Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: WIYepj/5Bky+jTEKmKlCmnmjeNWM4Ds6hTZFRH9mUn0=
Subject key identifier: 5A:79:7D:92:C6:13:C2:CE:D4:6E:38:01:74:CC:9A:A7:B8:DF:AF:8F
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 019D337565C6A87136FBB0CFED879B90783D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0CF9
Signing time: Sat 28 Mar 2026 08:00:24 +0000
Manifest this update: Sat 28 Mar 2026 08:00:24 +0000
Manifest next update: Sun 29 Mar 2026 08:00:24 +0000
Files and hashes: 1: HAZA6F3BwOd0IfWybSlNKmtev0c.roa (hash: gALftZc7LvU74tun0cfmm/0H5zwtdsQqdDGCiEp/ba4=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: qkK1fu9dGdY+dpNwrNPAKxI//8wgrON3Ia9fyws5fZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:65:c6:a8:71:36:fb:b0:cf:ed:87:9b:90:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Mar 28 08:00:24 2026 GMT
Not After : Mar 29 08:00:24 2026 GMT
Subject: CN=5a797d92c613c2ced46e380174cc9aa7b8dfaf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:33:e1:8e:6c:4f:f7:15:21:40:ac:80:3c:10:
cf:ba:86:ad:b4:8b:d9:e5:70:65:bc:82:83:79:17:
4d:27:73:25:02:3b:a7:6b:87:62:47:aa:ec:d4:ea:
4d:8d:8b:8b:9a:86:3c:cd:2d:ea:6e:21:09:cc:ab:
4a:4a:fc:ee:b6:85:42:36:6d:2d:15:b7:4d:d2:18:
38:79:98:12:b7:75:23:5f:9b:76:e5:dc:db:06:aa:
3e:e1:fd:f2:59:88:e4:59:5f:d9:3b:c5:e9:c5:d0:
68:57:d7:53:b3:15:0d:c7:3c:41:86:c8:82:21:38:
03:73:66:3e:d9:6a:bb:13:6b:c9:b1:4b:a6:95:18:
5a:65:ec:0f:ec:e0:b4:e9:15:e6:ce:fc:b4:53:8e:
3d:ea:7e:82:51:4f:e7:66:08:57:d1:3b:b6:7c:89:
33:6a:4c:28:2a:d8:53:58:fc:dc:20:1b:52:5b:42:
32:4e:22:5e:30:2e:ff:68:5a:f7:9e:bc:fd:a6:a4:
21:2b:f9:0f:af:3c:30:c0:81:12:7a:c1:50:ed:2e:
8e:11:18:d1:b9:d9:45:13:5c:8f:d4:db:71:a9:d6:
02:a4:02:1e:12:e5:b2:80:ce:ad:f7:d4:84:64:cf:
c7:44:98:79:57:c7:c2:04:32:7c:cb:02:06:5d:92:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:7D:92:C6:13:C2:CE:D4:6E:38:01:74:CC:9A:A7:B8:DF:AF:8F
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:c9:64:ef:f7:77:8b:01:93:07:cb:df:50:29:f7:26:fa:
e8:04:13:c9:39:df:be:01:72:4f:e1:a3:d2:a7:11:32:2d:6c:
03:f9:12:47:fc:f3:05:ce:60:68:5b:9a:c2:4c:62:80:b4:b8:
6d:6a:5a:b0:a1:73:e5:87:5b:ef:c4:b2:23:cf:df:48:65:69:
3c:c5:eb:c1:0f:92:6d:e6:6d:d6:7b:48:b8:a4:58:9b:0b:a2:
c6:6e:84:8c:4b:1d:58:89:53:88:7f:e9:ca:c4:2a:f2:88:09:
0c:29:7b:53:31:5f:33:e0:78:68:a1:08:c2:03:04:01:38:84:
a5:fe:63:7d:e0:c5:ce:07:35:85:7f:c9:c7:4d:e7:6d:f4:39:
95:10:c1:87:a6:59:c7:b6:dd:95:20:93:8d:14:67:21:fe:d5:
c6:5f:e9:bd:77:30:a3:a5:90:c9:9c:45:90:94:be:c4:cc:b1:
cd:65:c5:a9:44:54:d5:8b:a0:a6:8c:2a:87:5d:99:e6:6b:03:
62:d0:9a:ef:6d:77:e2:c9:e9:ed:62:ca:32:67:46:b5:31:be:
a8:3f:64:c4:3e:01:5d:0d:34:89:44:ec:b3:f9:36:15:47:1f:
9a:e0:ea:9e:f3:1b:5e:f5:20:61:7c:92:24:8b:ef:14:62:b1:
98:a1:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:14 2026 by rpki-client