Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: lLhidOryLOwA0ii6ntuxM9uehvBBhNzCTGa0znXSSb0=
Subject key identifier: A3:99:D6:A7:A4:E7:33:EB:55:3C:1D:C2:BC:7E:8D:D2:A6:FC:86:98
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 019D29CDB2E0DA02DE85DD9A32B489166FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: geYG7jgB_IZyvx4sV17jbEgt41M.roa (hash: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: eVZ+OvAk6vzsqdm8Wl1ajbn+wtHHJ0GC+H/f8wDO22U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b2:e0:da:02:de:85:dd:9a:32:b4:89:16:6f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=a399d6a7a4e733eb553c1dc2bc7e8dd2a6fc8698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:fa:5d:99:58:53:39:c4:1b:17:03:3e:ae:
3a:1c:1d:4c:33:eb:80:f4:7c:69:6f:15:ae:72:fb:
68:94:bb:f6:8c:40:3e:58:54:66:b1:3e:59:69:07:
bf:51:25:c9:e8:a9:cb:7c:08:de:e3:80:ad:56:db:
fb:e4:33:7d:22:a5:ac:9b:8e:2c:dc:49:2e:ba:ce:
39:32:55:10:96:a1:6b:de:78:34:8d:9d:5c:9b:77:
6b:d3:c0:23:40:9e:62:06:c6:1e:bc:25:f7:9a:13:
ba:83:cc:d6:6d:39:1b:03:35:3f:e3:a3:f4:c1:4c:
3c:2c:df:66:95:9d:ed:49:51:51:81:4b:99:36:a8:
56:9f:49:af:4a:36:8b:77:b6:6e:2b:25:03:47:93:
64:86:8a:0a:16:aa:92:c5:20:5f:a2:fd:a5:25:25:
d9:ec:6a:a2:2a:ae:1f:30:04:8e:d1:08:62:70:d1:
31:25:a2:c3:68:33:3b:6d:54:7c:a5:7f:a0:e1:61:
f6:1f:1f:e4:2c:db:7b:13:b1:a5:a9:90:a7:bd:7e:
52:f2:e1:55:5a:c5:e4:02:23:d6:bb:e4:1a:fd:92:
6b:b9:16:cf:c1:60:10:8f:55:51:21:ab:fc:ab:91:
5f:64:72:b0:6a:cb:62:ef:b4:a6:41:cc:63:5e:b4:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:D6:A7:A4:E7:33:EB:55:3C:1D:C2:BC:7E:8D:D2:A6:FC:86:98
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:29:14:c3:4d:03:9d:d9:eb:f4:69:dc:78:72:bc:b5:f7:d6:
a2:e0:0b:e1:4b:d3:97:f2:a9:dc:c8:e1:c0:4a:fc:26:ec:ed:
24:48:a4:8e:c8:44:0f:00:6b:a1:6f:8e:66:ed:9c:6b:43:84:
ba:96:d9:9e:07:c5:ff:7b:f2:a7:e4:ea:b7:3f:94:61:21:2c:
44:c9:af:73:50:64:36:fd:a1:7d:12:30:14:50:07:ef:4e:64:
60:11:c5:b2:f5:09:69:4d:46:96:cf:bb:ba:d3:20:9a:32:b9:
9b:14:5e:15:c8:85:e8:b9:3b:aa:b3:d6:d6:21:2a:49:cc:18:
f1:92:40:7d:bd:1a:b0:9d:84:67:93:7d:7c:e6:f2:86:95:24:
43:5d:7e:b3:cc:bc:9c:b0:b6:e4:8e:90:71:27:a7:ff:e7:4e:
99:cf:57:f1:07:8d:78:b9:8d:77:88:da:1b:b6:7d:04:fd:57:
e5:4a:91:ce:d5:53:ec:e9:7d:2a:e8:b3:53:64:cf:5c:6b:dc:
8b:96:87:23:38:07:08:f5:5e:8e:e8:9d:b4:fd:fb:e8:d0:9d:
7e:76:67:83:5e:2c:8d:62:14:31:71:a1:e3:43:7c:b7:ea:3f:
00:f2:24:ef:bc:22:5d:5c:63:b6:22:31:44:d7:60:b0:a4:11:
5a:0d:41:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzbLg2gLehd2aMrSJFm+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj
ZjkwMTYwHhcNMjYwMzI2MTEwMDM5WhcNMjYwMzI3MTEwMDM5WjAzMTEwLwYDVQQD
EyhhMzk5ZDZhN2E0ZTczM2ViNTUzYzFkYzJiYzdlOGRkMmE2ZmM4Njk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof36XZlYUznEGxcDPq46HB1MM+uA
9HxpbxWucvtolLv2jEA+WFRmsT5ZaQe/USXJ6KnLfAje44CtVtv75DN9IqWsm44s
3Ekuus45MlUQlqFr3ng0jZ1cm3dr08AjQJ5iBsYevCX3mhO6g8zWbTkbAzU/46P0
wUw8LN9mlZ3tSVFRgUuZNqhWn0mvSjaLd7ZuKyUDR5NkhooKFqqSxSBfov2lJSXZ
7GqiKq4fMASO0QhicNExJaLDaDM7bVR8pX+g4WH2Hx/kLNt7E7GlqZCnvX5S8uFV
WsXkAiPWu+Qa/ZJruRbPwWAQj1VRIav8q5FfZHKwasti77SmQcxjXrTxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOZ1qek5zPrVTwdwrx+jdKm/IaYMB8GA1UdIwQY
MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt
YjNjMDFkMWE2Yzg1LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1
LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUikUw00D
ndnr9GnceHK8tffWouAL4UvTl/Kp3MjhwEr8JuztJEikjshEDwBroW+OZu2ca0OE
upbZngfF/3vyp+Tqtz+UYSEsRMmvc1BkNv2hfRIwFFAH705kYBHFsvUJaU1Gls+7
utMgmjK5mxReFciF6Lk7qrPW1iEqScwY8ZJAfb0asJ2EZ5N9fObyhpUkQ11+s8y8
nLC25I6QcSen/+dOmc9X8QeNeLmNd4jaG7Z9BP1X5UqRztVT7Ol9KuizU2TPXGvc
i5aHIzgHCPVejuidtP376NCdfnZng14sjWIUMXGh40N8t+o/APIk77wiXVxjtiIx
RNdgsKQRWg1Bjw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:20 2026 by rpki-client