Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: pmWYralbSowiC8AfBBXjcMEOFrmYPMPkjD5esodUyz4=
Subject key identifier: 30:34:E3:44:A1:FA:9F:AC:64:FC:CA:1C:31:D1:80:80:5E:12:F7:73
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019D2929461294E757D96DB775038E472315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1767
Signing time: Thu 26 Mar 2026 08:01:03 +0000
Manifest this update: Thu 26 Mar 2026 08:01:03 +0000
Manifest next update: Fri 27 Mar 2026 08:01:03 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: J9wDPUf4iCxp2NaEteUA9BvqpvPi1KmaKJP3ZqxSAbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:46:12:94:e7:57:d9:6d:b7:75:03:8e:47:23:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Mar 26 08:01:03 2026 GMT
Not After : Mar 27 08:01:03 2026 GMT
Subject: CN=3034e344a1fa9fac64fcca1c31d180805e12f773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:3d:9f:b3:8d:79:30:de:8e:2f:f5:c8:20:
95:13:c6:83:c3:4c:5e:f1:26:a9:a8:76:8d:37:aa:
8a:41:01:1d:68:fa:6d:64:31:80:73:c6:9e:da:d5:
25:3e:1f:5a:5f:4a:d2:af:76:1d:3c:23:c6:71:f9:
b0:5a:33:6a:45:49:9b:3b:d9:bf:5e:12:a8:77:44:
24:51:77:65:12:7d:dd:89:08:04:46:a0:16:f0:d3:
a1:b5:d5:bc:05:42:8b:8c:e7:a2:42:3d:d9:4d:90:
a5:7b:21:be:13:05:64:6e:e3:b4:1b:e6:4c:5f:96:
57:84:3d:c7:0b:f2:7d:7f:19:1e:75:21:15:8a:de:
e4:dd:9f:bf:44:b2:29:5a:3a:a0:ce:48:8c:75:3c:
3e:44:e7:8e:c0:e1:4c:41:52:a4:cd:b7:63:1c:72:
f5:2f:84:22:4e:ba:2a:99:8f:29:3c:d1:b2:5f:06:
6a:5f:d4:40:98:c3:76:19:b8:82:04:9a:16:bb:73:
0d:b9:b1:49:d3:26:f0:1e:cd:26:71:49:ff:d8:9f:
0a:27:6f:c9:55:7e:97:24:f0:49:5a:8d:01:0b:66:
9f:3a:cb:ba:b9:b1:73:1e:e9:ef:3b:ef:8a:12:a6:
3c:b0:89:46:a5:b3:81:6a:f3:fc:12:08:fc:bf:e9:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:E3:44:A1:FA:9F:AC:64:FC:CA:1C:31:D1:80:80:5E:12:F7:73
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:47:f2:10:38:60:b4:0a:1e:d9:93:df:72:35:90:3c:5b:
ca:0a:a6:86:72:63:88:7b:eb:08:e9:75:58:77:23:1c:53:eb:
eb:bc:4d:86:38:61:f6:86:5b:f4:34:00:5c:c4:04:3f:bc:3a:
88:7a:d9:09:77:65:85:1e:01:07:6b:85:47:8c:d5:1f:25:b5:
4e:14:a6:44:d3:e2:99:a6:83:f9:21:7e:ac:f3:a1:6b:51:a6:
4c:f6:fb:c2:11:dc:60:32:d9:8b:9f:e0:1c:90:fe:47:3f:88:
79:8c:b4:5f:96:22:a8:a2:4f:55:eb:c8:c3:71:4b:26:59:ff:
8f:33:26:ab:7b:a1:33:70:87:67:60:25:bf:14:49:fd:99:4e:
6d:7c:75:67:e9:1b:77:64:75:c6:2f:0a:df:ca:95:00:f4:e3:
f9:39:9b:60:9b:1b:22:00:6e:89:74:67:8b:91:f8:89:a4:3e:
0b:3d:ba:d5:1a:13:59:0b:7b:27:b9:40:d1:5c:a4:68:ca:61:
57:7d:ab:cc:e2:ea:2a:a1:4e:e7:9d:6d:2a:fc:48:06:ee:36:
e5:05:0c:9d:aa:f3:09:89:7d:44:ad:d9:3c:fc:cd:2d:a0:e6:
5a:f8:72:ac:c4:32:50:ca:3b:41:06:d3:73:32:00:ca:d0:bd:
5d:42:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:05 2026 by rpki-client