Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: 41pAOLfKWzOXsR9DdymLdDAGFfr6IEt8yjEti3flw2I=
Subject key identifier: AA:66:07:DF:B8:7E:3B:7C:85:9F:30:DC:E7:73:24:D5:F5:69:41:44
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 019CAC4706114377109B42E2286A41B7A6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: mPrtveA9O0tkiTmtToOFTMxsImodDzXQBYSWSw6z4Po=)
2: mggCybH0JuN-k6cQXNUomWKiBlI.roa (hash: FIDIgF+E4Eu8exw8u8XVBLqad5rC9fwdXSSTO7cnhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:06:11:43:77:10:9b:42:e2:28:6a:41:b7:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=aa6607dfb87e3b7c859f30dce77324d5f5694144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:50:e0:ba:77:4d:6c:8a:76:aa:f4:85:66:
e3:2f:2d:84:a7:24:43:27:e3:95:f0:34:eb:f6:57:
9f:b4:d4:b8:7a:0f:35:95:1b:1d:47:11:f6:e1:0e:
02:26:a9:10:b8:c8:fe:cf:5f:7b:91:81:c2:4d:a5:
a1:32:da:ae:ca:70:0b:d6:26:b2:1b:40:63:d0:24:
1a:93:e0:80:cb:66:ce:38:34:1b:5f:d1:94:b6:5a:
37:9d:12:a2:41:4e:5c:7d:8d:e5:c3:b3:ac:a4:0c:
a9:e1:8e:7e:36:22:ab:6d:ec:b0:77:13:9f:c5:63:
03:78:97:d4:51:62:67:c3:73:74:9b:a5:c2:63:6c:
d9:7d:72:f0:9d:f7:2b:32:3a:66:7b:55:b1:54:e5:
2e:41:80:26:54:6d:1f:a1:8d:7e:a3:5f:a4:cf:67:
08:d8:fb:0a:9b:7d:d2:9e:9b:23:77:a3:ab:9b:04:
e3:c1:37:e1:f4:bd:9a:b2:31:b6:c7:c0:27:fb:02:
3f:de:7c:73:c2:16:11:58:65:81:da:fb:96:ef:6c:
1c:b5:57:e4:4a:b8:bb:4b:5b:0b:dd:48:95:25:5f:
38:58:33:d6:09:c0:2e:19:c3:e4:81:c5:ea:6c:43:
bd:01:15:28:c8:a1:9a:dc:a0:f8:a4:80:e0:d9:cc:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:07:DF:B8:7E:3B:7C:85:9F:30:DC:E7:73:24:D5:F5:69:41:44
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:e0:eb:9c:49:7b:6e:8a:44:5a:76:bc:9c:00:f3:c8:8a:
50:ae:b0:ab:4d:cf:5f:bf:eb:2f:ac:a2:ef:53:d5:7e:88:48:
f3:e5:80:fa:1f:f1:2d:b5:0a:0d:31:d5:98:79:24:e8:69:ee:
08:29:ed:f7:c6:d4:1a:e7:a2:92:b6:b0:38:12:9b:58:de:6c:
3d:21:c6:ea:f5:98:4a:a7:c7:58:10:4d:55:1d:32:9e:00:fb:
a7:74:75:dd:61:13:be:ad:40:a2:20:14:ef:d8:1c:7b:69:7e:
4e:5f:e5:c7:9e:8b:cc:2d:12:ef:3a:21:ff:a9:13:be:10:34:
d5:4a:46:6b:42:8e:7f:cf:8e:8a:55:80:17:b5:c4:91:f3:59:
e4:64:61:e3:25:44:a4:9d:1d:ae:56:59:2c:a4:30:aa:4e:d9:
8b:e9:cf:4b:9d:c3:5f:ce:8e:2c:e7:ed:28:6d:fc:7f:5b:bc:
dd:62:73:9b:d0:b1:77:a2:6d:ea:77:b3:6b:c5:fb:d8:2a:ca:
6c:32:72:c5:16:4b:04:29:a7:73:ad:9b:bd:22:8f:10:0a:47:
0d:91:41:83:4f:88:ed:5b:68:99:5f:43:16:d2:25:ea:e6:39:
57:86:0c:73:1a:cb:d0:f1:4c:3d:ef:a0:ec:5f:86:f7:77:21:
84:ce:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:39 2026 by rpki-client