Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: jDeWKTtO8uomD+CdJDkDFwJbCjHr5axLQky0DUWeoHY=
Subject key identifier: 8C:EB:3C:58:BF:06:06:DD:E0:0E:A5:47:CA:44:E7:82:FE:88:1E:A8
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019D2816507D89B76D477DF18CE6D45A74B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1583
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: dOPgC2V8AoWQ2KVlI1uiMN58mZOojiYacySdIpvKae0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:50:7d:89:b7:6d:47:7d:f1:8c:e6:d4:5a:74:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=8ceb3c58bf0606dde00ea547ca44e782fe881ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:62:b0:5a:63:a4:b4:a9:73:59:46:51:31:
ff:19:95:1e:8b:e1:9d:0b:cc:06:5a:e7:47:b3:81:
51:4b:c4:df:df:c7:c9:c3:6d:50:7d:ea:37:18:71:
0b:f9:62:22:bd:d4:74:6f:4b:03:b2:6f:02:80:0e:
f0:22:00:25:bd:36:20:f5:f2:c8:f9:e1:5a:30:9f:
cf:d8:54:67:e5:59:15:a2:c3:21:1e:55:82:2f:b9:
cc:a4:03:63:cc:e5:18:7f:78:22:e9:1b:30:48:e8:
b1:63:3c:29:77:88:b0:58:d8:15:57:6e:33:0b:97:
ab:39:c9:4b:55:8d:7e:1b:59:87:93:2d:71:8a:af:
76:07:0c:78:72:31:13:70:a4:83:c1:f3:d2:46:5a:
13:1f:df:76:ad:93:cc:99:ac:67:cb:87:df:94:fa:
f6:c1:13:db:94:c9:b8:6b:4e:86:ed:ac:26:21:ef:
4d:2c:81:64:20:db:27:a6:5a:71:05:93:32:cd:8f:
82:14:e5:3e:aa:9d:64:43:0c:7c:34:a2:5f:36:2b:
b9:ce:ac:db:d0:51:aa:0e:00:38:19:b9:06:74:15:
2b:00:94:5a:80:86:01:d0:9b:bf:fa:69:51:e9:96:
e9:80:7e:6f:17:bd:5b:86:30:fe:a8:d8:af:b5:58:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:3C:58:BF:06:06:DD:E0:0E:A5:47:CA:44:E7:82:FE:88:1E:A8
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b4:dc:dc:72:60:3d:2b:8f:d4:4b:1b:b2:21:ad:84:9b:de:
f2:b0:b7:3f:ad:e9:fc:fa:9c:e7:b3:72:13:3c:8c:ea:74:f8:
46:1a:2d:cf:33:80:5e:51:b1:6d:84:9b:74:1e:b1:83:01:e1:
f6:da:f9:3e:da:fa:c7:d0:a0:0d:8e:34:52:16:6b:14:a9:88:
d7:dd:8f:27:2c:47:73:4a:63:8c:c0:a2:16:80:e9:b6:87:42:
08:7d:05:a3:05:c4:76:48:34:c9:0d:4d:ad:2b:22:0c:32:90:
58:1b:43:4f:ec:0e:38:2e:06:bf:73:0e:65:b2:d9:68:2a:c6:
2d:79:6e:68:6c:33:d9:d0:87:19:f7:5f:d1:bf:84:c8:2c:5e:
92:a9:c8:05:bf:22:47:3f:bd:61:d2:4c:0c:56:df:bf:64:4f:
d7:51:95:87:3f:86:8d:08:8f:e3:a6:29:d6:3f:0d:36:3e:0c:
62:79:ca:21:91:e0:b5:f9:6b:9f:e6:fe:f0:ea:f0:a6:7a:02:
b9:54:db:75:e4:28:a3:cf:ab:18:20:6d:0c:b0:68:49:4b:02:
9b:81:b7:c3:54:50:a1:61:1b:d1:c4:7f:fc:09:f8:95:46:51:
74:76:4e:da:ff:de:8d:58:05:3e:53:77:5f:1a:01:12:76:2e:
2b:37:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:05 2026 by rpki-client