Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File: lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier: OgNXh2VmbApKHCrmQ4SXvxk3GgMpI1w5r6WcYIZTmZ4=
Subject key identifier: D5:60:EE:9F:53:7D:87:48:96:00:AD:BB:A1:75:45:51:D7:52:7F:EC
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 019D288431B6D50089AC9CCE011B03D74312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: 3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa (hash: yo8hQ3SuLYgiKWGisWTt5R1HgigntwJ6UO6bodCaAnE=)
2: 868VkIZTeEk8g8K-nc-GYk4GNqA.roa (hash: mAkolD9i09Q2h4MCniDyPs0rmf1iQU6A0FPOG2LgFwE=)
3: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: cjuxfnKe0rtXHKFHJfPvYpmqf5HQwc8MuEMu/E8SJrE=)
4: q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa (hash: eotOUqJ53rWQxs9/sn9KK6XM4STngZxv7oKNTVxb9eI=)
5: xY0yzyzGKETMGEPdBnrDX84itWs.roa (hash: avsQpG9VhWpkE114IUXSkSxZIAsU+MHzryCiy/ZPdtw=)
6: yQDR4RXyJipBGIGaXf0hpmvg9MI.roa (hash: Gz9z3oldgWaZnVSRtfCqMKiqcH9Ia6S6jLOD4nomWR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:31:b6:d5:00:89:ac:9c:ce:01:1b:03:d7:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=d560ee9f537d87489600adbba1754551d7527fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:9b:68:63:20:68:49:4f:85:b6:3f:13:00:
92:54:36:89:d3:89:e3:07:93:78:fc:fd:1a:57:e1:
9b:0b:fe:a6:27:a3:d8:e3:ec:6d:71:b5:db:00:6a:
9b:4b:8b:fc:e4:a7:70:da:3e:e2:d5:bb:8d:a3:d8:
15:32:ad:cf:5a:54:93:06:fc:76:21:9e:b9:76:a5:
f0:1d:61:24:c3:2e:36:f3:d7:ce:5c:95:d3:ee:4a:
c1:84:91:77:5e:e2:0d:fd:e8:c8:57:8d:4f:f0:09:
89:69:d6:02:67:ac:5e:0d:01:89:db:67:af:4c:80:
3e:38:e8:a2:62:78:d5:b0:7e:76:79:78:e6:f1:4b:
01:75:c4:5b:ec:2b:e4:b5:3c:55:01:37:bf:c8:c1:
32:40:80:90:80:d3:2d:54:ed:24:58:3b:4e:51:50:
f0:c1:90:06:5b:66:1b:17:64:4e:08:87:01:ab:d6:
a9:30:0e:92:65:c1:03:a1:ec:ce:6d:db:65:eb:3a:
54:61:6b:3d:26:08:94:d6:c6:68:0e:a0:20:d9:8c:
09:0b:21:4c:ae:b8:e5:f2:d0:0b:b6:b8:f4:2c:27:
5a:ad:45:57:7d:81:91:42:2b:2c:7f:4a:f5:e8:ab:
e5:a6:1f:08:02:6f:ae:22:a0:7c:3b:ed:62:d4:97:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:EE:9F:53:7D:87:48:96:00:AD:BB:A1:75:45:51:D7:52:7F:EC
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:09:a6:98:8d:8c:9f:4e:ac:a3:99:58:69:6e:af:b5:ac:
ea:3d:a6:d9:e5:53:72:df:6a:0b:c0:67:da:c6:1b:39:c3:07:
ba:12:d4:4e:74:98:de:49:e7:58:b3:cc:f6:48:d7:d5:79:88:
03:79:83:7d:62:fe:81:cd:c6:15:6d:e2:b5:ed:9a:5a:19:be:
c4:5d:1e:74:bb:43:9d:0b:5e:eb:49:e9:b3:de:2d:77:4b:f5:
da:89:fb:12:ea:9e:67:b1:be:47:fd:7e:82:25:fd:22:a4:a1:
5f:83:b9:b5:ec:49:bd:c6:eb:c3:33:33:2d:2b:0e:b2:d5:7c:
45:3e:dd:50:17:d7:25:8f:3d:12:da:d7:98:44:a7:84:8b:5b:
91:35:a3:22:9a:3e:b2:ef:78:47:1e:d7:2f:b4:af:ff:3a:52:
af:a5:ff:a4:9d:71:97:11:b8:e7:af:b8:70:b8:f4:08:18:dc:
64:00:bb:ca:8b:cb:64:0c:31:2d:fa:29:2e:61:56:40:a1:55:
40:5c:03:53:35:d7:1e:3d:e2:24:90:be:75:b4:f5:71:e2:13:
d5:86:8a:73:99:7b:d9:4e:a6:f3:03:1f:cd:6e:e6:ee:87:25:
ef:c1:2c:99:c9:5c:c2:bc:aa:c0:53:e1:52:7c:12:5c:0e:49:
ea:a9:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:56 2026 by rpki-client