Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: y4PrdBZUNc9oHF5gOVkWR4oa7/zX1wp9VqW29Rh2J8o=
Subject key identifier: 4E:32:F0:DF:B8:82:EA:B2:41:8D:A1:58:B9:5F:BE:8C:D9:E3:4D:25
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019CAB347A8FC54D571E65C38933A560548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1453
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: 9Zow5EfluybWufFd7UQZqd138cTzh5BvVL8cGnvZlW0=)
2: lkOGQ8G7v7KQ2Y0qWOrKVoZYTms.roa (hash: d0roMsqX9vnomDLuPDxCBkqVZxb8IXHny4aGCS66Mnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7a:8f:c5:4d:57:1e:65:c3:89:33:a5:60:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=4e32f0dfb882eab2418da158b95fbe8cd9e34d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:2e:81:3e:63:e0:c2:10:5e:5d:22:f8:d4:
17:6d:3a:8c:3e:21:8c:95:a0:65:08:c0:b7:73:0c:
3b:49:17:da:93:4b:ed:42:4b:8c:0c:99:e0:10:c3:
96:91:a7:ee:df:cf:8d:e5:9d:44:9c:b5:b0:3b:d8:
e4:cd:a1:9d:0f:7d:fe:90:da:a8:94:af:98:bd:b0:
31:fe:4d:5c:f1:2b:0b:a7:a7:21:1e:98:60:61:1c:
87:cd:1b:5d:69:94:07:1a:75:63:da:4d:f6:07:8b:
cd:bf:88:f0:2a:fa:3f:e3:92:1e:8e:2d:f4:5a:ec:
1e:2c:c4:c5:c7:2b:3a:3e:94:27:1d:c6:7f:af:1e:
1f:b8:d5:de:c6:b0:2e:94:05:b0:71:d5:bc:d5:f4:
06:74:65:ba:f1:4a:01:75:ad:f1:a5:0b:fb:3c:d7:
d2:46:65:de:06:64:70:69:a3:06:98:54:14:17:a2:
07:d5:39:6b:c6:a7:b6:1d:bc:d3:58:96:2d:39:cc:
58:73:6b:19:a5:29:d9:90:84:3c:a3:f1:46:c9:38:
89:7e:e9:4a:ba:a9:96:ee:02:b4:4f:e1:04:30:ce:
34:58:45:14:25:97:a7:8e:ab:2b:6d:b8:5f:d5:d9:
d6:a8:13:6c:05:52:3f:a8:7d:ab:9f:06:a7:14:2f:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:F0:DF:B8:82:EA:B2:41:8D:A1:58:B9:5F:BE:8C:D9:E3:4D:25
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:7c:8c:45:6f:8d:69:98:30:45:c7:02:86:a0:ce:88:ba:
04:a2:8e:b8:19:85:17:db:26:b2:ea:de:2b:4d:8c:87:27:c8:
f4:fe:9f:88:f7:2a:13:64:bd:9b:bc:d4:c9:2e:a0:23:a1:36:
48:0a:6b:59:94:54:b9:2e:77:ef:6c:ca:6b:57:ea:33:6f:86:
5d:2a:cf:38:a7:12:63:23:17:29:89:9f:12:73:b6:27:88:b6:
fc:0f:7c:d9:8f:ae:44:cc:9e:7a:ed:7a:9f:3a:0a:0e:91:73:
27:f0:61:2e:67:a1:bd:21:c9:91:45:dd:a7:e1:66:d9:91:cb:
f4:e6:d2:39:3b:3f:16:e0:c7:c4:84:41:1f:bc:7f:e5:92:f1:
6f:8d:7b:e4:cc:ce:c7:b9:3b:76:a1:d6:9f:3e:53:49:0e:20:
76:e4:73:e0:1f:da:bf:08:00:24:a4:38:29:15:45:0c:ab:13:
5b:cf:ac:0c:3d:89:c2:e3:eb:7e:4f:8e:64:2f:bf:0a:21:77:
46:0a:85:7c:5b:67:bd:de:47:17:93:06:2f:c8:aa:cb:7c:35:
b7:e7:d3:be:9a:20:3c:ac:21:fe:bd:e1:bc:25:8d:45:17:3e:
cd:9c:5e:3d:10:3c:6d:80:d6:97:57:4b:58:07:56:52:a6:99:
ca:18:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:07 2026 by rpki-client