Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: lqdBnOelQDVd6I6vGZ5nK8iCw85uk+g5o154HOkyCnI=
Subject key identifier: 0B:22:1C:A9:C8:3D:8A:CC:40:7A:52:03:7C:5E:BF:13:CD:8B:FF:1D
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 019CADC756808890637C4B9E6CB5ADA3E2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0551
Signing time: Mon 02 Mar 2026 09:00:48 +0000
Manifest this update: Mon 02 Mar 2026 09:00:48 +0000
Manifest next update: Tue 03 Mar 2026 09:00:48 +0000
Files and hashes: 1: 9IHrAt44QyoQXEQYn8yZd1FCGBU.roa (hash: AqcqSMjwHuNGwoWeAKqJtnJMa/jkdc0IN4+ezx8SqwA=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: 2p5vLpk6TS/uidP2w4nVpb/mQal5FEHAMM5RbmBjQQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:56:80:88:90:63:7c:4b:9e:6c:b5:ad:a3:e2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Mar 2 09:00:48 2026 GMT
Not After : Mar 3 09:00:48 2026 GMT
Subject: CN=0b221ca9c83d8acc407a52037c5ebf13cd8bff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:78:d0:04:a5:2b:a9:70:42:64:0a:ee:e2:
83:b8:73:ed:9c:ff:36:2b:7f:94:0c:d8:54:0e:99:
a1:c7:82:cd:a3:91:c1:33:cc:43:f7:87:48:1f:48:
66:79:31:08:b3:b8:3d:99:62:f7:eb:75:da:58:66:
aa:a9:ba:10:0c:15:38:a5:78:6f:d3:c8:7c:df:50:
48:c2:8f:bd:9b:1e:db:80:51:43:c5:46:02:f4:7e:
7b:40:b9:b9:04:df:33:34:a6:e2:a1:b6:86:63:21:
a0:b7:36:1f:4e:d6:0f:c1:83:1f:0d:2d:11:9a:c4:
2c:23:e2:fa:da:0f:6c:23:d3:f0:4b:7b:4a:c6:91:
b3:17:4c:6e:69:93:a2:c8:e5:3b:a1:f6:39:ee:fd:
fc:68:20:d4:f3:a0:25:99:d2:a0:5b:9c:e9:45:05:
be:46:26:06:a9:9a:aa:48:cf:14:19:6f:a9:46:98:
98:4a:d3:b3:93:44:3e:00:ea:b9:5f:14:c4:30:01:
3c:ce:60:fb:cc:7c:a1:0b:0f:e7:66:10:e7:b9:4b:
f2:79:ed:5e:92:d4:be:c6:0d:b5:d6:71:75:ab:d4:
b9:fd:ca:df:14:c7:c5:11:ec:c9:cb:39:70:3c:5e:
49:3c:24:93:9c:ec:55:30:7e:64:43:94:c5:44:ba:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:22:1C:A9:C8:3D:8A:CC:40:7A:52:03:7C:5E:BF:13:CD:8B:FF:1D
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:40:68:a2:51:17:40:92:0b:5d:d7:3a:fe:0a:3a:60:15:55:
82:92:3b:df:81:c9:b4:dc:72:53:51:9c:1a:29:3c:f3:e6:e7:
e7:f5:f3:c9:03:7b:b2:b7:c1:58:04:b1:6c:c4:89:e2:8d:e9:
6f:d5:ff:12:bc:98:e4:71:85:d2:3d:95:06:a5:8f:d6:5b:4b:
33:cc:be:a8:74:7c:64:0d:df:15:6e:5d:7a:33:2d:39:48:10:
f7:ba:b9:60:b8:da:2e:74:65:5c:97:b7:37:e5:1e:12:c7:97:
d1:a1:92:6e:63:73:0f:f9:2f:f8:8e:80:52:e9:e2:5f:99:ab:
21:a7:14:18:be:05:bd:cb:b9:51:22:06:bd:2d:6e:40:ad:99:
d1:43:3e:dc:5f:83:b7:c6:d9:7e:86:1b:11:3a:d4:33:cd:e1:
e3:10:3a:0b:ef:d7:aa:ba:11:93:6a:a7:4a:f4:0a:20:fe:f6:
a4:05:a7:75:6b:9e:38:bd:6b:09:50:27:8d:79:42:ab:cd:bf:
15:1b:02:bc:c5:7d:c1:12:0f:2d:f5:e9:af:b4:3f:a9:50:62:
b4:b9:34:e9:57:f7:7c:b3:62:6c:82:c7:87:3d:df:ea:1d:ac:
92:46:c2:b7:cf:44:d8:7d:b9:60:4e:2a:c6:14:eb:4e:0b:37:
2f:06:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:10 2026 by rpki-client