Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: /VMyKMykSDxOUWVX5i6KCp1jNcxMiW5bh2sWp26csd8=
Subject key identifier: 35:B2:33:75:D4:97:8E:83:1A:E8:D6:E4:26:3B:1D:EF:F5:6F:8C:51
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 019D284D83E87C321C96BB12057AB6625AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 13CB
Signing time: Thu 26 Mar 2026 04:01:01 +0000
Manifest this update: Thu 26 Mar 2026 04:01:01 +0000
Manifest next update: Fri 27 Mar 2026 04:01:01 +0000
Files and hashes: 1: 4cyxgKfHx73cxANXfCDuCGGKNgI.roa (hash: JTW79OnrfXB/3TRgMkZzzLj69/ILo3f756ILXg43zmg=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: NfPL/VmdFTp94yj+Kqs5tnkJfVkXgVHsC39UjfCYy8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:83:e8:7c:32:1c:96:bb:12:05:7a:b6:62:5a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Mar 26 04:01:01 2026 GMT
Not After : Mar 27 04:01:01 2026 GMT
Subject: CN=35b23375d4978e831ae8d6e4263b1deff56f8c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:e2:67:1a:58:38:21:c7:1d:ae:a9:ab:6d:
86:b3:fa:5b:1b:d3:b4:9b:12:cc:10:f5:05:0a:97:
be:71:79:63:bf:94:76:30:6b:51:87:39:ce:84:e6:
7b:c6:da:bc:b3:99:8d:df:ae:10:34:e0:03:57:c9:
66:4e:6b:21:d2:47:66:68:7a:e5:00:43:ab:f3:55:
de:0b:e0:78:61:e9:e5:37:72:80:6f:4e:9d:de:a5:
6d:32:c5:2e:21:98:b0:e6:8c:e7:5a:05:d1:08:88:
54:32:0f:36:fb:79:4f:25:02:86:16:38:52:1f:43:
ee:25:ae:ec:4d:c2:6a:3f:f0:d8:d5:55:72:59:24:
56:c6:c2:d5:09:e3:7b:fe:05:f7:18:98:68:0e:80:
72:41:2f:f2:57:9b:a8:68:35:bf:4e:f0:a4:1f:51:
c9:77:82:a4:a7:53:ab:05:fb:0b:19:94:6c:b1:2b:
b5:3b:58:df:ac:8e:3a:75:91:94:d6:e3:e2:fb:41:
ea:06:86:85:b2:1f:7b:56:61:9c:e2:83:4a:35:00:
3d:f0:dc:78:38:99:70:82:16:b1:07:01:22:45:f7:
2f:4d:4d:60:3c:cb:69:c2:e8:e2:12:8e:c2:4f:cb:
f9:92:23:08:f9:b5:23:61:43:6c:c1:c1:e1:09:05:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B2:33:75:D4:97:8E:83:1A:E8:D6:E4:26:3B:1D:EF:F5:6F:8C:51
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:f9:1f:e3:dd:ca:8b:d5:93:d0:7f:5a:c5:55:73:10:4e:
09:97:1e:bc:fb:5e:fe:b0:e6:dc:93:94:82:08:a3:5a:2f:24:
6e:a7:87:5b:c9:f6:53:00:99:a3:4d:2a:9d:ed:d5:d2:ce:97:
5e:f6:ba:e4:94:be:49:f9:47:2e:18:68:0f:14:94:06:6d:fc:
14:1e:e4:4e:72:9e:4f:0b:7f:69:a1:34:46:10:31:57:39:6f:
46:ca:35:36:04:52:37:53:59:db:bc:bd:a2:89:3a:4a:da:5c:
c1:83:dd:b8:1c:88:7b:ac:5d:67:f2:35:c1:a6:26:95:ee:82:
e0:d3:46:49:20:ec:ce:5d:0c:3d:56:3d:17:02:2f:68:02:94:
4d:de:c6:bc:e6:87:1f:f7:54:1e:70:8a:37:c3:ae:9d:f0:48:
60:67:0f:30:d0:50:42:e8:c4:57:4a:37:89:67:94:b2:0a:ae:
de:dd:e1:60:92:94:87:df:c6:28:ab:6e:ba:a3:80:ea:fd:d3:
31:db:c7:a7:1f:65:fe:1e:12:cc:6e:83:31:ce:dc:45:1f:e0:
e6:18:30:64:40:00:2d:55:7a:4a:72:df:99:fc:7a:c6:07:0f:
cf:08:2f:da:d6:8f:38:6b:1c:98:6b:08:12:66:58:75:c7:6b:
e7:79:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:54 2026 by rpki-client