Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: c2z5KH33aHPGB8RVpj0V4DxFb/SuPV20wXK5PVVSeeo=
Subject key identifier: EB:B9:8E:6A:39:AA:77:5E:56:A2:C0:3F:70:B3:A1:90:65:30:85:D1
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 019D29CDEC7D522DD85F4B42C1FEB4F891E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 0B08
Signing time: Thu 26 Mar 2026 11:00:54 +0000
Manifest this update: Thu 26 Mar 2026 11:00:54 +0000
Manifest next update: Fri 27 Mar 2026 11:00:54 +0000
Files and hashes: 1: KKTxvi4QT-uw2rVsD47tdsRqIEw.roa (hash: xejVwgC/oSDE2f2FYXW8noid3jsDDlJ6in2DKcaZdI8=)
2: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: Lqlg/toOfyjqWEJp+T6TcMj2m1RUVHrhOoxfs2borLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ec:7d:52:2d:d8:5f:4b:42:c1:fe:b4:f8:91:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Mar 26 11:00:54 2026 GMT
Not After : Mar 27 11:00:54 2026 GMT
Subject: CN=ebb98e6a39aa775e56a2c03f70b3a190653085d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:95:e9:b7:b8:d4:f7:f7:91:fc:98:ab:d1:
f6:38:38:39:73:4d:22:a6:8c:4c:cf:a6:6c:27:e1:
a5:cf:fd:53:7d:a8:25:b7:6e:a5:20:22:0e:63:a4:
4a:1b:13:31:8f:a3:8b:fb:ea:7a:34:fb:c0:c7:53:
13:fb:03:92:03:b3:96:f1:2a:05:fd:13:79:94:b3:
fd:9a:05:e3:80:d0:aa:cc:32:3b:73:28:1d:a5:b6:
8b:40:44:e9:08:7c:b7:c4:59:dc:f2:78:14:a4:9e:
9c:14:d4:a6:5c:15:11:f1:eb:ec:56:43:f5:fe:5f:
aa:5f:1d:a4:a8:a5:af:54:b1:26:5c:38:8b:f3:c7:
a7:71:a1:e5:58:09:2c:42:90:b6:90:f1:d8:b3:4b:
c1:eb:9e:2f:f5:c5:17:8f:06:6e:f3:b4:e7:bd:48:
1b:ce:13:f4:b6:cd:83:7d:d4:8b:3c:95:bb:38:2b:
30:e4:78:0c:78:24:54:ea:a4:0b:30:16:bd:98:ee:
a2:f2:3c:dc:68:61:4a:18:5e:b5:21:5f:ea:64:86:
f7:f3:ab:1c:ff:89:85:09:31:7d:02:52:7e:a2:81:
69:58:9e:fc:25:f5:d7:7c:04:38:b9:66:37:96:b2:
08:17:0e:35:38:17:20:c2:b4:c3:ec:6f:1b:12:f6:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:8E:6A:39:AA:77:5E:56:A2:C0:3F:70:B3:A1:90:65:30:85:D1
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:9f:17:b5:56:e5:6d:ee:d6:96:d4:d8:16:57:f3:2c:46:
11:0a:b3:61:d2:2f:d3:14:f6:29:6f:44:6e:b8:ff:95:c3:55:
8f:08:bd:a6:a4:1a:df:e2:5d:9e:9c:4a:55:93:38:2a:ac:3e:
05:01:06:41:07:0e:17:5a:be:fd:c9:81:22:50:74:85:e8:68:
54:7a:2b:d9:11:b5:67:0b:07:62:da:50:b7:6c:fb:32:ae:e2:
30:0f:03:19:63:ae:07:a6:1d:6a:46:7f:29:8e:fd:1d:fb:f5:
be:40:6a:e9:8e:47:61:48:86:df:c6:ec:b0:7b:e0:03:dc:bb:
18:3c:f2:6f:d8:6c:ee:aa:8b:26:b3:6a:8e:fa:bb:11:25:8d:
0b:fc:48:08:ba:7e:89:30:75:3f:06:46:92:a1:0c:54:65:5f:
b0:0c:0d:c9:cd:18:0b:e0:bf:c3:0f:24:b7:3e:95:37:d8:ad:
6b:b0:ad:ce:69:ed:67:ea:9b:09:ba:81:d1:a4:53:2f:e9:f7:
96:1d:eb:83:3b:ab:96:3d:f7:7c:b5:35:95:22:5e:1a:df:03:
35:1e:2b:56:3c:e7:52:ba:9a:8c:da:8d:b6:a1:99:ad:2e:b2:
3f:a4:8a:0c:f9:ef:b5:2e:25:0e:fd:be:b1:92:f6:2e:f6:a1:
65:6f:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:15 2026 by rpki-client