Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: lss4l0vPyAll9GmwxyPgAtqi3q3VjUQov/MUyOzj+6s=
Subject key identifier: FB:F7:DA:B2:79:4A:A8:80:77:FE:31:24:83:C3:A1:A1:07:AC:85:B8
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019D2627E97C1FD36740D35A6D3799796F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1807
Signing time: Wed 25 Mar 2026 18:00:42 +0000
Manifest this update: Wed 25 Mar 2026 18:00:42 +0000
Manifest next update: Thu 26 Mar 2026 18:00:42 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: PF7vCmgYc9aQwdeeef08LQbNSM258l4oiZiBkn075F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e9:7c:1f:d3:67:40:d3:5a:6d:37:99:79:6f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Mar 25 18:00:42 2026 GMT
Not After : Mar 26 18:00:42 2026 GMT
Subject: CN=fbf7dab2794aa88077fe312483c3a1a107ac85b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:10:a6:c5:af:65:bb:55:79:ed:6d:ae:30:
01:0a:b9:e9:2b:b5:d2:8e:54:5e:fb:17:4a:b8:f9:
81:eb:89:b3:34:17:7c:5e:79:77:65:1a:76:6f:fd:
ea:6c:d1:e7:5a:73:ce:1d:d2:4c:78:f2:3c:b4:a8:
7a:94:cd:c3:8d:3f:84:3d:d9:8e:65:15:89:cf:d1:
06:fb:de:b4:08:eb:5d:1e:f6:eb:c7:b2:c8:a1:47:
ed:95:68:94:ee:a1:24:67:64:33:25:06:44:a5:0c:
51:84:bd:cd:d5:da:d3:dd:28:c7:ec:4c:8c:ea:7a:
20:f2:d4:0e:ba:bb:43:7c:64:5f:eb:f5:4f:42:b2:
75:43:92:6f:cd:73:a9:18:52:41:2a:e7:b7:ad:fa:
24:c0:0c:2a:6e:e0:6a:dc:84:a4:e6:69:ba:be:00:
64:4a:7d:6f:12:bb:db:f7:00:0c:f0:9f:a9:a3:fa:
0d:85:a4:03:71:29:7c:d6:e2:9e:c8:08:48:fd:2e:
2c:6d:55:f5:2f:7f:04:78:5c:0e:9f:47:80:1d:b9:
88:fd:d7:e1:a8:17:a1:9d:b0:b6:bd:b0:1a:40:8d:
72:8a:92:23:26:5c:ab:0c:45:34:a7:c2:fb:f5:8d:
03:8b:2c:db:c4:f8:52:f6:c1:f9:36:01:e7:2f:44:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:DA:B2:79:4A:A8:80:77:FE:31:24:83:C3:A1:A1:07:AC:85:B8
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ef:ac:f7:9c:79:d4:f8:ee:4f:1a:c4:c6:27:dd:a6:84:b0:
47:38:be:6c:cd:44:8e:cf:86:da:c2:d8:3a:04:ff:72:aa:89:
93:a9:21:d1:a3:f0:a3:cd:5d:5e:5e:80:cc:0a:50:a7:76:b7:
95:1e:fc:df:35:b9:cd:e4:39:1d:af:0d:56:05:36:d4:7f:11:
c0:5b:9a:25:27:8a:21:37:7e:88:5c:78:9e:4e:67:8d:c9:97:
60:2a:f3:a8:79:c7:f5:5b:56:ca:32:2e:7f:88:76:be:62:99:
0e:d5:58:88:a0:3b:28:a8:a3:3c:a9:6e:31:3c:27:dc:7c:c7:
d5:87:8e:0c:21:8e:05:d2:be:1d:6d:b2:93:c2:9e:9c:86:1b:
76:fb:f9:60:b8:99:9c:fd:54:d6:0a:f7:1a:dc:32:bb:71:4c:
f6:31:09:47:6d:d2:10:7e:ea:37:37:3b:94:8a:a8:9f:48:ce:
c2:5a:e8:5c:a3:14:6a:eb:27:9a:df:c6:41:02:74:4d:77:1f:
58:95:46:79:cb:6a:16:a9:21:1f:bc:38:ce:1c:38:ba:46:10:
18:ec:00:4c:9f:33:a9:b7:cc:29:9f:cc:46:49:df:7a:d0:bf:
14:d3:81:95:7f:7b:17:cd:06:b2:6b:b3:44:bd:8a:0e:dd:6b:
68:f2:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:57 2026 by rpki-client