Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: ZLbnGFoUJEt2m5MI91pRe3F8zm2Nc0SkPCGnY5/8ecA=
Subject key identifier: 20:40:47:F3:C9:0C:45:27:69:D2:89:A3:75:BC:EB:F5:E4:C4:28:DE
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019D2695DF511B44CFD30389B962D82DC804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 1J8iJjDshk0K5lYg4l_c2ofYegs.roa (hash: qSMx+hDj/RyqV4hBcH75SbfZI3k3bmyUJ0HCop3PjC0=)
2: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=)
3: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=)
4: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=)
5: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=)
6: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=)
7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: UDmxYIrRDYQscBUi68INBuzs7rrmDa/EAZhsO/W7IsM=)
8: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=)
9: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:df:51:1b:44:cf:d3:03:89:b9:62:d8:2d:c8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=204047f3c90c452769d289a375bcebf5e4c428de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:a0:9a:5f:51:eb:be:86:eb:8c:42:b8:a0:
12:0d:24:39:00:67:a0:f0:ba:6b:86:59:af:93:e9:
b9:c1:d9:85:dd:5f:f6:7e:72:da:6b:cf:15:37:db:
95:9b:34:30:22:ee:db:f5:5a:71:c1:31:cc:78:e0:
cf:ba:09:33:1f:cd:94:a7:21:ec:4f:24:89:23:4a:
73:19:23:78:34:15:56:80:5f:3e:ba:b2:9a:05:f2:
82:5b:bc:f8:10:5c:58:ca:2a:40:9d:3d:56:8a:e5:
b4:fa:03:c5:96:dd:d2:6b:f6:2d:2f:54:31:b9:ec:
2b:35:4c:71:99:3d:c1:fc:f3:40:bb:8a:74:dc:70:
32:b2:e1:3c:77:82:7a:44:a5:2e:f5:e2:fb:3b:b7:
4d:5a:54:d5:6c:95:36:29:b2:64:c6:55:76:4b:97:
29:8d:07:52:13:7f:9a:f5:ce:8a:71:d2:85:3a:e3:
7f:7e:c1:d5:8d:7b:b3:14:8c:e9:8b:06:51:89:ab:
d2:08:46:dd:37:1a:ca:17:ee:b0:62:c6:dd:81:cf:
4d:ba:f2:38:90:f8:52:e4:68:cd:e5:7f:63:87:04:
f6:a5:bc:ba:b9:07:44:cf:00:4a:f7:6f:d1:ae:82:
a5:09:a3:2b:99:c0:f0:12:8a:c2:6f:66:49:58:89:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:40:47:F3:C9:0C:45:27:69:D2:89:A3:75:BC:EB:F5:E4:C4:28:DE
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6d:13:4d:d5:72:78:b5:46:22:3c:67:19:91:e7:b4:6b:d4:
c2:02:93:be:0f:03:2c:c8:00:52:d9:fe:9c:c3:85:28:a3:b0:
1e:1a:93:3b:28:b3:22:1b:99:84:8b:b1:85:b1:0d:49:05:23:
90:7a:86:35:4f:3e:cc:90:99:a5:e8:0a:01:d5:dd:fd:b0:2f:
19:1c:6b:d4:27:35:06:3a:a8:47:6a:ba:12:a6:52:81:97:5b:
45:e0:c9:5a:40:4f:c1:a6:01:54:56:d7:aa:1e:51:3d:6c:38:
cc:7d:46:db:8c:14:d7:da:de:4d:6f:99:a7:a3:ab:96:f3:2e:
78:ff:a8:21:e9:7b:ab:96:f3:57:7a:94:02:57:41:81:df:b4:
3b:f5:cf:03:a3:94:80:af:f3:71:b0:39:af:13:75:d0:07:ec:
01:d9:ac:ae:12:3f:5f:05:01:a9:0b:c3:c7:9d:98:45:fe:63:
af:01:83:55:a2:3f:d9:12:44:6d:f9:fb:79:da:36:5e:4d:e1:
26:76:d2:73:d9:5a:ef:47:24:4e:99:59:25:ff:6d:8a:2f:45:
22:4e:74:c3:31:84:86:7f:06:4b:aa:bf:13:1c:76:38:0c:88:
de:67:8b:73:a0:9c:c4:a8:b7:09:54:f2:b4:0e:fc:47:d2:b3:
28:e0:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:27 2026 by rpki-client