Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: 3QWV5rKLeYNxMVCUBPafHjnnPh3CwAuwy5kxftymMoc=
Subject key identifier: EE:5B:BD:B2:F3:02:A2:AF:10:B9:72:C8:B1:47:02:7C:3C:8B:7A:36
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 019D27A88D078D0A8D31D57E825B8FE43125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 03A4
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: AyXn/yS+tzZ9M2N98MhgBRbKQywnpFYbs17Ht/b0YwI=)
5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8d:07:8d:0a:8d:31:d5:7e:82:5b:8f:e4:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=ee5bbdb2f302a2af10b972c8b147027c3c8b7a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:05:95:c4:6a:e0:5c:5c:bc:d0:47:b1:2e:
45:81:3f:7a:77:63:45:28:bf:e6:30:85:97:de:9c:
a7:65:5e:03:2d:3a:ce:9c:6c:5d:11:96:27:76:83:
91:b1:73:85:18:14:d5:63:74:33:40:3d:99:11:62:
0d:14:45:5e:24:f6:02:b3:ef:20:04:96:5c:84:25:
b4:bb:1b:eb:24:5e:75:3d:27:e1:a6:6d:2f:7c:a4:
f2:ed:3c:f4:ba:f3:f1:71:b0:34:1a:7f:fe:e0:9b:
9d:39:28:75:f2:39:f9:21:9e:72:75:48:5b:bc:3f:
c7:e2:95:08:00:d4:d9:f1:b1:d7:04:26:cf:ce:9b:
af:d5:c0:fc:e5:0f:2e:ef:19:55:a4:2f:5d:1f:94:
b2:63:6d:db:8a:56:3e:1a:aa:86:65:9b:3d:0f:8f:
45:24:89:46:47:e1:91:12:a9:3f:2d:94:27:4c:70:
b1:71:db:07:35:bf:22:2c:ac:60:75:6d:33:27:7e:
32:ff:01:1c:52:63:d3:12:1d:4e:2b:37:4a:1f:d7:
ea:b1:39:82:7b:8c:70:4d:35:a7:50:56:05:2b:1e:
f9:24:31:b1:8b:5d:6a:b3:f8:d4:7a:23:63:52:dc:
f1:ce:3a:12:46:3a:1e:6d:8d:71:d5:cf:33:ad:f3:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:BD:B2:F3:02:A2:AF:10:B9:72:C8:B1:47:02:7C:3C:8B:7A:36
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:eb:f9:d0:17:fe:02:58:eb:5d:7d:70:b5:91:c7:a5:f3:
34:c7:72:3c:4f:06:66:8d:06:ee:36:18:77:64:dc:94:23:0f:
19:e0:02:45:8c:c3:ef:cf:27:d7:68:98:af:87:1b:ec:ce:a5:
b4:80:ab:5d:10:02:ce:bb:e2:f8:47:87:b9:38:75:c6:90:c9:
ab:ce:b8:d3:71:0a:33:50:77:cf:5a:4c:bc:44:bb:37:ae:86:
a5:75:c6:e5:02:f2:d1:44:27:28:1a:a5:96:77:83:12:8c:15:
6b:c7:d7:fd:b2:0c:a7:11:07:e1:fe:a5:cd:3c:77:d6:63:91:
95:52:ff:a7:0a:44:f5:bb:b4:02:6d:8c:c9:84:f1:f5:71:97:
91:b5:2e:b2:58:6c:01:1c:56:d9:62:68:a0:bc:e6:e4:9e:f4:
37:cb:49:10:cd:45:80:4e:35:cc:51:ad:29:f0:36:ac:a5:28:
91:af:e4:d9:16:ca:d1:c0:35:45:8c:3f:76:94:c2:71:bb:99:
90:70:ab:32:55:34:62:0d:7a:94:a5:83:e9:5c:f0:c4:60:c2:
24:2b:04:5c:7f:d2:93:f9:26:ce:88:7e:00:10:9a:5c:81:4a:
0e:95:d9:d6:56:3b:47:8c:ff:19:d1:61:3e:71:17:fc:6d:fa:
33:da:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:34 2026 by rpki-client