Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: P9oAtqBaZi6Y07j6n1lFJVRYDG4rakpvCcoBZys5G20=
Subject key identifier: 87:BC:81:81:E1:ED:5D:7A:F3:64:6B:17:D9:6C:A7:FD:3C:23:80:57
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019CAA58C2DE92BA77C19FAAF819974A1524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 17:01:09 +0000
Manifest this update: Sun 01 Mar 2026 17:01:09 +0000
Manifest next update: Mon 02 Mar 2026 17:01:09 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: P1NIShdeFo1JfbnyM5cfUZId8D3IjOiprv57YYfxPS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c2:de:92:ba:77:c1:9f:aa:f8:19:97:4a:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Mar 1 17:01:09 2026 GMT
Not After : Mar 2 17:01:09 2026 GMT
Subject: CN=87bc8181e1ed5d7af3646b17d96ca7fd3c238057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:f5:9b:e9:26:e4:69:51:b6:7e:42:2c:3f:
4c:61:f4:38:94:29:2d:da:3b:25:42:11:4b:bf:cc:
89:f9:42:b8:dc:93:96:99:d9:63:2f:50:98:f9:c0:
80:15:18:d7:e2:ef:25:ef:83:b1:f5:20:83:7c:60:
61:f1:97:ff:be:83:60:24:d7:74:e7:22:5e:c5:d1:
a6:6d:01:03:66:24:b9:80:0d:64:bc:12:32:72:e8:
a1:d3:4f:65:a6:04:0a:a7:02:9d:b7:01:f9:cc:b8:
cc:71:92:28:1d:03:9d:bb:b0:6b:b1:2f:9a:2f:38:
cf:ac:2c:61:dd:02:d5:15:7b:c0:fd:8f:77:02:c4:
ed:6f:69:ef:74:fb:1c:91:f4:9e:3d:67:99:c0:4d:
aa:a1:95:1e:8a:4b:11:40:89:5f:83:87:05:01:3f:
bd:d9:e7:cd:73:1f:93:84:25:aa:1a:36:88:e9:3b:
b3:37:f4:3f:13:de:fe:bf:53:d7:e1:64:c3:35:4d:
4f:57:d4:52:c9:b1:74:b7:1b:c3:48:9a:5d:64:41:
dd:0d:0f:31:01:0f:94:1e:69:73:7a:76:c2:51:0b:
a6:36:4b:3a:dd:14:ce:28:41:6e:8c:8a:da:d1:28:
67:55:5e:35:dd:0d:01:05:7c:db:77:2a:39:d9:f6:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:81:81:E1:ED:5D:7A:F3:64:6B:17:D9:6C:A7:FD:3C:23:80:57
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a3:bd:d1:77:cf:1e:04:35:48:5b:de:b7:b7:67:1e:ab:da:
95:db:85:69:27:e4:9f:e5:0f:40:62:99:de:6f:94:4c:d2:59:
63:ef:b7:fe:22:c8:60:96:71:09:c5:af:ee:e7:4e:d0:0c:ee:
46:07:fa:97:7f:28:0d:56:b6:b3:d9:0d:7a:4d:04:bf:1e:44:
1c:27:df:fe:27:2a:43:2a:54:c1:a9:81:53:b7:21:69:3c:75:
1d:90:a9:17:1c:c0:55:88:d3:02:41:2a:8e:fc:80:cc:0c:f0:
94:b4:47:df:15:20:f1:ca:6e:03:fc:17:6a:f1:bb:fe:47:1a:
a3:04:04:ea:8b:c3:aa:d2:a7:58:2b:88:fc:fa:88:85:01:36:
0f:75:95:08:ec:90:28:9d:0b:84:a0:55:d3:07:c3:3e:bb:e1:
cd:35:ff:4b:50:81:cb:60:73:8d:80:5e:7d:c4:7d:6f:c7:aa:
de:a6:1c:86:6d:08:bd:13:9e:89:41:db:c4:d2:32:6b:14:ef:
63:ea:2a:9e:a2:b6:a6:6c:3d:11:7e:f8:24:68:f5:d0:77:e9:
b5:08:09:33:c6:b0:f2:14:ea:59:0a:c1:f4:39:8e:1d:f1:b6:
3a:b7:6d:89:2f:4f:82:76:8b:b5:bc:e3:d3:a2:6f:e9:29:8e:
97:f5:b1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:51 2026 by rpki-client