Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: GFIqRDNjK5+nX8hXDTngIrHsdH3nMjCfuiBA7UFHW9I=
Subject key identifier: 97:EB:B7:97:51:21:C4:80:E3:64:A2:44:0F:92:D0:51:C5:DF:B5:1F
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019CACEBAB794838B30B117ADE9BCD697F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: pzZtT8xh4h38uhB0z1lQNDa/NbOTZ0ow6AVwFVpblVk=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ab:79:48:38:b3:0b:11:7a:de:9b:cd:69:7f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=97ebb7975121c480e364a2440f92d051c5dfb51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:87:a8:bd:46:72:ce:dc:f9:dd:09:c6:32:
15:a4:e1:d7:57:19:22:e2:1e:90:aa:66:cf:67:75:
2e:29:39:c9:37:a9:39:bf:7d:c0:ed:e9:62:be:a8:
9f:a2:9f:61:ed:4d:b3:4e:83:19:37:e9:94:cd:a8:
02:d7:99:f6:26:26:97:60:bb:98:08:cf:1d:15:3c:
dd:20:a6:13:df:fc:8f:59:f1:de:c1:74:b7:c6:64:
50:55:d8:c5:45:08:93:fa:6a:10:98:5c:6a:00:d2:
9c:43:bd:3b:c7:57:bf:79:7f:e8:61:25:77:0e:54:
9c:80:40:ad:25:de:86:af:37:af:95:91:ae:57:7d:
29:6a:10:a8:02:6b:70:8e:54:08:95:0c:33:f3:f8:
4d:5b:f7:3c:65:0d:1f:ec:3a:1a:b0:fd:1b:33:84:
e6:74:6c:d8:03:2c:a4:40:85:13:87:6d:38:04:10:
bc:0a:0f:b2:42:f5:15:4b:12:a8:0e:6f:cf:33:8a:
0b:f0:22:46:5c:e1:23:36:6a:df:a3:6d:18:03:62:
08:67:5a:b5:43:15:e1:e0:54:c2:30:dc:c0:60:e6:
54:dc:5d:ba:36:6d:86:f2:3c:98:5b:7b:30:86:75:
1d:4c:f3:20:ea:35:40:50:8c:90:de:12:d9:ac:4f:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:B7:97:51:21:C4:80:E3:64:A2:44:0F:92:D0:51:C5:DF:B5:1F
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:76:69:0f:e9:60:f6:7d:12:b3:31:0e:31:6e:46:c9:e5:d8:
8c:f2:f1:ee:07:bf:a8:db:9a:ea:a7:d5:72:2b:d3:65:c8:6b:
b2:48:dc:5d:35:c4:c9:38:ff:b9:ca:3b:b8:e5:34:77:9a:78:
f4:ee:af:6d:73:2f:97:1e:52:4b:27:27:32:cf:19:ef:6a:9d:
06:74:25:51:d3:c5:8d:bb:e2:5e:21:f3:dc:f0:e3:8d:63:90:
b5:d3:a0:7d:93:46:55:2f:20:4a:8d:8e:f1:11:4b:64:63:a7:
3b:2c:88:17:77:1a:2a:99:2b:da:f4:b7:64:4d:28:0c:b4:05:
61:ad:5e:32:ac:05:db:a3:9d:c9:fc:6e:70:fd:09:9d:bd:f5:
17:ce:56:6a:55:02:65:80:c6:5e:54:14:7a:fb:5c:99:79:76:
cc:9c:4d:42:a8:ab:b9:47:9c:11:06:a2:d2:e4:12:3b:ac:6c:
e2:79:8d:b1:cc:8b:5b:16:7e:46:b1:54:a1:a5:41:3c:eb:90:
6d:6c:b3:09:5c:e2:ae:47:1d:b4:8a:b3:41:0a:99:8b:dd:c8:
3e:c4:29:b2:89:4e:0a:9a:bc:91:04:f0:6e:cc:e2:eb:f7:e7:
9e:d2:ae:b2:8e:22:62:40:08:3a:49:4f:6f:07:2e:76:e3:c5:
58:6c:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:36 2026 by rpki-client