Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: KXHoFDmCoiMprD7Of24q9KYtdnttDEACSprG8hapfvU=
Subject key identifier: 73:3F:DD:10:6D:B6:72:3B:DF:9D:DD:14:19:52:13:4F:67:F8:AD:92
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019CAC7DDCC32598EC23EF83334AA1C76FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 17C8
Signing time: Mon 02 Mar 2026 03:00:55 +0000
Manifest this update: Mon 02 Mar 2026 03:00:55 +0000
Manifest next update: Tue 03 Mar 2026 03:00:55 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: rl+1YE59ZRIJBsJg/zwkR/H3YCiNkWGlJw6gxNV8fdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:dc:c3:25:98:ec:23:ef:83:33:4a:a1:c7:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Mar 2 03:00:55 2026 GMT
Not After : Mar 3 03:00:55 2026 GMT
Subject: CN=733fdd106db6723bdf9ddd141952134f67f8ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:cb:20:20:34:ec:3f:fc:ee:54:2f:83:b0:
ef:fa:d9:38:fc:67:9f:4d:fc:32:59:5a:e1:64:bc:
52:35:7c:e7:56:f9:64:f1:5c:ef:64:5a:53:54:a6:
72:7b:c1:4a:65:f7:bf:9c:88:19:54:e9:2e:96:9a:
33:7d:10:50:29:3d:b5:8e:5d:b0:1e:01:63:4f:fa:
41:5f:fb:f7:5e:46:12:5e:ba:c8:47:6e:ac:0c:c7:
6b:2f:02:64:76:5e:f7:d5:0c:5a:c7:de:c1:5b:ea:
89:77:2c:f7:00:f0:95:f2:fe:32:90:79:1c:02:b4:
6f:5a:e7:24:52:1c:d6:09:b2:b3:d3:c4:14:c5:83:
0f:05:c9:2b:f7:aa:ac:b6:8b:a0:2a:71:20:74:cb:
83:fe:41:64:cf:64:9f:66:d2:db:b5:e0:84:3d:0b:
6f:74:ab:ab:cf:7b:51:ec:55:fe:1b:97:86:d7:63:
51:82:3d:98:a9:2f:ea:0a:36:23:36:f8:62:5a:70:
29:0f:42:70:66:54:b1:73:90:5a:e6:a7:6d:79:6a:
02:b0:5d:27:ce:6a:22:d6:c6:23:b8:f1:b4:86:fc:
76:a7:2f:10:f2:c7:fd:29:a7:be:bf:f1:5e:a9:50:
bf:8f:8c:c1:32:07:80:16:b1:b4:4d:06:f6:96:71:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:DD:10:6D:B6:72:3B:DF:9D:DD:14:19:52:13:4F:67:F8:AD:92
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:11:b4:d7:1c:16:49:9c:96:6f:d1:52:6b:8c:e8:29:f8:
03:a9:df:d4:06:b3:b2:b9:7d:11:de:89:17:d9:f6:db:3e:b0:
e5:04:38:ad:1b:6c:fc:a3:53:e0:c2:7e:c3:9b:8f:b6:35:20:
90:02:10:7a:98:52:3d:65:7f:a8:1e:d9:4d:4e:50:92:d1:8c:
9f:cb:4d:91:6e:e3:9e:3f:fe:7c:3b:96:a6:53:7e:5e:99:2a:
4c:46:51:94:b6:be:95:50:3e:d1:2b:5a:ad:1e:de:80:95:3f:
71:44:59:09:51:2f:e3:a8:09:fc:e5:81:4e:05:8a:f7:0c:b3:
88:21:cc:2e:d7:b7:60:04:ea:c8:b7:2e:5d:ed:b5:47:40:49:
7b:95:27:6f:bb:b6:d1:ae:bb:2c:a4:8d:62:72:a6:d0:a2:32:
53:5f:dc:48:93:83:0c:da:4a:9d:4e:f9:ed:60:f0:99:7b:37:
4a:06:1c:61:62:8a:db:89:6c:4d:7b:c3:9a:69:53:6d:c3:73:
53:8d:4f:c7:98:03:a0:3a:2c:4e:9a:20:17:3f:f9:99:cc:9f:
75:6b:c4:37:b4:14:d8:e0:46:e1:6a:00:90:28:53:ba:16:af:
c0:12:8b:0a:30:4e:f2:1d:98:cd:2c:0a:80:c3:2e:1f:b9:9a:
34:9e:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:44 2026 by rpki-client