Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: BqNvf6BJeUNbeOF8EJSaGRzkNK89Z1PF01AGY6U28VM=
Subject key identifier: 04:46:99:4B:21:88:15:94:6D:F3:79:34:AA:39:E8:25:F1:B3:3C:FB
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 019D254CDDB17571A664FA3FCBED9EB65F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 14:01:27 +0000
Manifest this update: Wed 25 Mar 2026 14:01:27 +0000
Manifest next update: Thu 26 Mar 2026 14:01:27 +0000
Files and hashes: 1: 226BZyJmLGvxoWLAf4PKwDePW1M.roa (hash: naS4Hl+qEsGHYxRmEuAcqgInMtduGMJYAggaVrJL7yU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: 4GFaoUhNfVhFAHR084mRBGsLkS0WUZZrKRgffT5AZ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:dd:b1:75:71:a6:64:fa:3f:cb:ed:9e:b6:5f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Mar 25 14:01:27 2026 GMT
Not After : Mar 26 14:01:27 2026 GMT
Subject: CN=0446994b218815946df37934aa39e825f1b33cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:41:dd:33:14:e5:e5:98:ef:27:96:03:ea:
67:af:a6:e8:a5:28:8c:35:b1:a4:7b:08:97:41:4f:
06:d1:72:d5:38:c6:3c:47:8b:09:00:72:c1:61:75:
8a:aa:57:33:b8:a1:8d:75:1d:5c:d0:22:8a:d6:87:
7c:31:31:20:f6:d6:21:98:00:08:19:61:e2:a2:51:
bf:5d:49:10:19:27:f6:e8:1a:eb:07:0d:f7:12:3c:
e1:8a:86:35:71:18:75:a4:d7:77:d4:fa:c1:30:24:
f4:5c:9c:3c:ac:18:ee:ef:47:6a:16:93:2f:61:30:
e3:70:ef:25:4b:a8:2c:26:71:a6:80:c1:76:28:f2:
8c:af:34:de:52:a5:0e:a1:32:b9:99:62:cd:9f:8b:
f3:16:f0:ce:88:5c:30:6f:d2:b4:a7:33:76:62:31:
3c:96:ff:46:14:2a:ff:10:48:dc:ca:92:fe:d6:e0:
34:a0:d6:64:e0:e9:fa:96:90:35:c0:18:74:75:36:
21:61:39:d5:46:e4:23:79:af:f4:dd:45:0c:63:2c:
36:1b:cc:36:4e:b9:4b:fe:6a:dc:2c:2c:8e:e2:5a:
d4:b3:7a:f3:aa:8f:62:20:46:06:c4:17:02:d6:24:
e9:d7:79:28:4c:ea:72:4a:a4:47:15:99:3d:e9:ac:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:99:4B:21:88:15:94:6D:F3:79:34:AA:39:E8:25:F1:B3:3C:FB
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:42:41:0c:f4:49:83:12:a4:ed:36:69:80:a8:11:4e:cf:c9:
ad:d5:dc:63:8d:47:bb:42:4e:6c:b6:84:a1:e8:2b:72:c2:74:
7f:18:47:0e:b9:a9:f7:da:6a:8a:d4:d5:58:34:a8:ff:51:22:
59:a1:38:48:76:48:a4:ab:3c:9c:4d:ab:c1:ef:43:92:2f:0c:
98:54:37:51:28:41:60:0b:e8:60:de:2d:f9:b3:5c:09:c8:ff:
e0:53:58:69:10:47:93:f0:6d:a8:28:20:49:f3:8d:cd:f6:09:
1b:a2:34:cf:26:d6:3c:cc:5b:02:3a:03:0c:4f:bf:32:5b:d9:
ee:a1:80:c3:95:d2:2f:53:f1:84:c2:a3:5e:cb:2b:31:70:b0:
ce:5f:69:ef:63:2c:3c:8a:6c:e1:a3:5c:d5:a3:45:9e:28:0a:
ad:df:12:7e:ee:fe:2e:55:35:b8:22:d7:48:dd:0a:ab:22:d0:
3f:fd:a8:d3:9b:8a:1d:1b:7f:cc:c7:5d:aa:40:dd:ea:7b:28:
cb:0b:a8:1a:b9:fd:0d:c7:be:a3:a7:8a:0c:f8:98:d2:2a:34:
f9:bc:d2:1a:6a:cb:90:db:71:50:ae:9b:c3:9a:b0:d3:45:76:
db:9c:73:6f:25:ad:0f:72:d5:4d:26:4d:7a:14:5d:b7:72:39:
28:cb:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:02 2026 by rpki-client