Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File: lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier: PV2dBQL50wveUD4m9eQOguEp2oA52Q8wp/H400kbhCI=
Subject key identifier: C8:4B:44:2E:FC:78:6D:BD:A2:50:63:48:1E:6D:96:D4:67:74:D4:FE
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019D27DFE3C7971DF74FE05188A75A9D1178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number: 1172
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: 1a1dLCgn1kJY0FXKea_N3JxQipI.roa (hash: PVTdjGDov9zyucujxAXYNAaylN8nwdjnCxU7ESyASlo=)
2: 23BJoNFdDlJ_93-a2ClIHAl6nKA.roa (hash: DjII82sTDDN6cpbOsiwqWIzILpschG7hs7d+wN7zZZY=)
3: D6FTe8il_STcQcjdnoeWKiNIPNY.roa (hash: rjCidIkCg4djppfjyWFn3LvmyFXURyzLrTJKv3zECuQ=)
4: LgBkQm7x65odd5JUqQrzXZBbc7k.roa (hash: A2GqKDmQkAQi37nNTs39AiKN/Rkw4jxRNbekXfrJVdI=)
5: PLDsjI7Wmaq58KIKEGRRN4moVVE.roa (hash: 3wRa5a25r/pnr6Zd/j1/wfiEfAkg172TdyhdPsGElRs=)
6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: /PSbm12G2mTCsiKxcjoY5fkkTZsuO/bLct4QfsfgZ1I=)
7: oiLwHfervifT9Sm9PdiASea6pcg.roa (hash: r+wvISQUd81SjTW6b8Q4lygsEI9jtVQ/lgkqjwdt+h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e3:c7:97:1d:f7:4f:e0:51:88:a7:5a:9d:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=c84b442efc786dbda25063481e6d96d46774d4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:51:c9:a5:f2:ef:67:66:2d:f5:25:bd:e1:
75:eb:ed:07:ee:71:11:bd:e2:5e:2c:40:88:cb:d8:
3b:e7:07:d4:f7:f1:38:c3:83:4b:e2:3e:4c:36:16:
80:51:b1:67:9a:00:16:0d:37:7f:59:5c:e7:65:ed:
27:99:3d:69:66:a3:4a:bb:10:ea:4c:aa:4e:51:0f:
ed:05:b4:58:9d:ef:85:5f:88:aa:cb:42:ab:d7:d8:
bf:d6:6b:21:bf:04:8e:5b:8a:9b:21:79:6f:23:41:
ae:81:b9:78:4e:b3:1f:f7:58:fd:f4:7b:3f:47:aa:
f0:83:9c:9c:d5:dd:42:17:6a:f8:e8:d8:7f:b9:38:
06:c8:35:3a:36:5c:a9:d4:05:3d:92:8e:81:c5:01:
e9:95:d7:f9:94:ec:40:7c:c9:c1:92:06:a1:38:bb:
31:10:84:df:61:69:69:d2:e6:b8:51:20:cc:2e:a8:
a1:f4:04:3c:d8:56:dc:36:29:93:a1:6e:d0:bb:88:
ad:99:25:03:38:c5:99:25:62:f9:9d:c7:f8:cc:72:
86:b1:59:25:37:ea:35:54:37:74:c0:3a:95:3c:c7:
50:08:9a:61:93:53:ec:a3:c4:11:0f:13:3f:2a:46:
89:d7:22:76:8e:9f:dd:b1:28:e6:93:dc:51:66:31:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4B:44:2E:FC:78:6D:BD:A2:50:63:48:1E:6D:96:D4:67:74:D4:FE
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:53:f5:f1:4c:d4:f9:05:a0:3e:0c:89:21:ca:9a:5d:ad:
c2:b6:97:50:f6:7d:92:5a:9d:ed:47:3c:3a:f2:07:4c:a5:33:
a1:e7:df:07:16:1b:da:d9:6a:ca:0a:06:b3:31:ea:09:50:bc:
f2:96:6a:90:7f:e2:51:65:ac:30:76:3e:49:88:47:be:51:eb:
58:6a:dc:e7:78:44:c1:af:54:8d:c8:8c:17:d2:37:58:58:cc:
57:23:c1:5c:ae:74:a3:19:0b:93:86:77:5c:b0:39:18:be:0c:
fc:15:7f:0f:91:4f:04:4e:f4:31:a9:1a:ba:df:a7:0f:5b:ba:
f0:02:f5:e3:58:43:42:e2:7d:98:5e:5b:51:bc:5e:2e:ab:cd:
20:a6:b2:64:ff:24:35:0f:0c:17:34:2e:19:75:ac:dd:7b:eb:
9a:45:9e:6f:db:b4:81:bb:2d:30:3a:9c:7d:26:5a:c6:9c:3b:
4a:9f:e0:68:a9:c3:de:f8:bf:f1:10:85:24:ea:58:19:71:8b:
a3:02:ae:a4:1f:83:04:c4:18:09:67:4d:d9:d3:86:78:09:83:
32:36:b1:53:f3:11:f6:a8:2f:33:1c:d0:57:4d:85:d2:03:f7:
82:a2:ac:08:3e:8e:f0:61:3d:5b:29:6c:8e:93:78:31:46:8c:
b3:81:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:25 2026 by rpki-client