Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: 10ldZuQ7HIW7KbIPtzxlbYdenNDOsHLRilDI0VOGi0g=
Subject key identifier: 2A:56:63:9C:BE:21:8F:E1:27:AD:FA:D9:40:C4:17:3C:B5:56:B8:B3
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019D28F275845EA406E6A0E46471EB3C73B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:11 +0000
Manifest this update: Thu 26 Mar 2026 07:01:11 +0000
Manifest next update: Fri 27 Mar 2026 07:01:11 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: CM+RDq4y+8+PAEbXNDlsHvZo8BAU/9LmqRDjpxcGskI=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:75:84:5e:a4:06:e6:a0:e4:64:71:eb:3c:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Mar 26 07:01:11 2026 GMT
Not After : Mar 27 07:01:11 2026 GMT
Subject: CN=2a56639cbe218fe127adfad940c4173cb556b8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:bf:49:bd:f7:66:ed:e5:1f:a4:20:25:45:
c9:dc:a3:c2:4e:76:8b:d2:60:73:09:c2:8f:7e:41:
4f:a9:a4:7c:4f:1a:4b:9a:e6:75:fa:a4:c0:d6:03:
32:99:0e:72:50:58:44:2e:ce:2a:94:3d:18:72:74:
a3:6f:7f:22:a7:e4:d7:0b:25:87:04:c3:60:8d:fd:
c0:f8:f1:81:f3:20:23:1b:58:0e:be:ed:3f:9c:63:
7c:cd:39:98:6f:48:0e:a0:75:c0:43:40:1f:b4:b8:
a1:55:b5:2a:a7:d2:a3:7e:8a:0c:89:70:25:ce:44:
50:f1:31:19:55:22:cb:c7:0f:57:6d:7f:3f:05:36:
80:b4:78:df:b8:dc:18:d9:12:42:a8:57:cf:95:4e:
cd:fe:d8:12:5e:1e:c9:23:97:ef:c5:28:6d:e0:5a:
33:ce:fd:a0:d4:99:d6:4a:50:a5:b3:94:5d:68:d2:
d6:22:ff:e8:0d:97:72:d0:3a:dd:5c:9f:89:a8:75:
05:17:8e:76:65:da:f4:a6:d3:e8:9e:57:08:03:0a:
13:3e:fa:35:0a:16:42:1e:3a:14:cb:56:8c:d0:4f:
6f:4c:27:5e:fc:a0:1d:db:98:46:5f:4b:5c:1a:52:
73:9a:d7:41:e1:68:b3:39:fb:84:6e:ae:19:56:f0:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:56:63:9C:BE:21:8F:E1:27:AD:FA:D9:40:C4:17:3C:B5:56:B8:B3
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:60:12:77:fa:50:80:10:66:40:8b:d8:45:26:44:1c:8e:86:
ed:74:7d:c7:77:09:c5:72:f1:19:45:e7:40:5d:46:9c:77:84:
fe:ad:b2:61:43:e9:9e:0f:98:f9:c1:df:06:c3:0c:b2:b3:9c:
9d:6d:a7:ec:d1:6f:62:f4:3e:66:d0:1d:fb:fd:67:2d:aa:f1:
24:2c:ca:de:c6:19:78:ad:44:e8:c3:b0:36:e4:b1:e7:38:b4:
73:68:5e:52:4f:e4:4a:d1:e3:72:54:ae:b1:c5:5f:5c:c2:e3:
b9:e6:5d:1c:ee:54:6a:17:4a:74:7a:d7:88:06:f7:cf:fa:9b:
eb:46:92:c5:b1:0c:ba:bd:ef:b1:f7:52:8f:04:88:36:99:43:
40:3a:42:0a:d8:f0:b9:14:0f:d6:47:3b:6d:58:26:ac:34:ef:
3a:ee:e2:8d:98:bf:7f:fb:c6:ec:3f:60:d8:25:0e:45:bc:89:
a9:f6:a8:68:b6:08:61:96:00:8e:a2:95:11:94:32:81:a6:67:
32:63:91:94:d5:cc:ad:d6:d5:79:a3:1a:4c:2a:84:12:2b:f0:
99:fe:5e:8d:43:c0:92:59:30:e2:77:01:9e:e1:a2:64:c6:a5:
fa:a7:6c:65:7e:15:eb:19:73:05:c1:0a:a2:d7:a4:d8:f9:fa:
e6:c4:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:33 2026 by rpki-client