Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: wwX4HgA/jrQg0neB+UnckYGTpwaiirqp6+H6nJzNQOc=
Subject key identifier: 63:3B:12:AA:72:6E:91:E6:09:D6:37:23:A7:C2:EF:1C:91:FC:30:4E
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 019CACEBE3E1619062EAE00C9F7DA60D6DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 0563
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: 7bNu8MhTuJIRdejvKXFG5VL8Kqbj3FVJ530aiQxToqI=)
5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e3:e1:61:90:62:ea:e0:0c:9f:7d:a6:0d:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=633b12aa726e91e609d63723a7c2ef1c91fc304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:10:dd:ed:43:90:42:56:a4:7b:06:0a:a1:
b6:eb:89:47:59:26:d9:c6:f6:0b:6e:2d:e6:74:24:
53:a4:12:83:ff:51:f4:aa:12:bf:b1:d5:52:03:94:
ff:e2:5c:58:8f:b6:3f:65:1e:6c:a2:03:29:85:fd:
05:65:30:a6:99:e1:4b:e1:ff:e9:3e:e4:7e:46:59:
7d:3d:47:4f:93:3b:11:ea:e1:1d:c7:4a:a3:0e:f3:
fa:8a:0a:57:df:80:29:25:05:33:77:3a:03:9d:cc:
37:82:36:5b:fe:25:1d:f3:c6:e8:04:aa:43:ff:42:
c0:f7:1d:53:ac:75:de:93:ab:30:f7:90:fc:7f:83:
5c:ea:99:67:9d:a8:d6:a5:df:b9:90:05:b2:3e:93:
f9:fe:92:bc:56:94:d9:2d:0b:8d:42:91:9f:03:d6:
7c:d9:43:61:fe:1a:7f:e5:e7:1d:c2:0b:79:91:a2:
81:21:33:8c:db:d1:30:cb:23:f9:9f:84:14:f9:fe:
6e:36:01:8f:4e:fc:56:b4:21:f7:e8:f1:63:76:21:
54:c0:50:95:8e:48:22:78:b3:98:7a:bb:04:73:1c:
52:cd:3c:f7:82:6c:ee:80:77:bf:82:79:74:6c:b6:
5e:bd:5a:f2:0c:8b:0a:10:d6:e6:42:e7:00:7f:cc:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:12:AA:72:6E:91:E6:09:D6:37:23:A7:C2:EF:1C:91:FC:30:4E
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:16:98:91:c2:52:57:92:d3:9f:0d:8f:4c:8d:76:af:7e:6c:
aa:a3:22:ac:5d:77:0b:b2:ba:92:23:a8:d4:fc:54:79:90:52:
c3:1a:48:91:4e:e4:fb:51:ef:fc:04:0d:cf:2b:18:07:3c:4d:
7a:66:4f:1b:27:11:52:17:61:36:e2:ac:ca:9b:ef:18:8e:d0:
3e:bb:d0:28:e2:eb:6b:35:a9:53:ae:a4:34:be:72:be:49:c9:
f5:43:1f:dd:a2:41:dc:1d:dc:cb:07:9b:0f:b7:d3:38:c3:ab:
4f:39:34:5a:6f:58:f7:e2:a4:28:55:b1:f9:63:ad:39:26:73:
20:86:08:9b:64:74:be:05:51:1c:44:30:25:04:5d:95:f7:84:
5e:cb:ca:b7:eb:63:60:88:05:d4:0d:1c:38:59:01:d2:ff:36:
cc:ba:29:94:2a:a0:2b:35:fe:26:ab:a1:41:49:4f:bd:0b:1e:
58:d3:95:db:05:61:b5:0a:87:72:11:97:a7:78:59:de:72:d3:
88:82:9c:5f:ea:21:5a:b6:20:a1:c7:18:dc:6e:a3:be:5e:cc:
ba:23:4b:3c:52:e8:16:76:24:79:67:6d:ae:a7:ec:de:18:85:
c0:ab:2f:3b:d4:96:f1:e4:09:4c:94:c2:2a:6d:e3:bd:47:84:
79:cf:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:06 2026 by rpki-client