Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: BL9SvQRKuTtDG3ODLFdeqyBvKdGANxmCgtWK/mvc4Ms=
Subject key identifier: 25:06:32:CA:A8:23:5B:51:B6:DB:98:EF:0B:DD:B3:EE:6F:8A:68:9F
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019D27A860F1A4183D1304A22BCD4ED31174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: tg3U4Gy4oKVjTJjfaHp8z4VlXB+pGQUua/fzjzK6kgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:60:f1:a4:18:3d:13:04:a2:2b:cd:4e:d3:11:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=250632caa8235b51b6db98ef0bddb3ee6f8a689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:8c:16:78:de:53:df:ec:b8:fe:88:eb:f6:
1f:c7:db:ec:90:6d:c5:cd:5e:93:3b:eb:97:a6:7e:
6f:92:4a:3d:f5:74:99:1e:dd:16:dc:36:ca:6b:72:
b5:95:5f:4a:7b:91:ea:f8:f2:99:81:59:72:42:ec:
8d:de:6d:55:01:5d:21:ac:87:90:99:09:29:0c:99:
02:b4:90:3e:f2:ad:93:b8:bb:c2:3b:08:44:8e:01:
46:df:4b:e9:66:89:9b:d6:ad:e8:6f:f4:e8:8d:21:
03:e7:00:a2:64:5b:32:60:a2:99:00:66:bb:fd:13:
87:0f:c0:18:40:70:43:f6:72:02:95:02:12:bc:84:
2a:0e:bc:3f:c1:fa:77:20:cd:88:2b:45:f8:80:db:
67:ae:d8:b7:17:c5:06:c8:7b:11:48:f0:80:14:0a:
25:03:99:59:2c:06:48:38:82:20:8a:37:3e:55:54:
11:a6:0e:3a:10:f6:75:34:f3:ed:db:20:7a:e5:f8:
14:b4:5d:16:f0:ce:d5:b4:35:a9:5c:70:b4:96:37:
40:e1:01:7e:05:ce:95:7c:e3:92:c3:87:c8:44:ce:
2d:ce:1a:9d:1c:e0:32:c7:00:00:8e:79:5d:1d:45:
9d:16:d3:bc:c7:02:84:fb:72:27:51:8a:5e:ac:83:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:32:CA:A8:23:5B:51:B6:DB:98:EF:0B:DD:B3:EE:6F:8A:68:9F
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:43:f4:03:b2:b6:82:0a:d9:88:f0:b9:eb:9a:ff:c4:48:f4:
52:3e:be:5b:a5:06:90:8c:54:84:b1:3c:c1:d9:d4:91:72:85:
96:66:70:45:c4:dd:ab:14:b5:0d:e4:15:81:a1:42:bd:ff:7a:
18:7a:a4:49:0a:24:e8:fc:5b:4a:6e:ca:23:ea:ff:b0:67:e4:
40:d2:e2:95:5e:ef:d9:e1:d6:05:5d:03:29:24:85:98:0f:df:
9e:ab:f8:62:2a:53:42:87:93:c2:91:23:3c:d1:03:b3:f7:30:
12:dd:36:28:d5:95:22:55:2d:3e:ec:35:e8:66:dd:fe:03:99:
3f:fd:55:d7:31:c9:3c:6b:fb:c5:c6:43:10:50:de:41:76:15:
1c:d4:1e:3b:7e:b8:b3:dd:fc:66:36:63:4d:3f:3b:78:b1:18:
b7:6c:83:f7:b3:65:64:93:70:05:7d:d6:71:d9:98:6d:47:ed:
d7:60:ff:9d:7e:d5:5e:5a:f5:04:3c:56:35:3f:72:35:81:0f:
f3:9b:21:f0:b9:81:b4:6e:a6:f1:0f:b7:b3:67:ad:34:0f:41:
52:4d:d3:9d:e8:e8:ac:d9:59:79:f2:26:9b:58:44:a9:6f:27:
a6:61:6c:c3:1b:90:30:1c:cd:42:b6:d5:31:56:8a:42:3a:89:
3d:bb:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:44:20 2026 by rpki-client