Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File: LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier: AOkjf5kwX4kHF9SRT6q3JSMlSQge6H0RYgh3I07Eds0=
Subject key identifier: F9:C9:08:3E:89:1B:F8:78:4A:CD:FD:CF:24:C1:06:B6:9B:EF:FB:5B
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer: /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial: 019CAB6AE6D28F40D887D283B460A74E72D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number: 0FF8
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: 3WItZ4mhefefk4OFRU301cRZ_vQ.roa (hash: dtdvArxYE5qEj5Mf66z8Nr0a//V3Hh8mgQw7uOvKT6M=)
2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: GZIWB21OTFvhsf+zEIe3OpoIrd+vlctOUhPuY7hMu8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e6:d2:8f:40:d8:87:d2:83:b4:60:a7:4e:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=f9c9083e891bf8784acdfdcf24c106b69beffb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:ea:11:37:14:09:1c:77:64:f1:6f:25:d6:
ee:6f:fb:6f:7b:8d:2d:e2:63:3b:ea:c0:cd:c6:5c:
8f:58:eb:54:17:e0:86:9e:8b:8d:a0:c9:d6:1a:2e:
b7:cd:bb:5c:eb:b3:04:53:34:e3:59:91:18:7f:39:
c5:26:41:a8:c8:8a:3f:ca:c3:d3:08:27:0a:cb:91:
14:ec:db:15:55:71:64:fe:18:f8:73:21:cb:11:bc:
e5:3b:ae:2c:ec:f3:d1:4d:85:7f:1f:2d:fb:f9:ba:
d8:21:72:c4:24:22:cb:3e:48:74:0e:ce:3e:bc:84:
74:41:41:da:12:ea:25:fc:8a:a5:e2:c7:25:0a:1b:
e1:13:0a:8a:1f:b6:2b:9d:50:c7:eb:f8:be:1c:94:
c1:82:07:34:6a:14:c5:f8:1f:39:3e:b5:2b:a0:7b:
9a:58:36:6a:6b:5e:4e:85:d8:14:9b:06:80:8e:d6:
3a:e1:bf:24:2d:4c:7b:b9:64:e7:1e:a2:df:d3:0f:
ea:b5:06:b7:f7:a6:13:d9:23:ff:1f:a8:e0:33:d0:
54:22:e1:44:9c:15:6d:f6:f9:fb:d2:46:ba:61:ce:
86:23:b9:20:d8:fc:4b:8c:14:74:2b:c5:4d:6a:03:
4f:99:b5:c0:66:b3:dd:1f:3a:49:12:66:a2:a3:5f:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C9:08:3E:89:1B:F8:78:4A:CD:FD:CF:24:C1:06:B6:9B:EF:FB:5B
X509v3 Authority Key Identifier:
keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:2d:22:f7:38:13:67:aa:a0:08:5b:bb:04:ea:48:f1:46:
c8:42:aa:8b:e8:a6:15:f3:83:6a:df:48:08:b4:0e:5f:06:33:
8c:41:5c:98:5d:ae:0d:42:fb:e8:16:01:d0:08:4f:6f:6c:d9:
8e:4b:ab:34:b0:70:b2:3c:36:c4:5e:af:74:98:0d:40:1c:be:
e2:35:b4:93:31:00:bd:33:9b:8a:dd:d6:3c:40:4c:b6:79:e2:
ce:84:5d:55:ed:43:e8:54:af:36:98:16:72:aa:90:c7:4f:f5:
2f:29:55:59:1f:50:b2:59:43:7c:c1:9e:0d:cf:d9:9d:63:3d:
c1:ec:a9:30:fe:5c:97:93:3e:2f:25:d5:44:88:d9:73:4c:3d:
ec:89:13:70:0a:0b:db:73:53:57:a1:db:f2:36:58:34:73:fb:
0a:62:43:35:f6:67:ae:56:67:07:92:27:f3:ae:50:aa:d7:5c:
ea:46:89:67:53:c4:80:41:65:9b:d5:82:ec:c4:0a:e0:6b:52:
87:2b:d4:05:5f:f6:1c:1b:80:87:1e:86:fa:0a:20:e1:c9:4f:
fd:8e:6c:96:8d:98:b1:ab:cf:46:f6:48:4b:26:30:1c:8f:ab:
2e:c1:3f:4f:ca:52:c0:67:57:4a:c1:99:a2:aa:ba:79:6a:93:
43:61:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:40 2026 by rpki-client