Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier: zYQaIzYMtOiFmieoU5eTHpQZply5oNFC8M6TTpgS0FM=
Subject key identifier: 04:F1:84:47:AB:14:F7:89:6C:C8:EC:E1:8C:1F:4B:92:37:C2:5C:AE
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019D2961AE2F983EDEF4DDFA7CF0021BD03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:40 +0000
Manifest this update: Thu 26 Mar 2026 09:02:40 +0000
Manifest next update: Fri 27 Mar 2026 09:02:40 +0000
Files and hashes: 1: NCKrnZ6BBgRyh9N8rjzonLxGGi8.roa (hash: cPlIwNXE1gIgFxpt8lhNk4Dl9OB1ImP6P9GMfjOfmqQ=)
2: QN1eUaTvYAP_ELe-EbMtz85iMfc.roa (hash: xwP2gxjcLucn9cj9qV9ME9PvxT/Q/xeoP3TDbLZIYfY=)
3: Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa (hash: 5B/exxRvB/e4faBVuRg/6C6JUY3dZXdeStf6YjAxx6c=)
4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: OuwbkGVwcnrWUGe5SBeP/LrVxHWjewptLZVwbXuzg+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:ae:2f:98:3e:de:f4:dd:fa:7c:f0:02:1b:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Mar 26 09:02:40 2026 GMT
Not After : Mar 27 09:02:40 2026 GMT
Subject: CN=04f18447ab14f7896cc8ece18c1f4b9237c25cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:82:b5:df:6d:3f:bb:b9:ad:fe:f2:fc:5a:
39:1e:1e:74:a3:fb:fb:08:9f:a3:e9:38:b0:06:23:
0a:16:f9:bf:0a:e3:6d:da:2e:44:90:ca:8a:2f:06:
9c:eb:c4:a9:2f:fa:d0:3b:1d:c5:6d:d7:26:b1:26:
07:10:38:d3:cf:33:90:e2:66:c4:38:da:36:5d:81:
86:86:93:19:48:31:47:e6:63:88:50:59:66:c2:65:
bd:2d:8e:f1:e3:e4:a2:f2:3f:5a:54:51:10:37:83:
c5:16:31:1a:7f:9f:79:6c:d7:2c:8e:58:44:6a:27:
84:8b:1d:e0:9b:d6:fd:df:75:63:e8:58:46:a6:ca:
33:f0:0d:b4:63:2d:19:64:0b:79:c0:45:ab:f5:30:
69:e6:eb:e2:f3:90:85:75:f7:76:5b:cf:1a:7a:64:
14:76:1d:06:25:cb:f5:cb:7e:b7:31:55:34:e7:a9:
a1:50:2b:bc:4d:c3:4c:ed:62:72:d4:e8:6c:06:3d:
b5:c7:02:51:ff:c1:d1:92:ad:ae:ff:c3:02:5e:b8:
20:26:16:ce:aa:89:68:1b:36:b9:20:86:0b:ad:0f:
a6:1f:5a:82:ca:72:5c:f6:5f:ba:c6:10:1b:ce:50:
53:5f:e1:c3:e1:42:a7:05:32:e5:99:7f:7d:e3:aa:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:84:47:AB:14:F7:89:6C:C8:EC:E1:8C:1F:4B:92:37:C2:5C:AE
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:82:80:75:a1:f1:f7:ed:04:62:8e:3d:06:c6:47:2e:02:94:
92:d0:e5:3e:70:70:5b:07:11:84:be:76:b5:52:e4:1e:6f:32:
f7:81:23:b5:fa:e4:85:51:fb:cd:63:91:c4:d4:66:41:45:fe:
ad:92:9c:bd:96:32:8e:87:86:3b:43:c9:26:a6:d6:69:31:b4:
bf:bb:b1:c3:bb:d5:ea:ff:37:e7:87:3a:c8:52:cd:bf:17:a6:
d2:f2:74:61:fa:15:bb:ea:79:21:a4:72:2f:3f:44:0e:af:83:
65:d2:d9:37:ef:84:40:66:18:70:e2:f4:e6:8d:41:8d:c3:8b:
dd:53:e3:89:f5:f5:87:28:b1:d7:06:7c:92:a4:c8:86:91:4f:
c9:9c:7a:7d:8b:ba:6f:72:87:01:2e:be:8e:80:93:90:9d:ff:
da:01:f4:ac:56:be:b4:06:41:23:1c:26:89:82:b7:6b:bd:8c:
55:21:3a:18:f7:15:f4:43:50:20:d8:70:e9:12:d3:28:ce:f0:
58:56:47:cf:09:99:fc:1b:db:d4:9e:3e:01:04:9c:a4:8a:2e:
d7:52:d4:56:ce:06:2f:ab:1a:0b:d4:25:fa:37:1f:c0:ac:c3:
85:9f:18:0d:a4:ec:e5:a3:af:ae:08:91:45:e6:24:07:a5:46:
4c:02:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:26 2026 by rpki-client