Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: Ovu7H/AJB+gG2EbYDdZS/zjQD2RxinskI4jAe0FDa/0=
Subject key identifier: 4F:DE:7A:92:F1:0C:BB:C3:08:D8:87:DC:D2:F6:87:4B:7F:23:30:8A
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 019D2A3BF7516437E1A182CA10C1EA162684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 13:01:06 +0000
Manifest this update: Thu 26 Mar 2026 13:01:06 +0000
Manifest next update: Fri 27 Mar 2026 13:01:06 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: he+jQAzx229MjOYSD6zjnASyOI23pmYM65eIvKq0zyA=)
2: weY_2856hTe3pr2rRDSeNZrrwGY.roa (hash: AgQxLvovPKe7WQZGV1eUhCzA8gghQ7NklaBXL9qGr3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:f7:51:64:37:e1:a1:82:ca:10:c1:ea:16:26:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Mar 26 13:01:06 2026 GMT
Not After : Mar 27 13:01:06 2026 GMT
Subject: CN=4fde7a92f10cbbc308d887dcd2f6874b7f23308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:e0:e9:95:68:bb:b0:6f:22:68:ed:54:25:
44:86:b2:54:87:cb:c8:a0:87:67:72:ed:83:9e:4a:
7b:a7:fb:06:1d:d4:eb:06:49:1f:5c:45:1b:ba:f1:
43:16:5e:f1:16:6b:db:ff:c1:c1:d6:fc:dc:eb:d5:
86:a7:95:26:25:4b:8d:fb:d2:4e:25:ff:77:33:52:
df:ab:97:d8:89:35:46:ee:54:6a:d8:bd:a2:da:b3:
37:e1:46:08:a5:32:04:88:5d:ec:dc:3a:a5:4a:3c:
db:03:ba:1a:f3:77:9b:b7:48:61:1e:f5:ae:ba:6c:
cd:98:48:c1:61:87:e2:96:42:c9:0d:e8:85:5a:cf:
7f:8b:8a:3e:b9:a8:4b:3d:bb:6e:d0:47:89:fa:9c:
4d:66:98:33:f2:0e:ef:c1:1d:8f:29:af:c3:db:ec:
84:d8:e4:c3:c6:cc:f9:9d:b3:f4:a8:be:26:d3:1b:
19:bd:38:a2:1a:10:dc:3a:04:a6:75:43:aa:ce:90:
f0:6e:21:af:8f:73:8c:70:3e:a6:96:b9:30:91:0f:
05:6d:71:97:23:28:a4:05:ca:1e:13:f3:21:ef:79:
1c:9f:5e:2a:1f:7d:85:48:06:51:63:7b:a7:e5:d0:
e9:14:b3:b9:60:f3:0f:28:0d:3f:82:8c:bc:84:23:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:7A:92:F1:0C:BB:C3:08:D8:87:DC:D2:F6:87:4B:7F:23:30:8A
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:68:7b:89:09:5f:d7:99:6b:0f:3e:7d:36:92:fd:74:fa:d2:
44:2e:20:a9:1d:4d:29:1e:78:d6:e2:ec:5b:41:0c:93:0d:ca:
e9:30:a8:ec:57:12:96:8a:7b:85:be:95:27:2d:32:83:6d:79:
2c:b2:fc:88:5e:fc:42:cf:8a:92:1e:54:10:00:4d:41:3b:10:
99:db:7c:23:82:ec:8f:70:4f:c0:83:91:45:99:4f:70:1e:06:
31:46:4b:91:54:0f:1e:b0:48:dd:0d:d3:94:fb:e9:6e:62:ac:
3d:66:58:cb:fa:e3:c6:9f:b1:35:e5:47:12:d3:19:71:b9:5b:
d9:fb:e2:a9:19:6e:5d:3d:29:aa:52:48:5e:c8:87:2f:5a:ce:
4d:11:76:55:ea:c2:97:2e:d2:42:d5:37:c4:17:d1:90:52:32:
49:d1:45:75:2c:94:92:ef:c4:17:43:28:7a:91:e7:0c:98:4a:
5a:c4:81:f3:35:be:7a:71:c9:b3:42:58:f2:09:22:46:9a:96:
c4:62:e1:1c:13:5c:2a:80:d0:4e:e0:55:42:84:88:9f:07:9e:
f8:ab:cf:c3:34:8a:da:7b:1a:7b:14:39:aa:43:e4:60:53:6d:
87:ec:46:41:e9:45:1f:ad:d7:78:dd:49:16:2f:6a:f9:4a:65:
3a:48:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:21 2026 by rpki-client