Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: LeBlsLTwhttrRQK/0fFaeEhOAk7+c2DKLSIyC8Q5M20=
Subject key identifier: 8E:60:EB:93:4E:9E:FE:95:C9:77:EC:1D:D4:99:69:D0:C5:C5:AE:73
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019D288488DB1344E4A242E26525F65191E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: GJwhWEZSywNWgIpEFZj/RPbO+nLaBzn6dRBBSg6/wCE=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:88:db:13:44:e4:a2:42:e2:65:25:f6:51:91:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=8e60eb934e9efe95c977ec1dd49969d0c5c5ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:52:a1:fb:06:5b:66:85:97:ed:7b:f7:02:
c6:ab:f6:90:ce:6f:0f:50:55:5d:c7:5e:e0:62:5f:
fd:3b:79:c7:96:fb:4f:2a:69:72:f1:db:2b:77:54:
b0:30:59:7d:17:da:67:65:9d:fd:7b:01:b3:11:06:
22:32:4e:86:19:c0:e8:de:bf:ec:d7:ce:fa:77:63:
a2:35:cf:7e:11:3f:70:cb:47:7b:73:e5:fd:25:c2:
04:9a:46:40:f0:a6:1c:c5:d0:14:a5:b7:83:f5:55:
24:08:be:49:5a:c3:34:fa:cc:f9:c7:a3:a4:1b:41:
c5:63:ce:41:6c:69:92:42:83:27:10:f6:73:b9:3c:
c4:28:85:d5:e4:71:15:51:b1:21:b8:55:01:8f:78:
8c:fb:08:dd:5c:0f:0f:c4:c7:7d:75:84:51:ef:51:
e4:e3:1f:63:17:73:02:ba:f9:60:5b:c0:c7:84:38:
b1:cc:06:39:9e:cc:02:18:8d:00:91:07:16:e2:88:
5e:52:0b:63:64:6a:ca:61:f7:41:74:a2:67:81:04:
62:0f:58:11:8c:e6:ff:52:b4:2f:b2:8f:b1:c1:83:
8b:bb:a3:52:b2:df:a7:57:36:9b:55:74:f0:d1:6a:
13:03:22:5f:b8:84:25:d5:43:7f:85:41:e0:a4:bc:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:EB:93:4E:9E:FE:95:C9:77:EC:1D:D4:99:69:D0:C5:C5:AE:73
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:82:25:14:9e:22:a8:cb:15:48:79:25:90:7a:0e:87:ed:
28:d5:0d:bc:1b:ed:f0:de:56:04:d2:3f:2b:e0:6e:8e:a6:09:
5b:d0:77:05:5f:1f:01:d4:c0:8f:09:27:73:ad:a5:38:c6:ef:
98:a5:4c:0e:4f:c4:c5:cb:48:c7:f6:17:39:73:60:7a:ff:5d:
c6:55:31:30:d5:ee:6f:53:ef:ed:ce:d8:2d:20:96:4a:2e:58:
8d:34:f4:97:85:06:a2:af:88:6d:bc:4d:eb:4e:b6:f2:23:fe:
45:44:de:7a:ef:6d:aa:cb:d2:e0:16:ee:5f:19:17:6c:98:c4:
72:92:87:28:cb:7c:ff:1c:ea:80:00:c7:ee:a6:e5:8e:d4:89:
dd:c2:e8:77:74:d7:b3:df:94:b2:81:46:b2:c8:d1:36:91:ba:
11:89:ae:14:90:1b:71:83:a9:fe:1b:4a:64:d4:c6:5b:f4:8b:
be:1e:97:a2:24:29:01:a8:7d:71:b4:68:12:f8:e4:d1:ca:c8:
0f:1d:f1:67:bb:c1:8f:f9:21:69:1e:c0:ac:5f:2f:a2:89:1a:
aa:28:c2:23:30:6c:34:77:42:36:24:bd:8b:40:d9:30:cc:70:
b4:a7:fb:f2:8f:e5:c0:5f:64:ba:53:74:31:82:a4:d1:b9:f0:
cf:b8:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:56 2026 by rpki-client