Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: czTZfr/qAjyzaoX4yAjgTRSvYOpLsZxvA/T46hFeeyU=
Subject key identifier: 2C:70:01:99:F3:EE:33:CA:E3:99:72:4F:C6:0C:7F:BA:0A:A4:1C:23
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 019CAAC679EC645647CC18AF0F6F9D1D6817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 1515
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: 8nXIbFghhbIgt8n2cEDxOIHgcvk.roa (hash: OLo/fVN4422Me1580uumZYkNJ6C1/oum8x+PWUvjDZ4=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: lL4V1g0wXC4TUhqdciL+Q/Z2L/OIvuKTMq34C1Vw44o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:79:ec:64:56:47:cc:18:af:0f:6f:9d:1d:68:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=2c700199f3ee33cae399724fc60c7fba0aa41c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:80:52:2d:96:f3:36:03:ea:74:e3:16:da:
cb:31:f9:c8:81:54:c3:16:db:50:aa:9d:0b:d2:51:
cf:b1:40:8b:cb:7e:bf:66:e0:bd:4a:9b:b7:7c:b5:
76:1b:da:d3:35:c0:42:3c:51:f6:eb:f7:fb:48:5f:
84:c0:08:ec:db:52:e9:24:45:b7:74:67:93:6c:d6:
ac:3d:d1:df:96:9b:27:9d:f1:3b:20:54:d8:50:63:
9f:d7:e6:9c:a7:63:ba:c6:01:90:47:5a:69:4d:ec:
e4:c8:c1:80:03:7a:40:51:c3:04:9f:5e:43:d9:f4:
ef:18:f1:00:9a:26:10:13:8b:2a:9e:a1:73:2f:93:
8d:51:87:4c:7b:e1:3e:70:f2:96:5e:10:27:6e:ad:
52:e9:4d:07:39:dd:ba:86:50:47:c2:ab:ce:73:d7:
1c:91:30:f8:4a:49:e2:f0:74:a9:1c:ca:bc:f1:7a:
f2:01:e9:21:a9:ee:7f:c6:51:1c:06:f6:7f:f3:bb:
42:cc:25:a3:72:d4:ba:20:25:be:dd:90:3b:fe:ae:
31:58:60:ec:fa:e4:9d:d6:13:90:80:aa:8e:68:0a:
e9:53:e4:04:6c:e3:30:fe:7f:b3:e2:37:56:d5:09:
c7:da:0b:34:06:be:55:1f:f7:00:96:b1:20:cf:10:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:01:99:F3:EE:33:CA:E3:99:72:4F:C6:0C:7F:BA:0A:A4:1C:23
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a0:6a:60:5e:21:63:01:ad:a6:34:4b:80:f1:9f:d7:ec:91:
ce:cc:98:18:f0:07:d7:3c:3e:c2:d7:f0:05:bb:9d:c9:e5:aa:
de:e3:c3:4b:d9:d3:ae:53:93:19:e6:cb:f3:e5:16:26:c1:ec:
49:e8:58:47:c2:41:d3:67:aa:ee:a6:1f:19:d1:86:80:2a:b0:
b0:16:02:7a:cc:15:eb:13:77:22:7b:18:66:b9:d0:66:0f:df:
6c:5d:1e:69:d5:d2:ee:89:c0:d5:9c:15:5f:18:a8:bd:fa:5e:
f3:d2:51:df:29:13:7c:96:2b:72:1f:77:50:c6:28:36:44:6b:
89:de:c0:e5:c8:17:f3:d9:65:1e:14:3b:c9:9d:91:e8:ea:9a:
be:78:91:50:fc:0c:0b:3c:d5:b4:4b:64:dc:d2:c5:03:ed:cc:
94:dc:b6:d9:f0:85:df:d6:2f:94:cb:88:e6:4f:79:c1:89:c6:
69:37:70:0d:1e:b8:0f:19:c6:85:1d:bd:0f:8d:45:98:a3:ce:
a9:34:44:09:a0:4b:fc:1a:ec:e6:b2:1c:49:1e:1b:a6:05:d3:
7e:ca:9c:07:db:ce:bd:90:09:a7:11:a7:e0:ab:33:b6:b2:55:
a5:40:cc:51:45:81:72:ea:3e:e5:f9:1d:2c:a6:a4:60:ee:46:
95:af:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:10 2026 by rpki-client