Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: Z3JcHHSK0xzxZSfqW3sz9JicxIEysgteCvSr+Wfam+I=
Subject key identifier: 8A:25:ED:11:9D:85:65:BB:EF:08:69:4A:93:4B:F9:F7:64:AC:F9:69
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 019D265F59A6E20FFD31623FB457A1F981BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 12AD
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: Ewv52tXZ2+2g1UwIa5PW6QGpW6bFUKqBdOniqvjzirA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:59:a6:e2:0f:fd:31:62:3f:b4:57:a1:f9:81:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=8a25ed119d8565bbef08694a934bf9f764acf969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:ad:d0:43:df:c1:ad:15:05:b3:05:7f:d1:
5a:1d:b8:64:74:2c:ef:f5:8b:fc:34:90:c5:52:00:
75:ec:6f:24:1d:37:c0:ae:18:84:c6:59:50:66:4c:
29:a8:b4:26:75:dd:b0:0e:ca:11:b2:67:15:00:ad:
f2:fb:14:3b:11:c8:b4:33:09:3a:2f:4c:6b:f4:b5:
f0:b3:4a:6d:ea:a9:38:70:67:f1:fa:a0:fa:e4:dd:
29:74:6b:22:c9:7e:27:59:18:0e:b4:21:90:07:a0:
62:13:cc:39:eb:ca:5e:ee:34:51:08:25:16:f0:f8:
22:e6:9e:16:4d:1e:83:14:21:c6:e6:4d:9f:17:35:
48:05:88:04:74:da:29:ec:5b:05:d5:59:e9:f6:f0:
a8:30:39:73:a5:2a:e6:6b:5f:9a:31:b5:3b:f9:76:
42:0a:a1:a1:29:dc:22:4e:0d:bd:a8:5b:01:19:0b:
4f:f4:a2:39:8d:20:19:0c:ff:0f:6f:cb:87:99:01:
da:a1:b8:0f:b4:75:6b:69:b9:6f:0e:91:9e:e1:f6:
a1:3a:73:76:84:1f:bf:58:73:85:c6:fc:16:a2:28:
ab:84:d8:ce:4c:7b:0f:dd:4d:f9:e3:65:cf:69:ff:
7b:2b:33:78:22:12:00:11:f5:e7:38:6c:87:c9:dd:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:ED:11:9D:85:65:BB:EF:08:69:4A:93:4B:F9:F7:64:AC:F9:69
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:d0:af:83:00:68:15:7c:40:53:05:97:da:69:da:60:35:
5f:82:34:b6:e6:cb:99:e9:0c:3c:30:d7:32:d7:d6:bf:bf:d2:
f8:b0:07:b5:f3:d8:a8:b9:78:5a:86:44:5d:bf:70:f1:21:bd:
db:ad:eb:7d:9a:41:85:ce:4c:5f:49:bc:54:76:0f:d4:dc:4f:
0c:e0:e8:cf:bd:f2:59:3b:f4:be:72:7b:35:98:9e:f3:42:53:
05:b8:a2:8e:9a:2a:ea:81:95:eb:76:a7:c9:94:a4:20:5b:85:
40:03:a5:de:9f:56:c8:3e:1f:3b:95:e4:3b:84:3a:d4:ec:bd:
f6:94:75:16:70:e5:73:c2:61:d4:f5:bb:b0:17:cd:65:09:e5:
f8:51:a0:cd:9c:ba:b0:c4:31:50:a2:73:b7:cd:e0:c3:15:5f:
25:0e:09:20:96:d4:6f:32:ff:67:1d:06:d2:25:db:32:74:4c:
2c:9a:65:ba:d6:cf:1c:ca:85:e3:71:12:cf:9d:e5:8d:49:62:
94:34:cc:bb:33:1c:7a:6d:66:42:a6:4d:83:27:0b:d8:2f:1e:
b8:b2:9e:c5:f5:2d:6b:1a:9f:86:5c:f4:d8:ad:78:1a:a4:64:
79:82:c9:d6:4f:90:32:5d:10:00:e3:ae:52:5f:24:e0:9c:2d:
09:7d:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:32 2026 by rpki-client