Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: 11XUqNDvsz/i5zemU4WdiQIOdG4ESr4r8tEUxt5GEsc=
Subject key identifier: E0:A5:B3:C8:BC:8F:3E:21:C5:67:5C:4F:D4:50:6A:DE:FF:68:1B:0E
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019CAEDA36A7B8716FF767356080A4330823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:01:02 +0000
Manifest this update: Mon 02 Mar 2026 14:01:02 +0000
Manifest next update: Tue 03 Mar 2026 14:01:02 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: j9PIViQO606EklX6b0/RBi7CS6OiSJOlhU6teNBdSbg=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:36:a7:b8:71:6f:f7:67:35:60:80:a4:33:08:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Mar 2 14:01:02 2026 GMT
Not After : Mar 3 14:01:02 2026 GMT
Subject: CN=e0a5b3c8bc8f3e21c5675c4fd4506adeff681b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:d2:c5:47:51:37:80:11:8c:d9:54:d3:5c:
2f:13:60:6a:1d:89:1e:4b:0d:4c:2b:bc:dc:13:18:
ee:09:85:32:fc:8f:91:c2:98:ce:ad:77:0d:35:04:
eb:29:b1:5a:91:f5:e6:3a:1c:87:68:a1:a4:73:0b:
35:6d:59:41:11:0d:53:1d:fa:47:73:cd:28:ac:c9:
6a:85:c9:fe:f1:ad:04:48:25:a1:68:ba:a8:67:9d:
cb:9d:9b:4a:0f:ab:78:d9:79:46:01:1f:30:cb:17:
24:03:29:69:42:b2:86:98:9e:58:92:e6:5f:d8:e9:
60:f4:fb:32:80:b9:b6:5c:99:b2:e3:b8:fa:03:2c:
e5:28:a2:7c:4d:5c:83:d4:29:bc:6d:3b:9f:42:d9:
84:38:19:54:e8:50:64:a2:a6:2b:80:a0:97:11:67:
2c:10:79:aa:99:f0:f8:a0:3c:5e:55:71:55:b3:bf:
af:6d:18:b5:5e:cb:c7:55:8b:0d:0c:63:91:78:8b:
8b:b1:c6:81:5e:65:70:e3:3b:e4:6d:a7:83:70:dc:
b7:55:40:4e:b1:cd:51:d8:eb:41:d3:71:49:14:a7:
17:fa:da:c7:f2:82:e8:28:ad:74:a0:62:b6:59:7b:
1d:28:ce:0a:bb:4c:69:24:db:82:c5:74:8a:74:3e:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A5:B3:C8:BC:8F:3E:21:C5:67:5C:4F:D4:50:6A:DE:FF:68:1B:0E
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4c:f8:8e:79:77:c3:77:b5:b3:1c:22:8b:d7:21:56:b9:45:
8f:b6:21:83:91:4c:50:d1:9d:bd:82:79:13:e1:70:48:74:71:
22:81:9c:bc:93:85:c4:cf:5a:f8:ce:39:60:cc:00:10:e4:36:
69:cc:01:0b:72:94:71:94:4a:ea:65:bc:78:57:e4:81:b7:8f:
5d:7c:0d:a3:79:b2:63:f6:65:02:a1:00:e0:cd:b0:0d:0c:c8:
38:bc:97:2b:af:0e:2b:70:9f:69:d5:df:5a:3d:76:cb:d7:51:
36:ef:af:8b:61:aa:60:6c:75:46:c0:95:00:f9:b0:13:9b:ff:
ad:73:cd:1e:c6:e6:4d:53:38:d2:4e:04:37:27:78:8a:89:d2:
74:9e:0e:89:87:68:40:b2:c0:2e:cf:b1:38:cc:a3:34:0c:7f:
01:d8:01:de:78:34:bc:e8:20:ed:ce:eb:34:5d:2a:4b:f2:77:
5f:c1:5a:72:55:08:3c:8c:fe:1c:88:a8:78:90:b0:16:d8:0d:
ed:41:23:c2:90:05:23:fa:60:ac:df:1f:b0:16:cc:80:de:d4:
9c:b4:be:06:a1:fc:5b:0f:5a:77:a9:45:d5:bc:25:2d:9f:6f:
49:d2:3e:8e:f7:75:ee:36:69:bb:96:89:7f:70:ed:a4:b5:41:
bb:d2:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:03 2026 by rpki-client