Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: 6fjKrOcyU9Myq4Rm+F/MB1Gzjck/sJWMaj2PdXH4O9Y=
Subject key identifier: 92:B0:D9:A7:FD:1E:B4:E0:2F:B3:53:01:DB:A0:96:50:C5:DF:16:F0
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019D26CCDF6C3DF8920C6C428F26D58BF1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: E9akkjI+WxONA9PeITF870C05ylf9vk6C6g0lFOZ5JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:df:6c:3d:f8:92:0c:6c:42:8f:26:d5:8b:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=92b0d9a7fd1eb4e02fb35301dba09650c5df16f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:fd:66:bd:bf:49:78:0e:bd:76:1d:fb:c4:
43:80:9d:c1:b0:3d:1d:08:f2:7c:b9:99:7a:1f:21:
b7:18:78:7a:44:8e:a7:39:6a:75:ac:f9:9b:7d:26:
13:98:37:18:d9:e5:9b:03:b8:a7:50:aa:53:6a:52:
77:18:f2:c0:ba:0c:16:7c:44:b5:2e:25:0a:d0:a8:
b3:41:b6:26:92:b8:dd:1c:f3:04:04:5d:c7:12:17:
1f:c9:4c:0c:cf:ef:94:97:6a:c3:fe:bd:0b:f4:0f:
b4:08:8b:a4:9f:1a:3d:fc:ca:77:18:01:eb:91:7c:
25:50:31:c5:49:af:db:54:90:dd:fe:9f:79:bd:c8:
1f:75:2a:63:18:2d:39:7e:d4:73:77:6e:7c:a7:7d:
a5:82:d0:86:9c:dd:d2:d5:cf:c0:33:e3:c5:4b:da:
36:84:84:4f:3c:76:f3:28:dc:a3:68:22:de:bc:d5:
42:48:a7:9c:67:39:a3:10:7a:6a:1a:0a:0d:df:44:
30:40:06:48:5c:e6:0d:41:c1:a1:17:e8:23:bf:57:
63:92:1f:4b:8f:92:a0:ba:ff:bb:7f:0c:c0:39:ea:
d3:b4:30:1b:93:04:19:b2:64:47:9b:88:97:88:5b:
08:cd:e1:8d:b2:18:e6:8a:6d:f3:cb:ee:6e:91:2e:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:D9:A7:FD:1E:B4:E0:2F:B3:53:01:DB:A0:96:50:C5:DF:16:F0
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a0:f0:c1:26:fc:62:07:d4:e7:81:e2:f2:97:9a:a1:01:36:
d8:64:a3:c6:2d:9e:94:3e:52:58:d5:9f:e9:26:03:b1:44:7b:
5a:d5:05:46:53:78:16:5f:36:3c:5b:b1:5d:3a:83:0e:e0:38:
12:b9:d2:57:e6:59:d4:fa:76:3f:47:13:41:de:6a:f5:59:18:
9c:3c:eb:0f:23:47:ef:82:d6:54:8b:95:5d:13:12:07:b0:f3:
d5:9b:7a:4f:f1:45:33:0f:75:9f:cc:13:43:17:a3:06:ef:bf:
15:f5:d1:34:ac:23:0d:4c:80:ea:c1:76:70:ef:62:30:97:c3:
de:d1:e8:0e:f2:52:3a:4a:41:7f:cd:03:4b:82:d4:84:be:f2:
55:96:06:34:32:24:3a:23:fe:53:28:57:51:4e:e1:36:b3:f8:
f3:6e:01:f5:a8:91:ca:4a:1f:b3:a0:dc:4b:46:20:21:ab:f3:
13:46:2a:0c:4d:08:38:1d:6b:a0:dc:45:42:56:8c:5d:a3:29:
d7:d5:e1:2c:3d:e0:71:d2:92:e1:c5:e4:f0:89:40:0d:92:ce:
62:dc:05:a4:54:fa:76:7d:f5:46:95:f8:33:f4:35:90:cb:bf:
7f:c8:99:20:f8:46:9d:27:96:5c:6b:a6:4b:d6:b5:18:d4:8d:
65:3d:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:43 2026 by rpki-client