Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier: WJ5oUoKIf8y6fR9pBdoEFOqcMoxRTFOVL11XNtkVuSQ=
Subject key identifier: D2:72:96:DD:40:4E:3D:AF:61:5E:34:75:01:E0:11:FA:1D:39:3F:CE
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 019D28F2C7905AAAFC8CA51C891CD6FF6206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 07:01:32 +0000
Manifest this update: Thu 26 Mar 2026 07:01:32 +0000
Manifest next update: Fri 27 Mar 2026 07:01:32 +0000
Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: 8JUJRYRXfswRc6elpmtdlDX5t9xLHHd/XwuxtwGr0gQ=)
2: B_KGcXQ0DuIdghhkI0CttQjaBiY.roa (hash: vrjC5dTNYvxDZ+tn/uxjJ/eLDEIZEWZ3qbbhNWSnHdg=)
3: Fzbx011u7RVOot7S1xohG9qyhz8.roa (hash: d3cH8nlBzo4ygFaoC3yncTUnU72/qEe1SfOmm7ZS+sU=)
4: ZMvIxxGP7qocWq6cskVSeYzqx0o.roa (hash: 3C3h+rU23U84LO7lG7BTF7dtlYQvYrPkr1tHRpjMHRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c7:90:5a:aa:fc:8c:a5:1c:89:1c:d6:ff:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Mar 26 07:01:32 2026 GMT
Not After : Mar 27 07:01:32 2026 GMT
Subject: CN=d27296dd404e3daf615e347501e011fa1d393fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:8c:44:61:f8:bc:c9:0a:c3:42:da:c5:5a:
cc:f7:a8:dd:94:56:8a:39:f5:6a:f9:f8:68:fe:e5:
30:be:9d:81:c6:3f:3a:ce:8f:d4:37:f1:69:6e:94:
3e:58:ae:d5:06:7b:e6:aa:42:75:1e:22:88:cc:ae:
f2:58:28:32:1d:cd:34:f9:de:b6:76:68:3b:cf:26:
d8:96:84:29:3a:1f:67:71:ba:b5:06:60:f8:4e:92:
2d:92:85:76:49:cb:c0:81:77:03:13:27:5a:77:02:
83:aa:c1:96:37:46:64:db:65:69:cc:5f:62:bd:5a:
fa:b3:f5:9e:4f:bb:50:a1:d5:88:ab:32:fc:06:29:
44:5e:55:8c:d7:3f:69:6c:fe:c4:52:58:ef:fe:4d:
e2:43:98:6a:ac:4f:17:26:69:49:ce:28:e3:c6:01:
5f:cc:c2:61:c8:11:42:0c:77:af:91:68:1e:66:ff:
b6:7a:27:0c:4b:f3:fb:53:17:aa:f0:59:2e:31:93:
32:08:6c:0d:de:f6:89:cd:33:ac:3d:91:ff:6e:f3:
85:15:43:90:af:5d:99:03:52:9c:0a:7b:43:c6:e9:
e2:e8:80:e1:c2:f4:74:bc:61:4b:87:18:2f:30:3b:
13:c0:ad:60:13:3c:48:2a:21:64:a4:4c:fe:27:a6:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:72:96:DD:40:4E:3D:AF:61:5E:34:75:01:E0:11:FA:1D:39:3F:CE
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:de:de:6f:cd:a8:72:6a:a0:47:05:43:a1:0e:9c:40:39:
ed:90:46:6d:ba:07:7a:2d:23:42:fa:ef:18:e8:81:68:e8:15:
09:22:11:de:f0:8b:24:c6:27:fa:6d:9d:a1:ed:90:fe:cc:a4:
7c:26:b7:67:8e:d2:f0:12:60:fa:37:ea:b5:7a:3c:aa:16:46:
de:31:c3:88:19:67:42:c6:5f:5d:2d:d5:4b:32:90:fe:cf:57:
55:5b:0c:2b:95:b5:ab:f4:52:97:e8:53:e3:45:a2:37:55:82:
32:12:b9:c7:4c:ea:31:52:77:46:44:29:d4:18:c9:25:c6:18:
66:d4:77:1f:35:d0:49:67:30:e3:55:64:22:97:43:a5:28:d2:
cf:ae:86:25:c0:43:36:29:53:97:df:3c:34:25:f2:d8:63:a8:
86:27:4d:ab:0a:78:6b:d4:c2:8b:4f:21:c4:bb:6d:1a:97:60:
cc:76:36:14:82:26:cf:50:3c:dc:cd:a8:b7:ce:0d:49:21:ee:
2b:97:ea:24:e3:77:f2:40:a0:26:b9:cd:b0:4e:df:be:82:e4:
d7:f8:b2:6e:a5:b6:30:6f:37:d6:b7:02:8d:55:bd:02:15:da:
34:47:9d:93:7b:93:89:7e:99:ed:4c:e1:67:b3:74:c3:da:71:
6a:d3:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:43 2026 by rpki-client