Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: fdXJswfvj9zsrcsm3rd3JpWbYPdUITxjhla0Ux60JYA=
Subject key identifier: 11:71:E8:7B:A4:8C:CB:ED:0C:73:9C:64:9B:E9:FB:FE:E2:ED:B5:39
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019CACEBAC7A0A13714927D074165A2FA54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0ED4
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: USwT2SeaguMlyEEPFKrGUCTjicc.roa (hash: fLXx8GADpNCNj3rL26EzgEHCDr9VafNfGAWI6je4Vrw=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: USkp9at6QfydEEe7+K0uO036PdQRKWtH6DMEiL2u4oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ac:7a:0a:13:71:49:27:d0:74:16:5a:2f:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=1171e87ba48ccbed0c739c649be9fbfee2edb539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:19:37:96:c1:d3:c5:f2:f4:a8:53:89:ca:
64:94:31:92:4a:3a:94:01:34:98:38:f4:77:af:93:
16:38:be:76:1b:47:21:11:46:67:d2:02:5f:10:be:
1f:e4:a9:02:d2:62:8a:9c:e5:6e:55:36:71:4b:4a:
9c:5f:1b:e6:b1:06:2c:86:c1:51:ae:5d:34:4b:e1:
89:1a:c9:2d:6b:73:e0:cf:ea:a9:8c:7c:8e:80:ff:
a6:73:c2:b9:46:a0:93:1e:df:31:51:d8:80:bb:ab:
07:fa:4b:89:85:66:29:a1:05:2e:7d:1b:73:ae:6e:
a8:2c:b0:14:32:95:bb:4c:ca:12:56:14:59:e6:bd:
dd:63:69:7d:a1:25:e5:15:16:91:cf:8e:c1:e4:0c:
6a:c1:66:02:f1:98:8f:35:8d:44:18:78:26:fa:28:
f3:59:e7:b7:d8:a0:ac:45:a4:c9:5e:9d:ab:a5:aa:
02:e4:a7:9a:dc:48:04:4d:7b:9c:d6:27:f7:7f:88:
fd:73:e6:19:e1:b6:74:63:ef:fc:fa:43:2d:07:bf:
97:1f:a1:a7:dc:91:e9:c0:5a:50:c0:96:0f:04:2a:
47:37:9e:0c:54:a2:c7:90:16:fd:ce:a6:19:bd:1e:
43:67:ea:c2:75:d1:d5:1d:b2:8f:45:2e:1c:9e:b4:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:E8:7B:A4:8C:CB:ED:0C:73:9C:64:9B:E9:FB:FE:E2:ED:B5:39
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:d2:02:03:a6:0e:09:b2:ad:08:c3:99:5e:c1:25:cb:cd:
84:83:be:29:3a:74:5f:d9:d1:2d:0d:39:1b:74:bf:6a:2f:d9:
93:af:98:1c:0d:e7:2c:56:23:43:13:1b:f7:c1:d9:9a:60:82:
6e:b3:9d:fe:03:b8:f2:5f:da:17:d4:83:17:7a:b9:9c:35:93:
31:35:b8:c8:0d:05:67:e4:02:57:8b:b4:cd:52:79:88:5c:1c:
fe:1e:e4:b3:9e:25:7a:1e:90:6f:3f:68:7b:bd:3d:18:d8:a3:
36:37:43:cc:69:db:bd:9b:6b:27:9e:03:6a:54:0b:ee:56:f7:
52:78:99:9c:38:29:07:5a:3b:14:e1:12:b9:8d:17:29:44:41:
1b:6f:90:ab:51:a2:1e:36:b4:77:b9:9a:9e:6e:90:92:96:cd:
a4:f1:50:71:d3:b2:a0:b9:e2:62:91:43:c2:44:61:57:a6:40:
1d:4f:04:e8:97:e6:49:8a:42:1e:20:69:f7:96:91:7e:bf:fc:
d4:80:84:ca:eb:a8:bf:9a:ec:36:a8:79:5e:b8:9b:ef:47:13:
bf:26:d8:16:a6:b7:b0:ad:56:5b:25:ef:17:93:ae:32:2e:6f:
6f:55:8e:bb:f9:3a:50:6f:e7:7c:6a:91:97:b0:69:9f:4b:09:
cc:33:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:57 2026 by rpki-client