Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: HEe1/0zmfOOEJZt/1RQu+TU3x5+Xq3wGYh/VkEzRXJQ=
Subject key identifier: E1:F4:B9:7F:EB:91:7B:58:0D:69:6F:43:32:C4:C6:1B:0E:39:9B:1B
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019D98BD85D9AEE27DDADBF4F6E03919205B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 14CE
Signing time: Fri 17 Apr 2026 00:00:50 +0000
Manifest this update: Fri 17 Apr 2026 00:00:50 +0000
Manifest next update: Sat 18 Apr 2026 00:00:50 +0000
Files and hashes: 1: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: x/VSivuFXbX5HDZcY5AcyC1DbLw9zW8mdvKwJ9bNbf4=)
2: lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa (hash: d0roMsqX9vnomDLuPDxCBkqVZxb8IXHny4aGCS66Mnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:85:d9:ae:e2:7d:da:db:f4:f6:e0:39:19:20:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Apr 17 00:00:50 2026 GMT
Not After : Apr 18 00:00:50 2026 GMT
Subject: CN=e1f4b97feb917b580d696f4332c4c61b0e399b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:3a:31:c6:1c:f2:de:57:9b:df:11:28:a6:
3f:a8:5f:0e:ba:83:03:2f:35:29:83:f8:20:dc:ed:
30:63:83:18:61:13:8e:7b:b3:5e:6d:98:7d:ae:46:
25:3b:1a:e6:4f:cb:38:e5:7d:da:25:9a:0d:8d:b4:
fb:c4:eb:06:5a:22:3f:73:66:4b:e8:3e:f6:71:f6:
3b:1d:42:27:64:db:3e:88:33:da:25:ae:98:c5:dd:
3c:3c:27:32:6a:98:fe:52:05:60:0e:fe:0d:52:0c:
49:b9:16:bc:85:98:8c:a1:51:4c:db:fd:16:4c:70:
91:6a:08:c8:56:b2:94:16:2f:81:f9:08:90:c5:db:
e8:f3:51:d8:0a:fa:01:ec:c5:3c:97:8d:b9:a2:97:
a0:b6:47:12:a2:e5:a2:c8:6b:71:c5:be:5d:2a:db:
97:34:c8:37:40:45:e9:70:3e:b0:35:2e:e8:5b:9a:
eb:4c:79:2f:b5:10:96:bd:da:43:7e:5c:e9:0f:f8:
de:b4:d2:0d:6a:85:37:96:fc:19:cf:1b:5a:c4:1f:
be:7b:22:7c:8d:5a:b2:ef:73:47:d5:0f:43:1b:66:
47:99:f5:62:b0:03:36:91:42:5f:e4:45:56:72:f9:
fc:49:d7:81:e7:86:b4:92:ac:d5:59:a0:4f:de:0e:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:B9:7F:EB:91:7B:58:0D:69:6F:43:32:C4:C6:1B:0E:39:9B:1B
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:51:17:ca:86:52:ff:e2:0b:fe:dc:f4:1f:2a:34:1a:5b:
cc:74:d2:5d:a9:16:5f:b2:1e:06:a8:93:6b:20:89:28:f1:de:
e4:86:09:4e:9f:bc:3f:38:95:3f:ed:54:90:30:07:fe:a8:28:
61:e0:99:ae:52:9e:f5:d9:74:f2:b0:6e:55:c8:83:40:fd:f3:
15:a1:e1:37:15:05:2f:cd:77:40:4e:1a:06:43:37:71:f7:f2:
86:04:90:65:c2:d2:6b:58:93:94:44:75:c9:1c:e9:f7:45:ba:
5b:25:c0:c8:60:32:78:28:7f:4a:22:5e:87:4d:e9:32:23:bf:
0d:46:e9:4a:a2:ec:b9:18:30:a0:2f:68:51:44:9a:27:47:86:
49:d5:2e:74:20:17:41:da:a8:a3:41:7d:62:5a:0c:f1:91:c3:
17:af:d9:2c:b2:47:2d:cf:78:52:30:a6:14:05:9f:3a:01:94:
22:36:e5:bc:b0:06:10:c3:d7:59:73:18:0a:00:45:a7:82:01:
1a:6b:d8:ee:76:67:97:2f:56:0d:7b:ef:c5:5f:c1:92:68:65:
28:c5:54:59:cd:26:d6:c8:5c:18:73:eb:ae:74:ea:89:30:11:
b6:f7:2e:41:30:96:98:56:9b:a8:30:ee:ce:4b:4f:a8:34:ba:
56:8e:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:07 2026 by rpki-client