Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: qn3WKxvuxHDN376WrAtPr5cPjD19LISRStRbP0POeKY=
Subject key identifier: 44:73:F5:1C:3E:EE:8A:51:7B:95:38:64:47:BD:46:17:AF:92:DA:24
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 019D27E01FDC82AA83143C03B4C094461D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:32 +0000
Manifest this update: Thu 26 Mar 2026 02:01:32 +0000
Manifest next update: Fri 27 Mar 2026 02:01:32 +0000
Files and hashes: 1: COjqaYnsYuyAQnOfRow1LSaHRvU.roa (hash: OG1wPC551mpOORC3dI+5e8bO42vNDHRLBsbdrz/BicA=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: S3JINUYcA17e0+BQ1Eege/b0Uq6kDvAiCa8czsH9qFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1f:dc:82:aa:83:14:3c:03:b4:c0:94:46:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Mar 26 02:01:32 2026 GMT
Not After : Mar 27 02:01:32 2026 GMT
Subject: CN=4473f51c3eee8a517b95386447bd4617af92da24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:cd:ed:f4:b5:b8:3d:29:3e:21:18:9a:98:
22:44:0e:31:8e:64:37:a9:33:51:23:9e:7b:0a:4b:
b9:a1:5d:d8:f0:30:e9:e7:1b:b5:57:5f:4b:04:e4:
ad:96:cc:41:50:b8:6d:1e:ef:80:bf:1c:0e:d9:7b:
d2:a6:5b:b4:1d:d8:d6:c9:f5:dd:c0:0a:70:94:48:
89:07:73:46:5d:a1:7e:97:93:5f:2c:aa:4f:23:b6:
6f:b9:1d:0a:d9:f1:89:bc:c9:43:b0:65:10:cf:6a:
65:40:3b:29:fe:12:4f:c4:ec:1d:82:7e:0a:ca:0e:
0b:5a:ca:0a:e6:0d:d7:7a:7c:44:58:2f:f9:74:9e:
91:80:43:1e:30:31:9d:b2:7f:c5:55:bd:9b:f3:d1:
aa:cd:0b:8f:0d:17:48:36:49:d4:1f:47:b6:11:84:
c0:65:bc:44:99:1e:33:ee:4d:36:26:74:44:50:2c:
ee:08:b1:ed:66:97:1b:d7:af:04:73:91:92:25:f7:
9d:10:1e:85:c5:7d:e3:14:f6:34:57:ce:91:a7:78:
61:f7:b9:ab:28:2a:78:35:76:1d:bd:26:46:d0:53:
83:12:a7:82:7e:9c:b5:84:ed:2c:35:60:94:df:4b:
60:e3:92:50:27:48:67:1e:f6:39:7a:7a:25:09:9d:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:F5:1C:3E:EE:8A:51:7B:95:38:64:47:BD:46:17:AF:92:DA:24
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:15:ea:08:11:47:aa:ce:a6:7c:6b:cd:cf:9c:40:d0:e6:
93:73:ee:c8:c3:31:e6:03:09:11:3f:e9:30:14:2e:a9:f5:3f:
60:22:81:37:1b:4c:61:26:05:6b:81:2f:c4:58:16:59:fb:39:
e6:40:b7:6f:76:68:24:40:22:a3:e2:bb:b8:ce:4e:36:18:d6:
00:b6:73:1a:02:7b:4f:5e:46:4d:63:c0:2e:28:4b:e4:4f:4c:
27:6c:7b:4e:61:ea:64:ff:be:fb:8e:c5:71:4f:1d:0b:e7:b2:
9e:07:85:0e:bd:4b:a7:20:4e:7a:10:6b:95:d4:a0:d7:ea:fd:
2b:02:f0:d9:11:a4:cb:52:f4:ea:45:1a:e1:20:68:0b:e5:70:
5c:db:6a:6e:10:08:70:d4:66:fa:98:1b:d0:77:22:32:cf:08:
80:93:3e:4a:30:49:0d:36:7b:ce:4c:88:2f:72:90:99:06:4c:
7f:4d:c8:d3:a6:45:bd:c0:4c:2c:19:38:b3:ec:1b:3a:cc:94:
7b:ed:d0:c1:b3:9e:c3:8e:c0:14:29:00:ac:e9:00:13:05:e8:
34:cf:06:8e:40:c3:27:ad:a8:4b:43:1b:73:44:b4:1b:37:55:
8c:20:ff:e2:49:73:a4:a1:94:94:66:14:74:41:d7:e3:fc:24:
12:48:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:20 2026 by rpki-client