Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: 9JdPU07H4FrJae4cdL0Jh0DA8qALM7C9IDw539WCzis=
Subject key identifier: E9:E0:2A:0C:D2:03:A2:91:FA:5F:23:AB:55:38:46:05:7D:D9:FB:B7
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 019D2816E9CB68030C165FDD76140E072F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: iXX6/VROuI9Zv84ZgUv3lUmz2yO4+wqR1bk6T6k3ODA=)
2: SdYBPf9hyZeCBZ0CXzRVluMGnGU.roa (hash: hgdsfyjTVsGnv4VajpzC0ZJUGOBghoLM7l+xd5EQZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e9:cb:68:03:0c:16:5f:dd:76:14:0e:07:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=e9e02a0cd203a291fa5f23ab553846057dd9fbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:91:ee:e6:38:51:29:6f:6d:1d:c5:f4:55:
a8:08:2c:2e:d3:a7:46:06:00:3d:46:61:75:67:ad:
38:7a:38:0c:55:5c:46:dc:49:9e:9c:2e:db:a3:22:
be:a6:b4:77:74:62:e2:19:38:93:4e:6d:6b:06:36:
f1:39:b4:26:79:31:28:1b:00:ee:8e:01:88:ca:c1:
2f:b2:8f:04:de:3b:5a:00:f5:f1:13:cc:57:4f:70:
c7:24:67:e1:c3:da:77:78:e9:9b:b0:e8:83:4c:90:
cc:09:75:93:f8:b1:1c:4b:3b:c9:56:dd:7c:4b:c4:
c7:09:68:aa:69:c2:57:19:d0:4b:19:ae:7c:af:76:
13:dc:24:64:09:16:0b:1b:bd:09:4b:dc:cf:38:01:
a3:48:10:b1:82:be:82:65:9b:5e:db:10:11:08:3e:
49:cf:54:f7:8d:99:ec:2c:50:e0:0d:c1:1e:9a:dc:
20:79:5b:1e:c7:2a:b0:b1:ee:65:b9:30:04:af:80:
6d:c7:b5:0f:84:17:0d:85:b5:95:99:4c:1a:7a:f0:
33:bf:51:1b:e3:d4:3e:17:14:6c:52:00:cf:23:87:
ce:be:f4:f3:1b:2a:15:ff:f8:fa:a5:14:42:49:18:
cb:fb:2b:0d:57:3a:c6:56:44:4f:a5:0b:ca:e5:de:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:2A:0C:D2:03:A2:91:FA:5F:23:AB:55:38:46:05:7D:D9:FB:B7
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:d6:52:8a:b2:f6:ab:5c:dd:58:2d:e3:eb:e5:36:61:40:
8d:1e:54:a4:9a:93:4d:8b:ab:21:23:d9:6a:58:18:a4:1a:29:
59:65:18:5d:72:27:e8:48:3f:ba:03:0d:8b:0d:a4:29:9e:c2:
af:6f:38:26:8c:ab:aa:22:dc:cf:15:48:3d:ba:8f:7a:62:e6:
9f:85:31:41:a1:05:bb:18:36:b3:e9:30:a9:17:56:c8:16:02:
71:b0:65:5e:be:28:98:ed:ab:a2:9a:01:25:af:29:f2:3c:4c:
fa:95:68:ab:d8:95:08:8f:db:6f:72:73:97:18:8d:ee:b1:f8:
cb:41:b7:fa:35:45:9f:31:a2:c2:98:75:43:5d:6f:c6:6c:6b:
57:37:d8:3f:48:34:a9:3a:c4:b5:ca:d8:a5:b6:0a:02:3f:03:
63:a7:e9:42:58:81:41:40:0d:6d:13:75:da:de:85:d9:07:b0:
06:f5:35:a0:00:b6:68:b4:c4:1c:d4:e0:6b:92:f4:ca:05:d6:
0f:25:b0:0d:d4:58:87:bb:c5:9c:ba:fb:25:72:47:9b:17:4c:
67:ee:3a:83:99:44:d1:04:fd:d9:eb:4c:73:e1:41:9a:5b:b9:
06:5f:cb:d3:6a:aa:7c:7b:5d:19:7d:97:0d:73:1a:f6:de:29:
3f:ec:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:29 2026 by rpki-client