cf:f2:d1:61:32:0b:e7:
85:53:fe:ec:7c:c0:0c:ea:1d:42:5a:14:99:c2:3e:
f2:82:33:af:78:ef:2b:95:83:7e:14:94:ea:e1:0c:
d1:07:f5:11:8f:26:b7:1d:d5:4e:dd:d1:b5:c9:c7:
c7:ca:e2:d2:33:f0:7a:19:72:82:d1:36:90:6e:31:
c1:ef:bb:70:54:56:99:32:df:b1:66:f6:6f:29:94:
fb:cb:f3:6b:03:a5:3b:82:62:a8:a4:f6:9d:6d:7f:
4a:f6:84:2f:5b:4b:5f:99:ea:46:79:18:91:5e:d6:
6a:31:59:8a:0d:b9:ca:54:b4:83:f5:20:80:34:91:
e1:74:c6:d4:8e:13:d4:de:6d:73:61:de:ea:49:ae:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D2:F4:0E:6E:F8:F0:08:E3:27:9B:46:25:BE:C1:04:14:0C:E1:06
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:f0:a6:e3:5f:17:35:81:ac:ac:be:c4:e6:b1:27:97:ee:
6b:29:6e:c1:c8:ee:c8:37:ee:e0:b4:a1:c6:6c:51:76:48:c6:
c7:9d:2f:3d:28:c1:31:42:ea:94:7e:b8:3f:5d:9e:19:03:75:
79:d1:b6:b2:16:46:37:0f:d2:5c:ec:94:02:8f:6e:69:df:3f:
b4:80:00:56:cc:dd:02:2c:8f:2c:9c:9c:79:05:fa:60:be:4b:
b8:2e:b2:c4:a9:6c:23:24:9b:ca:e9:6c:a1:22:70:58:44:1c:
bd:17:15:11:32:c1:bc:f2:e7:07:a3:b8:cb:ee:f4:af:6b:47:
a3:77:be:e3:2c:92:21:6a:b0:32:d5:ab:9d:a6:7e:88:15:8e:
34:42:54:cf:9c:8f:a9:59:74:a2:54:ea:75:9e:a9:48:4e:c2:
56:8b:c8:9e:98:30:89:c1:76:56:b5:c5:4b:df:58:21:39:92:
1d:ca:15:2b:4d:03:f3:38:d4:19:19:6c:7a:f9:24:de:c5:7e:
4d:fb:69:7f:e9:b0:c2:74:81:4a:d1:2d:7c:02:2e:2b:a2:5b:
c1:1d:58:8f:fd:05:79:12:0d:7a:d4:1d:10:5b:32:54:49:cf:
8f:61:2b:65:e5:67:99:f0:db:e3:17:55:c3:5e:73:bb:f1:4a:
60:e0:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:45 2026 by rpki-client