Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier: k3fjqnfU0Z5Jj9ewUgDACGOhxbEjOLvvSEp5umNlQEs=
Subject key identifier: C9:1E:0C:DA:77:02:0E:7B:62:BD:3F:55:DB:FE:41:7F:51:CC:4E:35
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773
Certificate serial: 019D262895963F7BFF81A7558E347516CE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number: 06CC
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: B5aZs_fb6H9CA7D2dUNN42FgKrA.roa (hash: vl+jWifF6DSv9Cx+Cj/2gMjcAyX+Gy1sgrTxm4Q+GFs=)
2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: 48DRkMUiy9RZ4YVXHtyrzzZqqVkVNLWeEpZ6R2jxBf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:95:96:3f:7b:ff:81:a7:55:8e:34:75:16:ce:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514d5a840049d442df377445394df719201a773
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=c91e0cda77020e7b62bd3f55dbfe417f51cc4e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:6b:58:04:16:9d:7c:e0:d2:42:2b:e5:2b:
f5:1c:99:23:c6:87:b6:f9:d0:10:17:5f:c3:09:d2:
73:5c:0f:e8:7e:29:38:96:99:5d:d3:93:57:0e:a4:
f8:0d:04:a6:c8:f1:e5:63:63:4e:ff:96:07:be:fa:
f4:e9:57:57:30:dc:15:bb:b1:79:cf:6a:95:ac:b1:
0d:ce:ea:55:62:7e:c1:7d:5d:68:d9:42:07:6a:88:
79:78:5e:70:46:03:6b:90:e1:64:66:88:a1:36:93:
2f:2d:51:a9:34:f5:b0:36:f3:ca:b3:85:f3:25:7a:
d7:05:8d:b5:da:ab:12:30:fe:59:83:5f:79:24:56:
ba:22:b3:12:af:0b:b3:1c:49:16:c4:53:c8:09:6d:
12:fa:68:b1:4e:1d:94:0b:f9:8d:4e:4b:5f:5a:7a:
87:84:bf:71:43:44:71:91:ad:cc:24:aa:a4:5c:69:
eb:cd:41:36:a2:a6:8f:8c:c7:34:78:0e:a1:84:9c:
03:14:78:74:22:f2:bd:a7:ce:f8:a5:2d:53:dd:2d:
12:c4:89:09:c2:a6:1c:81:f8:eb:98:be:5b:ad:79:
c0:37:9d:58:c6:9e:b2:85:60:24:6c:26:b8:e0:65:
00:b7:ac:b8:b0:2c:c2:36:4f:f7:ac:74:e3:56:d1:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:0C:DA:77:02:0E:7B:62:BD:3F:55:DB:FE:41:7F:51:CC:4E:35
X509v3 Authority Key Identifier:
keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5d:b6:72:82:8b:1f:0e:c5:b2:2a:39:ba:6b:82:ae:93:3f:
78:ac:02:dc:e2:c2:8a:52:39:bc:76:72:85:4e:71:a4:74:14:
ef:b7:70:2b:b2:22:dd:fc:b4:b4:71:19:ea:05:48:b4:21:fd:
7b:a0:42:fa:14:ee:04:70:65:ca:87:c0:9a:31:c6:21:9f:4b:
83:70:3d:ac:e6:e1:1f:68:1f:89:25:c8:66:50:2d:76:4e:dd:
73:52:8e:4d:95:b7:85:98:f4:36:70:e9:b6:56:36:8f:44:1e:
38:09:75:1b:e9:db:d5:95:46:f8:dc:eb:3c:53:80:a8:d7:c5:
45:b0:80:03:07:da:25:33:c5:ee:84:e4:98:c9:a8:ed:c0:50:
41:ca:4e:13:f2:8a:b6:48:90:98:63:d2:d8:fb:6f:8a:6b:69:
ae:66:fd:dd:ca:8e:62:07:c2:ec:70:ef:48:ca:14:14:bb:fd:
75:80:86:66:b0:02:05:17:27:37:1e:f3:e6:c9:35:e8:0d:e9:
38:ef:98:9a:63:98:66:54:01:6e:92:83:92:40:0b:af:59:9b:
14:61:92:61:fa:95:04:0c:29:5a:97:b9:c3:83:f4:47:44:2a:
3b:e7:e8:92:9a:14:86:16:70:30:5d:c6:ff:7d:22:4b:5f:99:
92:2b:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:53 2026 by rpki-client