Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: c75fC3GMC4dRn6d/4jhyVksTqAIspUc/riMbQEJUWGU=
Subject key identifier: EA:7D:68:7A:48:67:D3:AA:11:3E:A8:37:D8:2D:4F:AA:04:0F:85:72
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019CAA21575C36619F90F861057577E8DB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 16:00:37 +0000
Manifest this update: Sun 01 Mar 2026 16:00:37 +0000
Manifest next update: Mon 02 Mar 2026 16:00:37 +0000
Files and hashes: 1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: ZfrfIBzyAOZBfzmGSMYtzrNtIhfk997695LqqTtkLTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:57:5c:36:61:9f:90:f8:61:05:75:77:e8:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Mar 1 16:00:37 2026 GMT
Not After : Mar 2 16:00:37 2026 GMT
Subject: CN=ea7d687a4867d3aa113ea837d82d4faa040f8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:73:ee:63:66:ff:94:04:2e:0f:27:4e:06:
d4:9a:cd:21:7a:a6:2d:a0:13:50:ed:c8:5a:f1:cb:
52:46:6a:ed:72:77:6e:19:be:ef:af:b1:69:7e:7f:
2b:3e:dd:9a:31:1a:6f:95:e9:44:7a:c1:a7:4d:e0:
6d:9a:a6:4a:36:6b:12:80:b5:22:78:2e:02:bf:51:
22:6d:c9:af:e9:28:c2:dd:65:81:ec:1d:f2:1f:4d:
6a:3f:2e:02:7e:4a:f4:22:24:4c:19:de:51:e9:7c:
12:e8:1c:f3:6e:a5:b4:a9:c2:9b:c9:53:f2:4c:8c:
07:d9:f1:fb:ca:ee:1b:b1:a3:0f:1a:65:5d:d2:c5:
3c:08:e4:81:94:64:c9:7c:4a:7e:4a:f0:c1:2b:99:
27:2d:72:f9:fa:9d:07:23:b7:c7:d2:54:45:6d:bd:
64:26:14:8f:df:58:f3:ed:e7:c1:2a:24:0e:c0:4e:
b0:e6:af:b8:8a:2a:e8:72:61:f0:f8:c3:e4:b2:c9:
e6:c3:84:6f:f0:1b:43:e9:15:04:9e:fd:66:ad:f7:
2c:bb:e1:85:ed:21:6f:aa:df:39:de:91:99:4a:fe:
3e:7b:1e:f5:b6:ea:82:16:75:9d:c7:9c:7d:d6:b4:
2c:11:97:e6:07:09:67:09:d7:f1:98:24:47:ef:bb:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:68:7A:48:67:D3:AA:11:3E:A8:37:D8:2D:4F:AA:04:0F:85:72
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:72:93:2c:63:e7:46:3b:ca:6e:52:89:1e:d9:fc:66:1b:
ed:8d:23:f2:e3:c6:be:98:81:08:b0:b9:83:5b:d4:4c:4d:90:
b7:e0:40:4c:07:14:d1:cd:ef:a6:4c:54:e8:2d:87:65:dc:a0:
63:e6:92:86:7c:93:8c:b1:15:55:3e:a1:48:11:8b:63:f1:c3:
32:8c:bd:5a:7a:34:b3:18:eb:3e:fe:f4:1a:0d:2a:83:71:ef:
95:4e:1e:a7:47:fe:3a:fd:4d:2d:bd:55:32:6a:fe:22:b7:49:
b9:ea:08:3c:fc:7c:7a:3d:c7:38:02:c2:41:bd:61:8a:e2:72:
d3:2d:fa:be:bf:50:fc:a4:e0:6c:78:dd:6f:a9:51:c9:0e:b6:
e2:3c:41:16:cb:6b:c1:0a:73:f1:7c:fc:6b:40:7e:cc:c6:d4:
0b:8c:44:a3:fa:1a:8e:61:98:aa:89:c3:14:e1:54:3e:cb:25:
65:b7:5b:c3:8f:7d:54:07:51:11:97:31:5e:98:28:51:ed:eb:
ea:8a:91:5e:14:a2:76:09:7b:db:e8:d2:27:e1:91:0d:6a:bb:
aa:c7:20:aa:c5:eb:a5:d0:11:fe:c3:87:ce:75:e7:3d:c4:44:
1d:3d:11:84:3a:3a:82:6e:c4:92:db:b0:c1:34:be:36:46:c0:
2a:1f:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:46 2026 by rpki-client