Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: WOg0chWG8Cjf9NDeLvWPUybMkJBVWvBUfkGRuVe1/y8=
Subject key identifier: 16:3C:38:D0:8F:0D:3D:6E:6F:66:C5:9F:40:AF:E0:24:DB:69:D6:F0
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019D284E03C212298AFDCDE1B241A90254E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 0663
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: GFIibP3fcCQAXue-pLs_MEmE4aM.roa (hash: vZPkadzf5zT9TuSZwyNbMA/XV23iCETvdmYU8OniDec=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: 01E5LUxdYXREB0iM9WBBd0fb87XZh7ycOVlS3QfxLGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:03:c2:12:29:8a:fd:cd:e1:b2:41:a9:02:54:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=163c38d08f0d3d6e6f66c59f40afe024db69d6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:58:c2:d9:3e:ff:ea:f0:55:49:da:fb:14:
d0:cf:3f:06:77:8f:ce:a4:04:2c:bc:d8:00:ba:c3:
50:c9:4a:a9:a0:14:09:68:05:98:2a:34:ba:68:b5:
6e:7b:ab:28:85:44:04:15:17:53:e4:0e:36:32:8d:
d3:0f:39:26:02:63:ed:08:40:9d:a2:23:52:31:54:
1a:a9:5a:ae:29:1c:ba:dc:17:03:9d:28:2e:0a:fb:
27:7c:5d:2b:04:de:a1:45:9e:1c:ba:b0:22:b4:af:
60:31:2f:a8:d4:45:5b:4c:c5:de:0a:aa:53:2c:13:
4d:35:e9:2c:27:45:9e:7a:cc:bb:06:b2:46:4e:3a:
8d:6d:e5:b4:2e:d4:96:b7:06:33:7f:29:35:c4:72:
e9:29:ec:ac:48:3a:97:00:c5:9a:b2:2d:29:de:c9:
aa:7a:b2:39:de:b3:76:fc:88:91:3f:ee:7c:50:24:
28:fa:e2:3c:00:b6:54:29:2c:ed:22:3a:89:37:d1:
35:77:69:d3:0d:15:2a:27:1d:86:91:15:e6:84:95:
35:34:46:2f:fa:a1:06:9a:34:c8:bb:5c:7f:13:3f:
9e:25:03:37:50:52:50:5a:7e:96:fb:bb:39:47:38:
94:34:07:b7:67:17:e8:9a:9b:2e:8b:c0:53:0f:0f:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3C:38:D0:8F:0D:3D:6E:6F:66:C5:9F:40:AF:E0:24:DB:69:D6:F0
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:54:9c:0e:ea:52:92:4f:e0:2a:17:0c:50:29:a0:13:6b:80:
82:5c:cb:fa:63:ae:b0:66:92:6a:d8:32:c6:f0:30:6c:09:fd:
63:dd:9b:4f:75:fe:b8:27:5c:bc:b0:e0:0a:f8:18:9a:68:9f:
2f:4b:bf:34:9a:fa:a6:63:12:e9:50:21:3f:61:52:39:88:b0:
32:78:38:02:87:18:94:d0:69:26:4a:ea:57:3f:f8:4f:06:63:
18:46:f9:0e:01:df:d7:8a:23:46:c2:c2:16:2c:a5:f5:5a:1d:
5a:2b:63:6b:98:f7:80:fa:44:b7:73:4a:79:57:d5:8f:8e:cf:
c8:40:b3:27:c5:e4:87:4b:24:12:29:96:66:90:70:0b:fc:02:
e8:47:47:e7:11:29:97:72:5a:5f:7d:50:bc:d1:a3:f2:b3:87:
78:fd:e6:44:3f:97:1a:5f:4f:71:43:99:9d:13:e6:ad:e9:be:
7d:28:65:85:e3:ec:da:60:da:de:80:f4:22:d0:b9:48:c6:83:
50:8c:ab:f6:88:70:58:9a:75:a2:25:41:7f:12:8f:c1:73:90:
36:66:32:9e:6e:91:8b:c7:29:22:c1:2f:0c:cd:1a:31:b6:78:
48:0f:70:f6:5a:39:55:63:9b:95:46:4d:74:13:7a:6f:fb:53:
df:86:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:03 2026 by rpki-client