Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
File: lfdgXoUMnb8X2vC6OONvzGPCy_o.mft (raw, json)
Hash identifier: dNJ0iQkLS9UURgE+eZd+BYjdwnC+OvfGnf6KZWotH9Y=
Subject key identifier: C1:28:67:FB:58:64:A3:0E:D7:9E:BD:2B:FC:E7:80:82:F2:A8:DB:7E
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 019CA9EAE571FB512F399BC5581802A26652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:09 +0000
Manifest this update: Sun 01 Mar 2026 15:01:09 +0000
Manifest next update: Mon 02 Mar 2026 15:01:09 +0000
Files and hashes: 1: T3Gte_sAcOYHDUpylqXZ9Stq9po.roa (hash: Z/AdHSzAsTqsVCU0cNeiAf6MSfmrxAUqR0oWpvYC1ec=)
2: lfdgXoUMnb8X2vC6OONvzGPCy_o.crl (hash: U91eUWbV0DvVLqMFEYD8v/JNxk0IMyGbGkX09OX6Cg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e5:71:fb:51:2f:39:9b:c5:58:18:02:a2:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Mar 1 15:01:09 2026 GMT
Not After : Mar 2 15:01:09 2026 GMT
Subject: CN=c12867fb5864a30ed79ebd2bfce78082f2a8db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:b6:8a:4b:ce:7a:44:7d:2e:a2:ca:e2:b8:
cb:fa:0b:63:47:36:94:0a:cd:5e:f2:22:93:64:a4:
db:e3:ca:e7:2f:8c:90:4f:22:42:fb:ae:6c:46:26:
69:c6:67:66:2c:55:bd:8e:72:72:18:1d:12:22:88:
22:93:c6:9f:ad:fd:84:a2:32:4a:25:7e:a8:cf:7a:
7d:d8:21:9c:b9:fc:cd:77:7d:e2:a2:e8:5e:e3:fd:
45:fb:45:b2:7a:cb:c9:97:f6:2a:34:1b:3d:3f:b9:
37:87:3c:3b:d5:ae:be:83:44:a2:c9:d2:7b:19:a3:
66:5a:6f:0e:e1:ba:10:40:34:62:33:a0:d0:42:df:
54:26:67:30:79:c1:23:88:2a:49:d7:e3:51:fa:64:
a0:a3:ed:18:a2:e0:20:51:40:b3:8f:24:f8:06:31:
d4:cb:6b:f7:68:12:e0:f1:4b:f1:81:bb:6b:d4:5e:
6b:46:60:45:4e:33:9d:c9:63:36:bb:b0:8d:78:5a:
b6:03:8e:93:8e:4f:87:66:8b:9a:ad:eb:3f:c5:72:
36:2c:90:0d:8d:9d:e3:fc:ba:50:a7:1c:88:49:47:
8f:5c:74:cc:c6:6e:4c:e6:b4:6c:ec:af:bd:63:2f:
84:e6:f6:83:e1:81:ac:85:fa:f0:09:52:41:d0:75:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:28:67:FB:58:64:A3:0E:D7:9E:BD:2B:FC:E7:80:82:F2:A8:DB:7E
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:48:e5:0a:d4:ed:c3:b0:cd:e8:c8:03:88:a1:b3:42:49:29:
4e:49:0d:5b:4c:60:93:ee:5a:da:12:67:f6:1d:5d:e8:75:6b:
6b:f9:d5:61:f1:ff:9e:bd:53:6f:f4:73:2d:26:63:de:5a:d9:
d8:95:02:52:d1:3a:42:14:40:09:43:eb:65:4c:e2:30:a3:5d:
82:42:c4:de:76:a2:2e:b6:f5:61:a3:26:a7:54:66:ac:38:74:
1b:d2:df:de:f4:ac:44:01:6a:32:ae:a5:a5:4d:83:f2:be:a8:
39:1a:a3:67:6f:7f:59:71:f3:71:62:a8:69:79:a5:fa:c8:55:
8a:5b:13:b0:bd:e3:ef:6a:bd:09:46:25:d5:04:e8:5f:15:46:
fd:35:50:f8:e7:23:39:04:95:72:1d:b3:9f:cd:20:91:72:ed:
c1:10:05:d4:8f:d1:3c:48:16:07:e9:a5:e2:72:5c:95:94:a8:
42:a8:aa:fa:24:f8:1e:e7:9b:04:2f:44:f4:a3:4b:60:b8:7b:
dc:cc:01:80:1c:df:25:ec:3d:48:99:17:c5:c6:e0:ad:9d:f5:
ff:82:b0:3b:96:56:ca:66:11:75:94:61:e8:db:61:bc:55:0b:
28:de:0b:79:88:ec:62:35:50:82:b1:b5:40:ce:eb:94:a2:84:
53:a9:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:26 2026 by rpki-client