Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: fJqc7VjoWhl7IeMgTmjt87G1UJ7kF6/f7WvkmhOV6l8=
Subject key identifier: D4:A5:5F:24:E1:C6:66:CB:70:55:F0:ED:16:28:CE:0B:B4:BD:01:6B
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 019D2A724F7ABFE01C9AA93635935BC7C22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 0473
Signing time: Thu 26 Mar 2026 14:00:27 +0000
Manifest this update: Thu 26 Mar 2026 14:00:27 +0000
Manifest next update: Fri 27 Mar 2026 14:00:27 +0000
Files and hashes: 1: 1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa (hash: VqlHGjyV6XrN2/klxM4KjUioPDS5vL2CP/yVnvM9BOI=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: gJBxSbMLnBzNHJj3GYW+XRqICRab5Pr4VAY5uNBLNgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4f:7a:bf:e0:1c:9a:a9:36:35:93:5b:c7:c2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Mar 26 14:00:27 2026 GMT
Not After : Mar 27 14:00:27 2026 GMT
Subject: CN=d4a55f24e1c666cb7055f0ed1628ce0bb4bd016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:2d:67:2d:f1:2f:cd:66:1f:63:15:49:c3:
aa:3e:6a:fc:19:8e:b9:c3:54:a2:29:6a:99:21:2f:
0c:f6:ec:81:cf:27:d2:be:ee:4d:24:16:a6:a7:2c:
ce:c0:49:48:1b:c2:59:7c:b6:85:b5:57:4a:b8:b7:
25:45:c3:89:0d:9a:97:d7:f2:cf:65:42:33:df:7f:
54:7f:c5:a3:51:30:b9:15:fd:cd:a6:9d:62:9f:a5:
f1:fc:6e:e2:6d:f4:b8:7b:fe:50:95:29:a9:f9:23:
41:ed:26:87:6d:74:b4:ee:ef:68:55:bd:ce:ab:af:
83:4b:9e:c4:5d:c8:87:b3:19:41:21:10:83:70:74:
45:2e:7f:02:34:ed:88:cc:1f:81:cb:31:80:31:89:
58:d3:d7:3a:f2:e4:32:07:03:89:d5:68:d0:a7:e6:
77:7e:dc:69:11:60:01:08:80:c0:d2:57:0b:cb:64:
82:59:3a:1f:8a:4d:0c:b1:a8:28:38:50:bf:73:a2:
85:72:37:e4:4a:c3:b7:92:41:a3:94:55:ab:4b:7c:
7b:5d:09:a2:cc:73:f7:eb:57:ef:3c:3b:b7:77:5b:
d3:48:43:77:1a:e1:cc:5b:77:1b:e4:4b:9d:99:73:
68:c3:d8:64:af:7e:47:d6:ff:ac:24:ae:6f:3e:56:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A5:5F:24:E1:C6:66:CB:70:55:F0:ED:16:28:CE:0B:B4:BD:01:6B
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f3:1c:ec:f7:b1:44:4d:e2:d2:ad:73:93:b2:5a:49:f2:96:
df:db:7d:48:92:12:70:85:1c:eb:61:6c:80:2a:34:4f:ae:25:
6f:dc:8a:9e:27:ae:52:e7:59:37:6c:d2:e2:7a:b0:e8:14:47:
0c:24:37:bc:96:57:2c:f7:42:df:2d:68:99:d9:77:1d:01:9c:
9f:08:c7:ea:a9:40:64:34:87:83:36:ba:36:5a:c0:21:22:27:
b8:cf:98:20:59:88:2b:3a:98:5c:da:05:13:ed:66:8e:64:22:
39:67:9a:e8:92:14:ef:51:ee:05:05:d8:32:be:a5:4d:7c:bf:
5f:69:0c:4a:62:48:19:d4:4c:3f:f2:9d:13:db:78:6b:02:b0:
25:3a:b8:ed:81:97:ee:33:c1:1f:0e:91:aa:33:fa:51:a5:3b:
d5:9d:5c:61:27:4a:3b:d8:ba:52:3d:43:9a:a8:43:1f:97:eb:
67:f2:bf:d7:e8:58:b7:89:76:cf:f2:dd:68:4a:3f:80:34:9b:
65:1b:80:2b:93:55:51:84:a1:3c:66:f7:74:5e:ff:4c:8e:b4:
95:13:f9:4a:5a:0a:1c:e0:fd:b8:14:50:f5:49:89:d0:74:4c:
cb:e6:5f:40:7a:8d:be:b6:f3:85:80:4d:ec:f6:17:69:cd:91:
c1:4f:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:20 2026 by rpki-client