Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: 6oIpsktr7iJeb4XfsfJECVPO2TgI5sPbk2sMr0qXric=
Subject key identifier: C6:9C:79:10:C3:14:23:CA:74:A3:94:68:2D:D7:21:32:D9:BA:57:F4
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019D25F110497EDDD3C7C2D8A6BB3B1FC35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:00:48 +0000
Manifest this update: Wed 25 Mar 2026 17:00:48 +0000
Manifest next update: Thu 26 Mar 2026 17:00:48 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: Y5yhYQQNGvmoplgFhv0j+KXYRvUYEUA03lkZIIfXjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:10:49:7e:dd:d3:c7:c2:d8:a6:bb:3b:1f:c3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Mar 25 17:00:48 2026 GMT
Not After : Mar 26 17:00:48 2026 GMT
Subject: CN=c69c7910c31423ca74a394682dd72132d9ba57f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:6c:70:e2:b8:a3:86:53:12:df:f3:e3:25:
22:71:c9:e9:8b:d6:48:f3:90:44:ec:42:b4:80:01:
47:dd:78:74:6a:8e:37:d9:64:3a:7c:3f:f3:7b:a3:
0b:4e:e6:79:d4:0e:e3:7b:9b:3f:44:45:b7:e1:8a:
f4:3e:4d:1b:65:a8:af:1b:ca:9b:84:be:7f:36:a6:
1b:f1:fa:ec:c4:aa:34:87:66:ed:33:d7:11:6c:4d:
04:fa:7b:39:75:2c:a9:02:3b:f4:14:e2:2a:9e:a9:
a5:c5:be:8d:eb:f0:2c:b8:05:b6:4e:f8:40:fa:03:
7c:6e:5b:87:ad:cf:a0:36:6e:1d:4e:d4:73:5c:50:
3c:97:9c:6b:6b:35:2c:29:9b:54:53:26:64:54:fa:
39:7f:db:48:52:0c:45:ea:5d:0e:be:ca:78:45:a7:
24:2f:c6:eb:6a:5b:a9:ce:42:5b:e0:32:bc:99:c8:
a9:f8:d1:b7:f1:22:bc:7c:ec:fb:71:f8:e3:56:a9:
7c:d1:8b:29:bc:93:e9:f6:b7:67:84:19:fb:3b:4a:
cf:0b:a7:9e:9a:c6:ca:16:4e:14:c8:c4:d6:50:03:
74:60:6f:50:a5:d8:88:12:ea:06:f1:7a:1c:7f:53:
fe:f2:a0:90:e6:6b:e7:c3:7e:ac:0b:6b:3f:04:86:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:79:10:C3:14:23:CA:74:A3:94:68:2D:D7:21:32:D9:BA:57:F4
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1f:21:15:92:91:ce:ea:9f:fe:d5:b6:8f:2c:41:ab:d9:f5:
44:dc:cf:af:f5:3e:b1:f9:24:a9:ae:39:e7:54:e7:98:b2:21:
b9:e5:28:a0:ab:5b:37:12:c9:2f:7e:52:70:57:74:1f:30:64:
b7:8d:23:3a:2b:0a:52:64:07:d6:58:6c:db:41:1f:5e:3d:68:
b9:73:f0:a7:53:70:79:81:c2:68:29:f0:78:a7:b8:a4:e2:3b:
bb:4e:f3:81:c4:bd:6f:e3:eb:2b:6d:fd:c0:23:0a:8b:f1:d4:
f8:ba:88:16:f5:b7:e9:02:88:34:26:e1:a7:74:79:7d:fa:f8:
ef:1c:66:25:18:b5:8d:3d:0d:6c:72:dd:2d:ce:c5:a6:82:ac:
03:63:20:22:e3:33:83:8f:7a:51:90:7b:b8:67:4a:d8:ab:b3:
16:13:25:44:44:7f:a2:27:03:dd:79:c1:b7:9e:27:3f:19:07:
1a:af:43:00:84:05:ca:a5:71:20:8b:e9:a8:e2:5f:6b:ba:7d:
92:78:2d:e1:7d:f1:de:68:8b:c2:2d:60:47:90:16:d9:06:20:
38:1b:cb:15:c5:d6:44:c0:6e:9d:b8:e0:02:04:af:7b:fc:32:
aa:6b:89:44:d6:67:fd:bb:7f:e7:8e:ba:71:a5:a3:40:b0:68:
b8:14:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:10 2026 by rpki-client