Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: j0M66f5KFwRaVrraswGVzb9Sjf+9xJAB4pKJPHodZc0=
Subject key identifier: 9A:56:D4:15:40:8F:75:9C:DF:DD:B1:B9:5D:82:B6:05:A9:A8:4E:37
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 019D254CD7DB282A33686C62441911D46CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 0F12
Signing time: Wed 25 Mar 2026 14:01:26 +0000
Manifest this update: Wed 25 Mar 2026 14:01:26 +0000
Manifest next update: Thu 26 Mar 2026 14:01:26 +0000
Files and hashes: 1: JyitJqFf_sQZcIwoUYj4wcE-Kng.roa (hash: yAWpwzimbdFio0eZOpdLMpc2d2s+H4IuE70MmKFwzP0=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: MODuXu1DmX79QN4O9DEh0K29mk5CnWa0SoOx76ZVx3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:d7:db:28:2a:33:68:6c:62:44:19:11:d4:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Mar 25 14:01:26 2026 GMT
Not After : Mar 26 14:01:26 2026 GMT
Subject: CN=9a56d415408f759cdfddb1b95d82b605a9a84e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:9a:b5:d1:97:d5:af:6d:af:a9:37:63:06:
79:c2:65:68:c8:a3:18:d0:aa:e3:df:7a:bd:d6:4f:
a5:bc:ef:61:52:f3:94:42:f8:a3:03:c5:af:1d:86:
cf:c6:ba:9d:1f:0d:a5:7c:da:59:3e:14:66:fd:2e:
aa:d3:10:01:fe:fa:7e:92:f6:40:81:d7:16:db:67:
a6:7d:09:e1:51:86:e5:93:48:60:8b:bd:d5:22:dd:
a3:13:fb:b7:e3:e9:32:64:b2:c7:4f:45:04:54:8a:
22:f9:9a:60:53:be:63:18:49:b7:ae:4b:15:1c:ba:
f2:94:89:2d:89:87:7f:aa:66:1b:09:f5:06:8f:00:
85:4a:be:8d:bc:77:10:54:5d:48:16:5c:5b:68:ca:
5a:b7:64:e4:3e:26:a7:f4:84:5f:f8:e1:75:6b:1d:
3a:79:45:f9:72:be:1d:76:dd:c0:38:37:dc:b5:89:
ad:12:c8:1b:e2:ad:3a:87:27:46:47:86:50:62:c5:
79:05:83:30:27:a9:35:99:97:37:b9:2b:e8:da:61:
96:90:c9:b7:1c:65:36:55:1a:7a:f8:44:e4:e0:83:
cb:73:6b:29:fa:8d:fb:3a:bb:b1:bb:40:88:72:08:
69:6c:83:eb:89:12:74:fe:1f:df:99:e7:f8:b1:bb:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:D4:15:40:8F:75:9C:DF:DD:B1:B9:5D:82:B6:05:A9:A8:4E:37
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:32:86:14:e4:2d:af:7b:93:ae:12:a1:d1:72:c6:65:d1:
0f:08:47:1f:ab:a2:ea:e6:d8:03:3f:56:d8:e0:e4:ed:95:80:
72:27:22:a9:4f:fc:6e:f9:d2:95:bd:7d:43:fd:96:60:67:58:
1d:43:92:d6:1e:fb:3c:99:d3:35:21:1d:49:98:64:37:2f:18:
dd:58:f4:f6:53:62:3e:79:78:ad:7f:f9:f6:3d:fe:3e:28:bc:
95:58:51:eb:5c:7e:b5:4b:07:ba:d1:b7:50:c0:0a:af:b8:d1:
ce:56:5b:f5:f3:3b:92:7b:14:38:21:7b:c0:58:12:c2:79:fc:
98:c2:51:4f:fc:c6:41:b8:ca:93:d4:bc:d9:57:70:f2:0b:4a:
30:3b:12:86:62:5b:83:da:a5:3a:27:ab:93:a3:6a:ae:01:87:
2e:8b:4f:96:23:18:b2:ab:0a:f7:68:9a:52:ce:22:68:73:ec:
a3:c9:8f:d4:ec:26:b0:97:f5:6f:41:d6:59:35:bf:a8:6e:71:
2e:63:d2:00:95:8b:1a:c7:00:ff:30:26:2f:19:ff:ca:4d:6e:
f1:e6:68:d0:59:cb:29:70:5c:86:9a:a2:66:79:9c:f7:fb:55:
23:0a:0a:95:73:46:94:98:cc:33:35:e7:70:06:8b:66:46:74:
f8:88:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:01 2026 by rpki-client