Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier: zXiNvpq/D/1cZwO2C3yc+NLvxpM5gIVLPmvYDzAbudY=
Subject key identifier: BD:E5:47:EC:F0:2E:71:6D:BF:5C:71:98:B1:F4:70:AB:B4:06:81:0F
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 019D32630E742FFDA99A8594E0BF9A933EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number: 1527
Signing time: Sat 28 Mar 2026 03:00:45 +0000
Manifest this update: Sat 28 Mar 2026 03:00:45 +0000
Manifest next update: Sun 29 Mar 2026 03:00:45 +0000
Files and hashes: 1: AZhIdfQe8WwT9TZ_N6T1lS4NxsE.roa (hash: xpA4Tx1xSz6uA3Q1dMsrfkLMQuhB5qhwmJuQPXJmqYU=)
2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: ZVGVcg7dD8Je4yjRTSH0EhntjgQlmM7UiFZfJ9gJz5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:0e:74:2f:fd:a9:9a:85:94:e0:bf:9a:93:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Mar 28 03:00:45 2026 GMT
Not After : Mar 29 03:00:45 2026 GMT
Subject: CN=bde547ecf02e716dbf5c7198b1f470abb406810f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:27:e5:bb:ca:ec:f8:4f:2f:9e:db:de:3a:
da:83:d0:6f:9d:f8:9f:a9:f3:c7:cd:d8:be:5b:82:
79:04:f8:58:b1:e0:b1:ff:02:ea:64:c9:5d:b5:f3:
df:ca:67:43:08:89:5a:b0:ef:b9:6a:6b:2f:3d:a4:
7c:ce:0f:97:c5:0f:74:97:85:4f:9d:fa:7e:3e:1a:
5d:3a:d7:e0:ac:c5:31:08:e9:07:62:f1:42:fb:69:
f2:95:f5:ea:b7:87:ec:bd:46:e8:1e:a1:32:7d:18:
89:b0:5f:bb:8c:05:f9:3a:f6:e1:16:99:df:ef:18:
36:1a:52:28:5b:da:2d:63:e3:9d:ba:fb:e1:9a:78:
e8:af:43:93:9e:2b:35:df:78:2a:46:a9:f8:fd:0d:
50:fc:01:3f:b9:2a:b1:a0:ba:b9:33:9b:2e:6c:b6:
a8:45:74:23:6e:cb:5f:f9:29:df:a8:1f:d3:0b:cf:
f7:7d:05:c8:ca:2b:12:25:ae:1a:f2:7d:a5:65:70:
1f:63:41:6c:ec:d6:a4:37:ae:c5:fe:63:92:6c:cb:
8c:97:14:5b:ae:7c:6f:8d:e7:ad:44:37:16:3b:87:
2d:d4:ae:5a:3c:f4:9d:9d:fa:75:fa:aa:e3:58:8a:
1e:5f:83:75:d9:c7:7b:e4:7a:03:2b:76:ce:e0:2b:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:47:EC:F0:2E:71:6D:BF:5C:71:98:B1:F4:70:AB:B4:06:81:0F
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1a:3b:33:bf:bd:65:25:fe:97:c7:30:e7:85:a6:97:5f:a6:
b6:0e:3c:e7:db:bb:64:36:82:f6:48:07:d8:65:04:32:14:1a:
80:56:1a:31:ba:e1:40:20:3b:21:16:3f:cf:17:44:b2:18:c3:
e9:47:c7:64:ef:ac:e3:ee:5d:24:58:e5:5a:32:7e:92:84:7c:
32:2d:34:4d:00:09:b4:1f:8e:82:25:da:55:cf:65:49:d0:25:
6d:ad:8c:67:58:b0:45:7d:95:a5:26:23:d9:dc:b6:5d:3f:ef:
4d:0c:a9:cd:1a:aa:9f:e6:f0:7b:e8:ae:b2:f5:4f:b0:06:c6:
fd:da:2b:62:1a:6f:6d:af:11:73:8c:e4:d1:37:00:32:6b:da:
f6:a7:bf:2e:7a:22:27:fc:7a:a1:77:a8:d9:8c:c0:75:e7:0d:
87:9f:8e:ce:fb:14:12:8c:25:04:fb:85:5b:74:c0:f1:b8:fd:
6e:c3:1f:b7:d5:13:af:e8:e9:c1:e4:0e:9b:d4:75:62:80:2d:
63:e3:66:0d:47:38:5e:97:b2:09:7a:98:19:dc:f8:3c:27:e5:
ea:17:0c:fc:72:e8:09:40:15:a0:77:78:4e:37:29:63:b7:2c:
77:1a:4d:af:18:01:ef:c9:59:6e:f2:bb:76:ce:45:42:a9:12:
68:09:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:31 2026 by rpki-client