Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: mbmSKS80C+ZOKJOs6TpJOlWv0FzCfMVJ29SthR++aTg=
Subject key identifier: 22:F6:92:39:29:AA:FE:89:6E:A6:B2:F0:81:95:54:4E:69:F2:BE:E2
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 019CAAFD42EFD69A0DEB5916E0B218748522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 0562
Signing time: Sun 01 Mar 2026 20:00:50 +0000
Manifest this update: Sun 01 Mar 2026 20:00:50 +0000
Manifest next update: Mon 02 Mar 2026 20:00:50 +0000
Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: WauYcSYkSBmxRSnsP+osROMBW3hQNK44S5f67uvqEmQ=)
5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:42:ef:d6:9a:0d:eb:59:16:e0:b2:18:74:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Mar 1 20:00:50 2026 GMT
Not After : Mar 2 20:00:50 2026 GMT
Subject: CN=22f6923929aafe896ea6b2f08195544e69f2bee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:76:7d:9d:2d:1d:99:c2:12:24:0b:5c:6d:
0c:28:f8:8a:43:94:b9:ca:7c:ed:be:d0:fd:b4:60:
cd:9b:79:b7:62:2c:34:16:88:8d:33:41:f3:dd:3c:
84:d0:7d:69:9c:97:cd:d3:f5:48:67:a2:76:6b:f1:
3e:eb:09:c3:2b:89:20:be:2d:52:92:df:cf:f9:d4:
12:da:24:3f:68:dc:37:a8:1b:f3:79:b0:c6:23:e6:
7f:39:61:75:5e:d2:1c:c8:10:54:e9:ce:96:d1:a4:
25:dd:7d:2a:c8:ae:1a:b1:d6:23:1c:88:d2:01:87:
11:7e:fd:66:b7:e2:4c:d4:34:1e:ac:00:12:b7:06:
d6:d4:49:ad:ee:f5:87:21:20:a8:e7:dc:e9:2f:73:
10:d1:20:c7:36:39:22:d0:e5:99:75:a4:4d:cf:f4:
3f:ce:b6:f0:50:11:fd:5e:a7:b3:4a:3c:6f:05:55:
26:a7:0a:40:65:b0:1e:49:9c:2e:b4:0e:41:e0:d0:
09:97:fa:6e:f9:1e:da:e0:6d:f8:eb:d3:e5:3d:6e:
c6:a9:bc:81:47:eb:8b:79:24:3a:a3:3d:68:3a:2c:
22:08:d0:e1:cc:40:3e:3c:1c:5c:3a:6a:e7:0e:ab:
09:0d:1f:f9:4d:d7:6e:d5:98:36:6b:ed:62:3a:38:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F6:92:39:29:AA:FE:89:6E:A6:B2:F0:81:95:54:4E:69:F2:BE:E2
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a6:7c:1b:31:f0:fc:bb:3a:b9:4a:ec:38:d0:06:2b:9d:1e:
ea:64:2a:82:9c:56:fa:c6:55:9b:ed:3f:a7:50:ed:26:7c:e8:
c8:a0:2a:12:c9:65:5c:d6:b8:4f:b4:5c:28:7e:32:d2:e1:d4:
b0:de:36:28:0b:51:7a:31:32:a3:ee:ee:cf:2a:3e:93:30:b4:
bf:ea:cb:4f:ef:1f:dc:8c:e6:b1:24:30:1d:76:d7:04:4a:71:
64:2a:a2:88:d7:fb:8a:c2:c4:2f:b5:d7:58:a0:6d:d3:59:4e:
4e:35:b1:cf:d7:93:8f:60:ed:72:50:9f:c7:74:5e:b0:d3:1b:
84:b8:08:3f:45:bd:da:af:46:53:dd:6d:ee:0d:5b:46:80:0d:
5f:ce:b8:9a:0f:6c:21:af:33:e8:fb:dd:af:77:e0:97:ab:75:
e9:4e:a8:f8:8a:d6:da:d7:6b:65:b0:aa:47:d8:ae:6f:bd:2d:
ee:7f:4b:a4:d4:19:3d:6b:9e:aa:3a:9a:e4:19:d9:42:03:4e:
bb:f4:8b:31:98:ea:62:c7:ec:17:ee:f2:dc:7d:06:95:57:64:
72:8a:76:25:25:74:1d:c0:24:c8:06:c8:22:ab:45:f8:de:ec:
ed:28:a2:0d:f3:1d:6e:36:38:ff:4c:cd:7c:e9:5b:10:4f:ae:
27:71:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:27 2026 by rpki-client