Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: b4yj/kOFMwnRaJ7wwSPnVPG0bCNRZVc2lBEX+nNoa7M=
Subject key identifier: 4D:4E:BF:8B:FD:72:54:CE:0A:5B:13:0E:A1:D3:4D:BD:34:79:BC:C0
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019E1DC799CE6AE38BDFED29AEA2D4210985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 20:01:20 +0000
Manifest this update: Tue 12 May 2026 20:01:20 +0000
Manifest next update: Wed 13 May 2026 20:01:20 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: ngG/y0sLo88LHUXey5s8iRTZNVdKD+4bKTEE2knEQX8=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:99:ce:6a:e3:8b:df:ed:29:ae:a2:d4:21:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: May 12 20:01:20 2026 GMT
Not After : May 13 20:01:20 2026 GMT
Subject: CN=4d4ebf8bfd7254ce0a5b130ea1d34dbd3479bcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:3b:bf:12:42:c8:42:01:2f:bd:ca:1a:df:
ea:fd:19:26:3e:00:36:90:fb:b9:5f:0f:ce:80:44:
66:78:6c:d0:1a:ae:f4:30:e4:a6:94:0f:a0:41:86:
81:e9:4c:25:53:17:1d:b1:1d:e3:20:9d:8a:78:a8:
55:0e:3f:f7:5a:21:de:03:95:d0:ab:63:e2:5f:20:
aa:3c:b4:32:32:1d:13:8e:21:ed:a7:bf:6f:f3:a8:
11:4a:de:85:fe:01:01:a9:5a:41:a1:73:07:ff:39:
49:d8:3c:09:91:5e:b6:e5:3f:f8:6e:95:8f:05:20:
1b:23:3a:71:41:a1:a2:f6:29:df:bb:97:6b:b2:9b:
ae:ae:91:d5:8c:3a:48:18:2c:3b:5a:d8:ef:fd:17:
35:28:59:75:d8:6a:1f:b0:2a:66:0d:a9:24:96:86:
2a:29:ee:a0:b4:72:4d:db:93:41:e7:48:d2:f1:27:
9e:97:c8:3e:00:0c:bc:a3:2c:d0:06:15:05:94:da:
68:23:cd:57:40:29:1f:0b:72:13:9b:ab:a5:25:49:
af:a7:0b:76:5d:48:46:8f:1b:02:0a:37:55:7a:03:
95:22:a3:c8:80:53:61:ee:e8:76:81:74:2a:14:7c:
4d:c4:9a:33:06:e4:11:35:01:e6:e0:73:af:23:fc:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:BF:8B:FD:72:54:CE:0A:5B:13:0E:A1:D3:4D:BD:34:79:BC:C0
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c4:67:6e:a1:8c:c7:f4:4b:71:0d:90:f0:be:fe:b2:ad:6e:
dc:67:50:ea:7b:5c:38:8d:33:ef:0f:27:02:85:b4:7d:47:f7:
5f:ee:f5:7c:8e:0b:f2:fc:02:8e:e3:fd:84:5a:16:bb:ae:ba:
52:f0:a4:ad:d2:1f:60:ac:3c:4e:55:2d:b4:27:64:f8:37:ba:
a8:80:ee:73:3c:72:48:57:75:08:09:fb:3f:a7:b7:13:b2:21:
bd:38:95:74:9a:07:38:00:84:b3:38:5a:7e:d4:ff:99:71:12:
a1:cf:5e:c4:0f:26:48:9e:1d:33:b0:a2:bb:c9:de:a2:dd:69:
a5:8f:ff:6b:15:cf:cc:73:94:e2:80:7f:5a:8f:db:be:1c:a4:
50:d0:08:d9:6b:02:81:66:fa:c9:3d:cd:ac:b8:02:cf:55:0f:
c8:6a:c3:08:e1:47:f8:5f:9c:84:39:fc:3b:5d:01:7a:c2:c2:
cc:09:84:f9:1a:83:46:53:e1:63:f8:f8:68:a0:e3:6d:f2:e1:
41:ed:41:ff:1e:66:6e:72:17:1e:49:48:c9:30:61:d1:4f:20:
9a:cb:23:d2:4e:51:2d:8c:87:bd:80:84:48:11:c7:95:c5:57:
a3:6e:90:ff:31:9a:f5:d3:3e:a7:ea:ae:cb:4d:28:86:ad:4a:
23:16:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:33 2026 by rpki-client