Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: ScLZd9AHK+EaeBrNmzHDkroZQc5PsZdTl2VtLJqPCak=
Subject key identifier: EE:33:11:87:BE:1A:91:F7:BF:60:34:B4:B5:AE:1A:58:37:DC:89:C7
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 019D27DF72D8C7B4B137C541EC30062B0B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: 7BMZ0omDPc26s6_MCfCUOwcORjM.roa (hash: QMlG7taSZJAaCj6Bos4CT4Fhxoin+745NGHuOhoUkzE=)
2: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: m5ISZyPWHydkyDJJEoaxtMM/kg3TPdBsYmgppIoQzcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:72:d8:c7:b4:b1:37:c5:41:ec:30:06:2b:0b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=ee331187be1a91f7bf6034b4b5ae1a5837dc89c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:e0:16:43:8d:44:ac:6a:61:79:db:43:c5:
7d:a5:f2:15:fe:c3:f0:5c:62:c8:58:a7:fe:25:89:
f4:5b:84:2d:75:2a:d1:c0:38:a6:b1:a6:9f:9b:b9:
f2:56:af:6b:08:61:1e:b4:c1:b8:cf:dd:0a:bc:1e:
de:8a:ce:fd:d6:82:bf:d2:d6:74:33:d0:f9:1a:4d:
44:d3:e9:96:50:11:d3:ef:b6:96:3b:a1:b0:22:51:
d0:e2:af:87:29:d9:04:f5:fc:cc:fd:62:13:fc:a6:
cf:8e:64:84:42:f7:9a:ac:b2:fa:f1:f7:98:41:c8:
b5:27:8a:d0:5b:2e:70:84:ab:72:53:d0:6f:d4:ec:
80:fb:d3:68:19:fe:ac:ae:5f:ac:ef:3e:e1:be:ab:
28:f0:64:f8:71:da:64:b2:41:a9:4a:f1:a3:58:9a:
3b:84:8c:0c:c7:19:ef:96:49:da:ec:ad:81:cf:55:
c8:a9:63:18:41:de:27:6c:25:d2:80:27:9f:c9:dd:
76:36:a8:fe:0c:d7:95:8e:3e:ab:81:cb:57:fb:76:
b4:28:33:d3:c5:c7:0e:32:b9:83:7d:72:03:32:57:
39:4d:79:c8:59:f6:d1:04:e9:c8:42:a1:00:62:b1:
df:bf:9b:05:51:a8:fa:4f:2b:08:9b:f3:b7:0c:76:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:33:11:87:BE:1A:91:F7:BF:60:34:B4:B5:AE:1A:58:37:DC:89:C7
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:9d:62:23:e1:f8:3c:be:15:75:76:34:b7:af:a9:69:c3:
51:8f:3a:e5:1e:e7:e3:bb:ef:45:b0:e8:a9:31:95:f9:7e:b6:
3f:bf:55:76:bd:9b:4e:77:a8:0e:a0:02:2d:fc:4e:6c:83:13:
ea:ca:45:69:74:ad:9c:87:5a:33:32:67:0c:17:69:78:b1:46:
9a:e1:38:5f:e7:47:7b:b0:8b:46:df:d2:75:1c:66:7c:1a:b9:
19:e5:35:46:ad:1a:5c:6d:98:45:23:56:b5:14:f8:0c:97:80:
da:9f:da:bc:2d:2c:ae:da:b8:8a:ed:fd:b0:df:43:a9:59:b7:
e0:21:ea:06:a7:21:1d:1b:a5:1d:25:66:8b:92:6e:48:f3:c5:
b3:c7:b2:91:38:82:d2:e4:fa:e0:65:25:97:6b:4f:f7:51:aa:
a5:a6:e4:78:a1:22:4a:33:04:e3:92:46:fb:72:93:f8:0b:9f:
16:05:90:93:b5:2a:01:77:60:18:4d:1e:85:6c:57:ee:b9:53:
5c:e9:be:46:31:83:24:d0:34:fa:b9:c2:17:51:3d:da:f5:5a:
d9:34:16:dc:3f:70:b8:e1:ac:ec:eb:b6:67:0f:db:3b:43:1c:
ce:63:b1:53:8c:62:65:d2:75:1d:9d:1f:77:9f:f3:11:d8:a0:
67:69:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:21 2026 by rpki-client