Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File: lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier: st5E45ny396qG7LHfsNM9ik7/EvTUbTdMyMdI4oWM8s=
Subject key identifier: E9:EF:39:13:87:7C:48:0D:19:DD:F9:F2:25:C3:BB:74:4E:31:27:4C
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer: /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial: 019D2704BD48F9B6CF22F9E5166C89ADDA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number: 0708
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: XLjh3HGvLwJ5ZahfqBcj/5NAiVLVVbbq3j0r6OHKA5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bd:48:f9:b6:cf:22:f9:e5:16:6c:89:ad:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=e9ef3913877c480d19ddf9f225c3bb744e31274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:9b:e0:75:0c:10:5f:77:d7:f0:47:1c:d3:
9a:be:0e:14:1a:71:0e:6a:cf:03:04:d4:5b:81:6b:
26:fe:8a:80:b9:59:d5:c2:c1:6f:8a:ae:cf:ac:e9:
8b:70:19:ba:2e:17:e8:d9:75:81:05:e6:e9:d7:c2:
62:58:26:dc:a7:77:8f:bf:6f:c7:54:e9:62:40:6a:
a2:ca:0f:f3:5b:ef:0a:07:37:f2:f2:83:7f:27:8f:
a3:67:3f:a6:f3:6b:1a:63:4d:08:8d:e4:f2:a9:87:
9b:b0:a1:30:c9:73:54:b2:f1:de:f4:eb:b7:dc:7b:
d2:8e:42:52:bf:8a:4b:6e:d3:5a:ed:2c:f8:19:66:
6b:45:cc:16:00:40:59:ae:ea:86:58:d7:0f:ac:07:
25:09:da:7c:08:f7:c5:3a:83:6c:39:1e:9c:ea:38:
8c:04:4c:58:ec:d0:39:6a:77:64:76:7b:51:5a:91:
2a:18:98:e4:62:7f:fe:83:f8:3d:a5:10:8e:f7:cf:
77:bd:4f:58:64:46:11:f3:67:23:19:30:fe:fc:b9:
24:7d:ed:b0:e8:c0:95:47:0d:13:38:21:a1:3c:d4:
ec:53:e6:1b:b9:9b:1a:ac:50:3a:d3:ac:81:4b:cf:
de:9e:62:2b:c3:78:dc:91:42:94:1a:45:99:75:f2:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:39:13:87:7C:48:0D:19:DD:F9:F2:25:C3:BB:74:4E:31:27:4C
X509v3 Authority Key Identifier:
keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:47:d7:a6:be:fa:c3:9b:0f:46:51:da:2f:ca:41:ec:fe:4c:
0b:33:12:74:68:58:26:e6:d5:73:4a:86:fd:35:87:4a:b8:5e:
ac:f8:92:13:37:f7:9e:1c:a2:e5:cf:ca:ee:09:92:a9:34:22:
8d:5a:f1:58:7b:17:a2:e7:a5:89:5c:08:23:78:23:5d:db:a8:
31:29:ae:fa:4b:fe:5e:32:0e:b6:4f:e2:5f:ee:39:a4:4d:7a:
14:23:8a:96:66:94:61:f0:31:ac:9e:11:f4:4c:85:5f:f6:cd:
5f:b5:f4:34:c3:03:2b:09:fa:3b:43:e3:37:11:3d:72:f3:5e:
b1:71:10:d7:93:70:c6:1f:be:68:43:ba:bf:6f:96:fb:3d:5e:
18:d3:32:58:1c:4f:f4:55:1e:23:92:5c:01:e2:7f:50:c4:9b:
61:e6:6b:7c:2b:70:3f:66:6f:33:ec:0c:f4:1f:ac:f5:fe:43:
87:48:80:30:d8:6e:82:20:51:85:1b:c6:c3:84:a3:10:35:2f:
13:29:d5:c4:2d:66:47:c4:db:6a:48:36:5b:d1:e9:43:d1:41:
17:df:ca:fe:99:a1:6a:58:c8:63:9e:2a:1f:39:a3:ef:a8:0a:
11:f6:7a:b1:6f:9f:f2:72:13:90:1e:9e:ec:3e:71:b0:6a:b5:
e3:2d:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:15 2026 by rpki-client