Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier: okSJusDJYpcMH9uPRL5UTBdERHXX1CniCv5J2qGb/bw=
Subject key identifier: 01:EF:20:4E:1C:A7:B0:0E:5B:FF:8A:14:4E:0B:38:92:64:A5:ED:ED
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 019D25832032756E5D005FDDF9F5D0FE2CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number: 189C
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: 1jBYr9FWsRPu64lYAnK0ta-WBdA.roa (hash: 3LputYmrn0IPDDaA7qSescZ3E0lTXKfvLlqfzkE/kU0=)
2: HpLqibQGspD7I0_UJ2EcgU7t_k0.roa (hash: WDoBuCvl81J2NkEtc2oSPamqpTdUvE0GF3Mfe4I1HBQ=)
3: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: LztYkghgm8O9WDLqJRC8fMAZb7H/D0eikJrKV+J9QHA=)
4: PTD9xAwEKqmx4gmmtDTPK0hTyJw.roa (hash: ovDAPJ84DYuT4dk89ty5XzeA2lvBX0g4FHWlLvwK+L4=)
5: hXW_JJYbDEuARBvQ3ahscidHNa4.roa (hash: vgu1i3fvHneLweEnm2qJqevE9QNy+k15JJYScMlG9SQ=)
6: iAjz_7XGgeyKjKOC5mMhN8Ql2MM.roa (hash: 9fe4RXvq0cI0elK7H6sALndgETw3KtEVWMKky23SlPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:20:32:75:6e:5d:00:5f:dd:f9:f5:d0:fe:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=01ef204e1ca7b00e5bff8a144e0b389264a5eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:9e:37:57:67:05:ed:90:bf:04:5e:c7:cd:
d7:99:6e:3d:39:56:0c:75:f4:c3:af:8f:0e:b6:75:
5f:74:f8:c9:05:1f:05:ba:64:96:2c:66:03:74:ce:
51:56:c0:d9:d2:c5:ba:c2:c7:07:ed:19:28:ef:aa:
bd:9f:e7:19:03:c1:89:d8:f4:38:a7:59:ee:de:07:
48:d5:5b:76:60:dc:02:8c:6f:82:04:5e:1c:af:26:
45:b7:65:72:b6:49:b1:40:ff:80:ab:de:d0:96:09:
24:23:93:31:07:80:8d:04:08:f7:42:fb:c1:82:fd:
62:70:0f:de:44:70:8c:6d:7c:cc:10:8b:c5:7e:6a:
76:f7:c6:96:3f:4f:9e:d9:cf:3d:db:c6:2a:ac:c7:
4d:49:a5:36:e9:ba:78:d9:de:85:4a:c7:32:ad:7f:
b8:8e:e8:5f:c8:80:6a:c1:6c:3d:f0:79:3e:d3:c6:
83:45:15:b0:11:52:0e:aa:dc:d5:a9:c1:3d:58:45:
dc:9a:54:29:92:2e:d9:7b:8a:bc:82:44:b6:f1:32:
2b:b5:57:12:38:15:ff:a0:f1:5e:9b:de:85:2d:33:
ef:96:20:26:c4:8b:eb:98:94:b8:6c:07:64:1d:05:
0f:05:30:16:31:67:4c:52:92:35:06:7f:ac:1d:19:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:20:4E:1C:A7:B0:0E:5B:FF:8A:14:4E:0B:38:92:64:A5:ED:ED
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ff:f9:a1:bb:8f:3a:fd:35:eb:8c:7a:c0:c2:68:00:e2:c3:
db:5c:f8:52:38:6e:25:23:3a:99:36:f0:21:35:7e:ad:87:95:
bf:9d:65:ea:9d:89:e9:80:12:9c:bf:e9:96:07:43:b2:e2:af:
79:ad:e2:93:06:f9:0f:40:6e:82:2b:8f:23:54:49:5d:16:1a:
37:00:9e:45:94:a6:b0:45:9f:ae:b9:7d:2b:9b:1a:30:67:60:
17:b4:f4:b3:57:3a:91:49:bf:71:a4:bc:e6:99:80:76:dc:c9:
3d:ee:d4:ab:53:ce:82:0b:58:42:6d:72:80:4e:c1:3d:59:ce:
da:00:4b:d2:46:40:52:06:2b:96:e8:06:9e:36:60:5e:e8:58:
1e:e5:df:22:35:6e:71:8b:4b:b8:71:e0:b0:4f:32:07:66:9e:
6d:40:a0:c1:b0:ed:c4:15:b8:30:97:0b:dc:04:3e:97:57:d7:
c9:0d:c9:e1:d3:6f:66:18:a8:d0:15:a9:22:99:1b:c9:45:6d:
cc:d6:55:74:80:83:0f:e7:82:c1:1e:ed:da:40:29:04:ba:96:
2a:57:57:6c:ac:50:ec:d4:09:8c:89:fa:f2:95:7e:c4:c0:15:
5a:86:36:7b:74:19:f8:50:f0:f2:94:af:62:c0:a7:7d:78:85:
2c:dd:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:57 2026 by rpki-client