Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: 6Hkou9NNJnZkTYhhXWtQuqS9DxuiFe8vxjvvtal5kVA=
Subject key identifier: AC:6A:A0:8A:AB:8B:0A:A3:62:C4:A0:6E:C3:FF:0B:2C:CF:1A:3C:E9
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019CA8D7FA1F968DBF24A6BDF23F71264B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 2A
Signing time: Sun 01 Mar 2026 10:00:52 +0000
Manifest this update: Sun 01 Mar 2026 10:00:52 +0000
Manifest next update: Mon 02 Mar 2026 10:00:52 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: MbN/V04lhX67vbQ7W1MIErVWBBM3hKbjOwLYoRMtRi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:fa:1f:96:8d:bf:24:a6:bd:f2:3f:71:26:4b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Mar 1 10:00:52 2026 GMT
Not After : Mar 2 10:00:52 2026 GMT
Subject: CN=ac6aa08aab8b0aa362c4a06ec3ff0b2ccf1a3ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e3:0a:7d:ee:72:1f:3a:c3:89:3d:55:89:34:
a9:08:8d:0f:4f:df:29:00:24:0f:6f:50:95:f4:8a:
2a:89:44:3e:a7:38:b9:c2:e9:35:42:8c:8d:c6:09:
39:f2:61:f2:92:30:2e:11:96:3c:c7:06:19:c8:2f:
62:f9:4c:9c:d3:72:0b:ff:c4:97:97:b0:9e:c2:23:
bf:d5:2d:f9:a3:5a:b2:22:e2:7c:c9:0a:71:28:9a:
22:29:ee:f3:66:c6:b6:f0:44:a8:95:f8:f9:33:7f:
91:b6:aa:82:89:5a:26:4c:5e:8f:ee:10:0c:f8:b3:
73:4a:39:a4:97:75:85:df:5a:88:c4:d9:46:89:14:
b5:47:76:1a:a4:9f:c2:39:e9:d2:d4:fa:0e:ce:31:
da:1c:20:a9:be:f5:8a:9f:49:6c:bd:34:8d:46:a4:
c7:a9:e0:ff:5d:ab:04:cb:99:4e:75:3b:4f:19:c2:
42:de:f6:42:3c:34:24:b3:b7:d9:cf:57:03:b8:9c:
e7:a5:aa:a9:97:b9:e5:76:6c:f6:df:d9:52:48:9e:
b3:9c:fd:d8:8e:ec:d2:f6:65:4c:8d:70:40:5b:40:
cc:44:36:42:7e:4a:01:b6:84:7c:ea:6f:5d:be:a2:
a3:0a:f9:ff:f9:25:df:c8:27:19:2f:fa:5c:76:c5:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:A0:8A:AB:8B:0A:A3:62:C4:A0:6E:C3:FF:0B:2C:CF:1A:3C:E9
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:69:a8:aa:56:ac:aa:46:5f:e1:86:b6:50:e3:04:da:09:
ff:be:d5:fe:2e:b8:b5:4d:5b:6f:90:58:d2:69:8d:8f:e0:f0:
b4:71:ab:e0:07:3c:1a:2f:8e:bf:7a:0c:d6:8d:0a:d3:4f:64:
73:68:2c:f4:33:54:b0:67:5c:9d:6a:51:2d:dd:19:74:c3:fc:
32:31:53:bc:35:9c:99:24:7e:de:6f:e8:73:f1:86:b8:a2:98:
57:a6:63:9d:11:69:a3:28:9e:f9:0c:3a:ed:fe:57:56:83:e9:
64:ad:b1:e9:ff:13:ed:f5:bf:4b:b1:bf:d1:7f:eb:da:dc:2f:
28:43:bd:7b:12:8d:a4:b2:30:de:a4:50:c1:f9:20:b2:18:5e:
45:23:7c:02:65:94:3c:fa:63:24:17:c3:b2:41:a1:5a:62:a1:
b1:6a:dc:4c:6d:2a:e9:b6:c8:44:f1:e8:a4:c6:ec:91:cc:e8:
9f:8f:0e:92:cf:9c:17:57:cb:84:34:25:c2:b5:31:ff:14:cc:
49:ad:7e:5c:d5:8b:c9:a7:e4:bc:0b:1a:e6:24:11:20:f4:75:
82:03:b0:f0:be:a8:84:a0:dd:72:7d:0b:6b:c7:bf:11:08:e2:
01:d0:69:d6:68:21:74:c4:bc:60:20:c6:a5:bf:5f:a6:c6:7f:
d4:cf:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:18 2026 by rpki-client