Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: IRZsa8JEygfL3wjCW5Rj/pEZnYvMn6cA5VPiB0Rf8dg=
Subject key identifier: 49:44:50:8B:33:FD:B2:8E:F0:5F:37:60:C2:E3:C1:AA:F3:AD:CD:FB
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019D28846D0B4E5FF391FCA6CC7CCC88A500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0FD1
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: hpL47SCSZrlNealKIc7LnC9PZp0.roa (hash: aYpQwmMiUXEwJ5X39H8U0kkfHeCdBOKpUZxQ3nISq/k=)
2: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: g5sx8a0yxoYwodwbdOsgFrueaYYb8jrLqlZdEFuvOKk=)
3: pw0RXXsD6LUrqOPEq8MgqL2qpD0.roa (hash: 917pV46CquJ4To8++B0OiVsGyf2fknUas8X+vyjzrnQ=)
4: uW3Eqs7Ri1lpnJVP-zAoNcXwTHM.roa (hash: /f9zR5HqJoOd5VfNKyewt9lLgfvwRHYV5D7mc7m8SfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6d:0b:4e:5f:f3:91:fc:a6:cc:7c:cc:88:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=4944508b33fdb28ef05f3760c2e3c1aaf3adcdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:fc:34:87:b0:9f:21:22:0c:04:cb:07:02:
40:d3:61:bf:9d:c4:8d:f8:10:90:a0:c4:42:50:30:
59:85:c8:a8:6c:db:4b:60:40:27:f2:3e:ea:15:41:
a8:3d:c7:c7:78:8f:6e:ee:af:96:10:68:21:7a:2b:
2d:f1:93:6e:01:e8:6a:50:00:88:4c:af:9d:03:13:
41:04:c5:9a:35:53:5f:5c:a6:98:3b:81:38:93:14:
13:da:ba:ed:6d:fe:d2:e2:b9:32:06:e1:0a:41:91:
4d:a6:61:56:8e:7b:41:99:be:e4:ae:02:e1:f5:f3:
64:ca:2f:b0:05:8f:3d:3a:f1:9d:e6:55:35:36:82:
ef:d4:47:b3:bd:e6:ba:04:5a:6a:48:2e:05:03:04:
00:55:a8:90:82:c2:af:d5:77:b5:4a:11:6b:29:de:
c8:a3:ff:3e:e3:15:81:a7:6c:2e:90:99:1f:03:20:
37:dd:74:2f:c4:cf:32:38:66:ac:6d:ed:a4:50:46:
69:b7:32:73:87:f8:ae:90:f0:c1:8b:77:82:87:c3:
76:f6:d0:43:9f:6d:9c:97:c5:ed:86:f7:23:5e:4d:
83:f7:7a:2c:65:03:8c:b1:96:ab:e3:d2:06:3c:0e:
4d:3e:f7:27:5b:40:b3:bc:e9:db:ce:80:9b:c3:ef:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:50:8B:33:FD:B2:8E:F0:5F:37:60:C2:E3:C1:AA:F3:AD:CD:FB
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d8:8c:4d:7d:f7:fa:ec:60:ac:1c:ab:86:e4:83:25:23:eb:
e6:b7:a7:d9:3e:fe:dc:2a:5c:9b:e9:f5:ca:64:20:46:6e:44:
1c:07:b3:ea:9e:3d:3a:e1:8b:57:b8:7c:bf:2c:8a:c0:82:0a:
8e:c2:c1:e6:52:a4:26:23:89:d4:8a:4d:68:11:dc:dc:1b:22:
55:9c:d5:56:9b:4c:3f:30:31:c2:ea:0b:ce:3f:08:e9:68:ec:
17:1f:14:44:f4:4c:77:80:45:d2:cc:2c:be:f4:4f:5a:91:6b:
cf:15:69:89:90:b9:54:97:ef:06:85:49:30:91:59:96:3e:01:
ab:a4:3a:5b:c4:be:74:6a:d6:32:28:52:07:79:41:9a:05:10:
6b:49:f4:b7:7d:c4:9c:6b:1d:fe:74:ed:90:8c:7c:1d:29:6c:
58:ab:0c:0d:d0:c3:90:cd:fd:98:59:04:3a:25:ef:ac:00:c6:
fb:31:30:f2:67:e5:94:99:df:20:10:91:d2:a5:4f:84:e3:87:
09:37:a3:62:83:45:b6:84:b2:89:67:c6:e9:4c:ca:75:07:11:
49:79:97:ed:0a:33:44:8c:7a:58:89:d6:29:d9:6e:9a:79:7d:
b2:52:75:57:dc:c4:ee:fc:d3:84:82:e9:dd:a8:ae:af:8d:af:
7e:32:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:42 2026 by rpki-client