Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: LUouKvnkvMtmPrbD8vnxp/IJ1WQd+4nJWwOtQSvk2uM=
Subject key identifier: 25:13:BF:1D:AC:E7:84:73:5E:6C:46:B9:4D:53:28:FC:07:C4:02:65
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 019D25F13AAB3805A111811EA3650791F1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 1628
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: Jj0jEgN0s0RHQAkO15SajS55C0A.roa (hash: KgQWnB7rByCt2a7NBk1T5VdA/q78Z/cDRW9Jsn2kZXI=)
2: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: GO9YlDlqOwwLfv9zptwDf/p/kcm8oIjcfS2pAuv13bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3a:ab:38:05:a1:11:81:1e:a3:65:07:91:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=2513bf1dace784735e6c46b94d5328fc07c40265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:6e:49:83:14:44:3a:72:b5:9d:56:f0:89:
19:2a:6a:ab:c2:bc:57:73:61:d3:da:5f:52:bd:61:
ac:de:b3:33:a2:6b:8b:3d:87:3a:19:c0:ae:bf:f7:
79:a5:a6:94:69:b8:65:4f:78:ae:cb:5d:f3:93:95:
e6:3c:0e:5b:d4:f3:8f:44:d8:80:f5:f1:23:64:77:
2a:a6:d5:b6:ad:e2:e3:a0:b0:1e:be:5d:14:06:c8:
bc:c8:34:c1:a1:5b:da:24:25:20:10:70:8f:67:b7:
f8:f8:c7:bc:1f:64:59:2c:fa:3b:98:e2:e5:4d:14:
e3:02:cd:b8:3d:f5:41:b1:10:ae:93:8a:d6:35:71:
60:bd:84:24:96:a4:bd:26:b1:ea:9e:3b:ae:5b:5d:
35:32:fd:72:2f:49:6a:b3:c4:5d:b2:0e:33:94:9e:
46:23:bd:46:81:a1:b5:00:17:35:66:43:1d:ce:1a:
e9:95:e8:6e:b3:d3:05:97:82:ec:73:ad:9a:4c:12:
bb:79:bf:fc:a9:1f:7a:7c:55:8b:75:7b:37:db:0e:
c0:5c:1f:5b:54:ad:96:35:6d:70:42:36:82:81:a5:
ba:8a:8a:13:65:70:05:c0:c4:4a:04:16:e0:33:fc:
d9:14:90:65:2b:d9:0f:cb:c9:bf:8c:3a:73:d7:94:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:BF:1D:AC:E7:84:73:5E:6C:46:B9:4D:53:28:FC:07:C4:02:65
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:1d:79:9b:72:32:d2:a1:c6:55:4b:d8:93:0a:13:c2:ec:
f3:95:60:2e:55:7a:99:67:a4:12:ac:55:37:1c:18:c5:8b:7c:
ba:38:a9:6b:63:53:9c:4d:1e:ec:c0:59:95:fb:92:76:15:fe:
00:7a:04:d7:5c:c8:a2:6a:1d:ea:e3:10:1c:a8:1d:ae:6b:92:
aa:d6:1a:30:4c:88:cd:41:01:f8:27:39:50:48:c1:62:4c:19:
75:70:f6:fb:b8:d7:8c:f3:07:79:80:92:70:d5:9a:3d:61:e7:
67:f6:54:3f:67:4d:2e:8d:5b:a9:ab:c3:93:f3:27:ee:cb:12:
83:b6:22:86:39:b2:69:33:8d:f3:ef:d0:b7:41:46:35:e5:5b:
cf:60:f0:11:85:13:f8:85:c4:6d:6d:be:dc:6b:3f:dd:3e:af:
f2:70:5e:e8:92:0c:f6:a2:0b:37:67:99:74:de:1e:a1:5c:68:
c1:6a:bf:4c:f1:c7:d6:08:db:d3:47:13:08:69:62:b8:b1:92:
6d:28:55:b8:3b:8f:84:49:b9:7c:36:69:9d:b7:3b:f4:b7:6f:
93:4b:a4:28:f2:b4:20:15:34:e0:8e:28:1c:fc:54:52:eb:1f:
47:54:5f:3a:ce:b1:11:49:fb:9c:cb:a4:14:71:51:2c:11:9a:
78:76:4f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:32 2026 by rpki-client