Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: YIeY80GG0O18m/sCW8sGKp0gALWlM/84CcwCMmLCto4=
Subject key identifier: 41:6F:53:37:66:BE:2F:A1:AC:66:DA:DB:C0:F5:E4:D9:82:16:4B:88
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 019D2997700C4D74FD17CE33F27E088961AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 03A5
Signing time: Thu 26 Mar 2026 10:01:23 +0000
Manifest this update: Thu 26 Mar 2026 10:01:23 +0000
Manifest next update: Fri 27 Mar 2026 10:01:23 +0000
Files and hashes: 1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: 0pF3mXnbXPfZAliNXeIKYdT36QCaqCwavz1TfMisnes=)
5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:70:0c:4d:74:fd:17:ce:33:f2:7e:08:89:61:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Mar 26 10:01:23 2026 GMT
Not After : Mar 27 10:01:23 2026 GMT
Subject: CN=416f533766be2fa1ac66dadbc0f5e4d982164b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:db:a5:36:df:bf:cc:96:7d:9f:47:f8:e4:
1b:89:9e:90:08:b9:c9:48:66:d9:a2:9c:16:4e:9b:
f4:10:6c:6e:fd:28:d8:73:2b:21:85:87:54:62:0b:
bd:4a:f7:21:41:03:8a:3a:86:03:42:7f:e9:6b:c7:
99:54:5c:cb:a2:a5:25:15:73:08:a4:8f:32:a1:3f:
7c:75:61:3c:5c:98:1d:b3:06:e5:0b:ab:12:ab:3b:
66:82:01:13:6a:c2:15:7b:65:57:9e:68:34:54:8a:
3e:59:8a:d0:7b:14:0a:92:63:fd:71:4e:e4:18:df:
30:0f:25:b6:4a:c9:50:b0:5e:24:4d:f1:90:3a:f7:
b1:f7:8a:dd:79:7f:4b:21:51:75:c2:4e:ba:47:23:
65:11:3d:89:02:ff:33:26:ec:0d:4c:2d:e3:e6:c0:
60:40:01:55:a5:6b:bb:27:a5:47:78:d2:a8:40:8a:
31:8c:0c:11:ea:c3:f1:78:e3:3b:06:2c:6a:c0:b1:
da:bb:cb:f8:a8:12:36:ec:b9:06:41:21:1f:49:19:
48:6c:61:48:2e:0e:bc:15:5a:38:cd:de:15:59:a2:
f4:df:11:8f:07:2c:5f:52:30:06:25:14:02:79:5c:
74:48:3c:1d:af:16:3d:d6:cb:8e:7e:5c:bb:3d:ab:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:53:37:66:BE:2F:A1:AC:66:DA:DB:C0:F5:E4:D9:82:16:4B:88
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:29:3a:7c:09:9c:80:d3:1f:7c:e9:f9:51:98:bf:d7:05:
5e:1d:bc:ca:83:89:a9:2e:1b:1d:d0:34:61:1c:dd:17:85:ea:
08:e5:94:d1:42:4b:4b:06:ac:7c:7f:e4:24:a7:c3:6a:e0:5d:
9e:e0:e0:8a:4c:75:9a:98:03:d8:aa:07:48:d4:24:c2:42:49:
66:57:b8:61:a5:f1:f5:54:f0:07:a7:c8:46:fe:e2:77:32:48:
57:6f:59:e0:d9:6c:3e:56:d6:0c:89:43:53:6c:a3:6d:c9:07:
e6:88:5e:b2:35:45:e5:dd:12:7e:39:cb:fd:3c:3e:d4:ca:63:
8d:6c:36:76:60:20:6f:34:8f:a3:e2:bf:62:e4:5b:d3:38:02:
9e:c3:48:c6:86:8c:99:75:89:f5:53:45:dd:09:36:5d:11:3e:
3a:41:37:dc:e5:15:b6:b8:0e:a7:42:94:50:86:95:02:b0:ca:
a8:bc:90:4d:f2:5c:78:27:57:ce:6e:05:89:16:4e:f5:f3:11:
02:a5:44:cb:5a:d3:21:97:e6:f6:7e:ed:99:ec:ef:a0:ef:50:
4f:98:d3:ac:96:94:e5:47:30:33:b6:0e:e6:ac:c6:f5:3c:16:
1b:45:ad:a7:eb:af:82:15:fc:23:dd:5e:83:c2:8c:6d:cc:fe:
5d:a0:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:08 2026 by rpki-client