Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: oShtHt1y9Ugzp/5JHWk+agnvIo4/ZGpI9bt9kvP4SK4=
Subject key identifier: BF:8B:17:CB:E7:1B:EC:76:51:9C:68:7E:20:A2:9C:88:D0:51:74:22
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019CAC10279BE69CD1D479ACE8767C59BC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 0567
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (hash: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs=)
2: arPUcXSO6F2hXmotLmbEkPslkyo.roa (hash: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0=)
3: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: DOXdsLb/+r9YmQpfiJk2nROu/0UzypAoAkCLQff4sN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:27:9b:e6:9c:d1:d4:79:ac:e8:76:7c:59:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=bf8b17cbe71bec76519c687e20a29c88d0517422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:58:54:3d:ae:aa:42:7f:7b:9b:ed:e0:11:
a5:86:61:41:82:99:df:5d:67:0c:21:e3:41:c7:17:
5f:56:0f:0e:3a:25:13:b0:a2:85:d8:63:1d:d0:08:
ca:9f:5d:d4:9a:45:b3:00:12:b3:9d:f7:bb:3a:50:
28:91:c5:fe:61:2c:8b:ad:99:11:a6:47:9f:2b:4f:
42:b9:ed:99:73:b5:5d:52:76:6b:e6:eb:d5:68:b8:
59:7c:28:2e:d7:a8:db:20:fd:9b:2d:e5:a1:8d:c7:
c7:8b:9a:87:36:cc:69:e0:fb:07:0e:7b:ad:22:6c:
da:1d:e6:0f:0f:ba:03:05:32:88:df:22:48:d0:d2:
c9:33:d8:82:b8:e0:35:e1:57:0d:27:93:0a:84:9c:
c6:18:c7:04:ed:51:a3:ef:a6:4d:92:fa:d2:29:ae:
8f:e9:83:14:01:83:2f:b8:b1:db:af:03:19:d8:94:
dc:26:22:16:b7:48:35:af:46:b8:3e:ca:ee:e3:49:
f7:b4:0c:8d:2c:25:b8:c6:c9:78:dc:08:27:aa:61:
b6:9d:22:b3:74:87:cc:29:08:5b:f0:ee:cd:96:c7:
aa:f9:8f:a0:c0:06:ea:21:18:4e:68:12:b5:34:50:
a8:8b:71:73:67:bf:fb:5a:c2:7d:1e:10:c7:b5:27:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:17:CB:E7:1B:EC:76:51:9C:68:7E:20:A2:9C:88:D0:51:74:22
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:92:98:80:0d:3f:60:65:98:6e:40:e8:89:04:43:bb:55:
58:be:3d:57:ac:22:78:6e:69:c9:09:c3:fe:02:e4:13:e3:c5:
17:a3:43:fa:f2:f8:c3:56:04:44:95:2e:af:8b:8b:28:3f:6b:
ec:7c:72:0c:46:c1:96:4a:08:ac:5c:ec:09:f6:7c:5b:09:7e:
f4:39:7d:d8:d4:47:4b:2a:c3:97:97:c4:09:df:7d:a1:76:f6:
f7:d3:b4:37:8e:d6:53:1f:99:65:50:98:6e:9a:ba:13:b4:44:
ad:cb:9a:b3:03:a6:72:a1:e1:4d:ef:be:a3:99:33:10:5f:60:
5e:34:bb:18:a6:fb:dc:c1:4c:5a:32:b6:da:45:14:1d:10:cf:
c0:6a:c6:ec:27:9e:93:1b:6f:71:50:41:79:d7:f7:15:99:73:
a4:9a:3e:9c:36:ee:21:44:d4:01:3b:83:6b:bb:a1:e2:cb:96:
8f:1a:64:6e:e8:e4:73:7b:9e:69:de:2e:97:0e:23:06:0e:54:
c1:35:57:6e:e7:31:5c:90:44:18:8c:8c:f2:24:56:aa:47:e8:
af:46:6c:01:f3:a1:9d:81:54:4f:ea:32:68:45:54:5d:23:cd:
f7:9c:4d:8a:f1:af:ef:9c:54:ea:1e:be:78:27:3e:50:de:5d:
53:a2:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:29 2026 by rpki-client