Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: IPkMJ63Wk6vos50vikswXNHF25kphCysIJh/GP6OQec=
Subject key identifier: 5B:92:2F:A2:26:BB:55:12:6D:D7:27:2A:CE:4C:9F:0B:78:9E:36:93
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019D2696099D4715F4BFB2D5EDCBB305C1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0F13
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: USwT2SeaguMlyEEPFKrGUCTjicc.roa (hash: fLXx8GADpNCNj3rL26EzgEHCDr9VafNfGAWI6je4Vrw=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: TGUKSLe2zQ9uhhq4wrXfWf1+/y5avVUPh8kDl3PlpXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:09:9d:47:15:f4:bf:b2:d5:ed:cb:b3:05:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=5b922fa226bb55126dd7272ace4c9f0b789e3693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:4e:25:47:21:72:ef:d1:47:41:9c:bc:f4:
19:6b:89:bb:d7:6b:a4:42:ef:a3:6a:7f:da:f4:8f:
93:5b:61:01:87:2b:ab:73:13:1f:74:02:77:c1:5f:
6c:dc:71:3a:b6:b8:97:5c:b8:7e:b4:94:39:35:3d:
4f:30:7e:0a:44:f1:90:f2:7f:db:9d:75:0d:d3:5e:
b4:02:8f:8c:18:e8:8e:0a:8e:2c:87:7f:7d:82:a5:
bf:0d:e7:12:22:a4:c2:da:7d:92:78:2e:21:a7:11:
b5:bc:44:76:e2:7c:bb:2a:20:59:77:e3:04:24:90:
39:b9:82:9f:b4:ff:6e:0f:e0:78:05:68:1d:f0:f9:
09:35:7a:d3:f2:4f:af:05:ce:d9:81:5f:12:9e:de:
06:e2:4d:1e:b4:77:0e:23:77:2d:11:d8:d5:fe:b6:
b7:03:9d:a8:50:cc:77:05:c7:9c:96:c8:35:1a:db:
db:8a:8e:41:18:cc:63:d8:19:bd:c0:2b:21:b4:af:
96:a0:3a:8d:a9:c6:f3:a0:79:e2:b9:fe:7c:e1:46:
19:0b:67:a8:e4:c6:cc:68:a8:5d:c1:dd:5b:50:0f:
8c:1e:05:37:2c:85:eb:33:72:20:5d:89:47:f8:27:
6f:cf:f5:a1:ea:60:d6:6e:14:f5:63:d8:d1:14:11:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:2F:A2:26:BB:55:12:6D:D7:27:2A:CE:4C:9F:0B:78:9E:36:93
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:8b:45:84:d1:97:20:60:d0:62:9a:64:85:ac:96:df:88:
05:01:89:a0:18:43:3f:05:a1:f3:46:27:0d:83:01:d6:24:a3:
f4:47:79:57:24:fb:3f:03:5c:22:9a:06:83:e9:a8:f6:f4:28:
9d:40:a9:58:02:f6:58:8a:bf:d9:b9:f8:0b:89:ad:fd:6a:36:
d5:40:ac:88:1b:a6:09:56:0c:97:d8:30:65:4f:e4:58:f4:b6:
08:ca:2d:03:eb:cf:d5:1b:86:67:24:2e:be:23:50:85:bc:4a:
7d:6e:49:26:7e:f8:d3:bf:ce:e2:a5:5f:41:9a:9e:5f:5f:86:
51:bb:47:df:69:86:ff:bb:ca:dc:b3:8d:54:ea:cd:43:95:72:
7b:b1:b6:58:4e:bf:a8:a3:e7:b7:83:30:f2:9b:42:a3:ff:3b:
86:95:0b:d5:14:7f:e1:d2:a5:2d:3b:fb:e8:d2:c3:90:9e:90:
05:14:73:b5:eb:bf:3f:1c:f8:77:90:e1:f6:52:31:cc:16:2d:
82:9f:89:45:bc:47:db:02:a5:9d:c4:37:09:f1:5f:af:27:fd:
89:dd:27:fa:5a:3c:f6:3a:a6:a6:03:d1:03:39:e0:0c:24:10:
7d:bd:d4:d8:57:1d:ed:cd:95:4c:b3:05:60:24:cf:3c:4a:ac:
a4:e5:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:11 2026 by rpki-client