Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: j/gqY+ANTV/ZeLfw9xC12XvJJHRLUMXRwLuUO8DpvB8=
Subject key identifier: 74:11:B8:EA:A3:8B:4B:46:69:BC:2E:4E:87:05:3B:31:1E:80:65:3D
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 019D2771C0C7A525F10E8C219590215DB281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 059F
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: 1teBGWyrdeMcfN_5PnazQXWLD1E.roa (hash: WrL5v9AFdVY6509NouX1fyjcl0G8QjZ4sA1Zzo1jtEc=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: zO7gEA6Es16C4UOMfmtQ7UWRUlc+rI+4oOtLVkjwMr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c0:c7:a5:25:f1:0e:8c:21:95:90:21:5d:b2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=7411b8eaa38b4b4669bc2e4e87053b311e80653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:eb:10:f4:a7:8d:f5:9c:a3:1f:87:d1:25:
04:68:e2:72:09:0b:c2:aa:8a:12:55:a3:e3:65:d8:
ab:da:e8:5f:70:e4:cc:b7:09:a3:59:30:c6:c9:38:
25:d5:d8:55:c3:e0:23:dc:44:eb:bb:e4:d8:3c:ea:
32:21:f2:57:f5:c6:65:f8:fc:2f:8e:bb:07:dd:9a:
ec:53:36:87:65:35:27:e2:e4:82:29:81:83:a9:3d:
95:57:87:32:c4:db:69:bf:95:66:55:08:76:b9:a5:
37:a1:b7:38:39:58:77:3e:28:29:68:25:cb:de:63:
4e:d3:52:ca:7b:bd:49:fe:2a:99:1b:83:5f:9e:f9:
d1:1f:e0:bb:be:45:a4:d1:b3:f0:8e:82:07:8d:a5:
6f:71:e2:95:70:e3:15:3e:b4:f3:08:52:5e:5a:7a:
db:5b:b0:89:b9:dc:2a:8a:e7:5e:71:d3:39:c7:2d:
6c:db:a1:ac:ce:78:43:8f:be:61:d7:87:e4:fe:42:
5f:db:6c:37:c2:0f:da:28:23:a2:8b:07:eb:fd:57:
fe:1c:74:31:3d:b3:ed:7b:e1:23:49:b4:bd:f4:da:
56:c2:f5:c9:95:d8:68:5a:8a:c5:51:72:ca:98:6e:
f0:18:1b:14:52:11:e9:dd:a8:0e:72:c1:94:ec:5a:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:B8:EA:A3:8B:4B:46:69:BC:2E:4E:87:05:3B:31:1E:80:65:3D
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:19:bb:58:49:df:2c:26:86:88:ed:3e:42:b8:24:be:88:58:
d1:20:98:d7:3a:c1:56:c1:ef:a8:fb:be:52:7a:16:3d:c6:89:
70:35:5f:19:19:e6:14:5a:83:bb:07:d9:91:59:eb:40:93:48:
ba:99:50:10:38:c2:58:a2:f2:2d:47:39:61:7f:02:6f:01:a2:
fc:c5:e4:da:8e:26:57:ff:e2:57:21:86:f7:9a:2a:92:e5:5a:
5e:ce:99:60:30:5c:92:07:73:4c:ca:20:d0:ac:c0:dd:7b:34:
b8:8f:c3:41:5a:dc:08:67:86:83:45:5f:be:62:76:20:86:77:
2d:38:7d:71:b1:24:f2:5a:4d:d5:ca:bd:6e:ae:16:01:50:48:
21:7b:60:ef:8e:31:b7:41:1d:a0:db:4a:88:89:a9:1d:5b:f7:
1d:8d:e3:2a:88:93:db:89:77:ff:a3:a0:3e:63:3d:11:a8:e3:
a5:4b:11:72:41:b5:f3:d8:c1:b8:0f:96:7c:70:e4:67:d2:28:
4d:57:e4:1e:1e:39:21:38:ad:79:7a:87:04:f1:8f:a7:c2:55:
4e:9d:bc:59:e4:d6:36:41:e9:ce:f0:54:ae:2a:c0:57:d0:8d:
2b:61:46:82:4d:e8:25:75:c7:8e:d5:f6:83:0c:32:d0:fa:a6:
20:8d:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:32 2026 by rpki-client