Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: q6sZce1eXsvIVJJRMGMXpDcHMpyMYZo3j4iRKbIityc=
Subject key identifier: 56:DC:F8:AA:01:0A:BE:78:F9:E6:F4:30:EB:56:8C:33:A2:0B:37:65
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019D25F121AECB9DA79DBDAB7C02C1FB044B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:00:52 +0000
Manifest this update: Wed 25 Mar 2026 17:00:52 +0000
Manifest next update: Thu 26 Mar 2026 17:00:52 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: oNsBaU1p+drpP3UfAuwi93n4BEFlyeN4aJI1+A/NosI=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:21:ae:cb:9d:a7:9d:bd:ab:7c:02:c1:fb:04:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Mar 25 17:00:52 2026 GMT
Not After : Mar 26 17:00:52 2026 GMT
Subject: CN=56dcf8aa010abe78f9e6f430eb568c33a20b3765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:18:aa:10:02:4e:4a:23:db:45:46:60:8c:
0a:b8:30:cd:ea:66:b2:87:c7:6e:01:e3:9e:7d:13:
34:31:eb:2d:e5:25:0a:ea:db:00:e3:b1:ff:19:d1:
2b:e8:98:2f:90:50:1a:1e:fa:11:3e:90:cb:16:0a:
80:bc:44:d1:51:c4:fd:09:36:be:a7:8c:a7:8b:34:
1d:91:d9:15:8e:61:be:74:1c:4d:3e:93:bb:4c:b0:
2b:bb:10:18:c2:dd:39:5d:6c:70:ae:4c:17:a7:7b:
0f:85:aa:47:81:37:c4:33:95:eb:b8:9c:d6:24:03:
45:56:77:bb:e0:1f:3c:6f:89:b4:4b:96:27:6c:40:
af:a7:fd:51:fa:2c:de:45:e1:a8:e2:18:50:4f:af:
55:d9:bc:6f:94:49:0e:d4:df:5c:f4:86:59:5b:7a:
30:e7:c1:59:a5:83:27:12:83:74:ff:86:bd:ad:fa:
f0:ef:a6:81:11:26:d1:7c:5f:df:e5:3d:c4:ca:56:
62:75:f2:40:14:7e:9f:05:d1:f2:43:ba:9e:c6:0e:
57:78:a1:60:9f:b2:a2:0d:e5:a3:80:b5:3a:e5:f2:
7a:24:77:fb:65:72:ae:7d:2d:70:46:60:f3:9a:4e:
c4:b6:a3:4a:0c:cb:d4:9b:ba:51:48:49:ca:a5:20:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DC:F8:AA:01:0A:BE:78:F9:E6:F4:30:EB:56:8C:33:A2:0B:37:65
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:80:35:cc:dd:73:e8:bf:26:3b:0b:0f:ee:3b:cf:b7:61:b8:
da:0c:10:4d:ef:c6:6c:f7:fe:bc:a6:c6:e0:e8:43:74:75:b0:
fc:7c:d0:d9:18:fb:4d:7f:00:ae:3e:ee:11:10:70:fa:11:be:
c3:7d:53:cd:2a:27:09:14:5d:23:ce:5b:74:03:7f:00:da:4d:
2b:aa:d7:96:72:23:f8:6b:ed:73:5e:4a:b2:a3:ee:6b:c8:ad:
43:55:69:be:e7:b1:89:18:a8:ca:7f:30:86:e8:11:bd:1d:eb:
b4:38:ad:2b:8f:4c:82:73:73:07:06:d1:c8:8f:4f:80:06:96:
65:39:6b:c7:bb:af:1e:1b:cb:58:70:c9:9a:82:03:c0:4c:b4:
8a:ed:1b:54:48:a4:92:0d:ca:de:4a:89:96:ca:04:cd:ff:5b:
40:ef:fc:43:22:5c:d0:a8:b5:0f:70:b7:d6:4a:af:83:97:97:
eb:9f:65:20:b5:0b:d4:50:a3:de:2c:d1:4f:90:64:a5:6a:50:
af:d2:f4:22:fc:af:25:10:73:37:c8:c6:d2:2d:cc:63:f0:5a:
f3:dc:c9:ba:3e:c9:6a:22:3b:5a:9d:80:5b:73:bc:22:ef:c7:
89:d7:28:4e:21:06:ad:ad:bc:4d:c2:5c:ae:df:d7:96:45:a8:
68:91:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:04 2026 by rpki-client