Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: e7H0wkB5zFuQfajuL5KFrHJLOlH9XvXij9dyrGVNjwc=
Subject key identifier: C7:42:8C:03:02:7C:45:57:BE:2A:4A:2F:49:7E:69:79:6F:24:B9:CA
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 019CAA58DAD9F6ED9DEBC0D95AD60BF38282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: COjqaYnsYuyAQnOfRow1LSaHRvU.roa (hash: OG1wPC551mpOORC3dI+5e8bO42vNDHRLBsbdrz/BicA=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: os0IM+wQelx1LyG4YJViD/56k+9iSdUW3HZQchkF/x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:da:d9:f6:ed:9d:eb:c0:d9:5a:d6:0b:f3:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=c7428c03027c4557be2a4a2f497e69796f24b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:e6:ff:29:c0:47:1a:99:64:37:0c:27:6d:
d3:61:a1:fb:01:7b:bc:f1:2d:4f:60:df:ca:3c:30:
1d:1e:47:9a:cb:07:7e:98:6c:e6:74:63:d2:7f:a3:
3c:a9:13:57:ed:cc:d0:fa:36:92:f0:78:9a:4d:eb:
7f:6b:d9:ed:f6:03:6c:56:61:57:27:65:bb:f7:d9:
05:5e:e5:59:4b:06:74:29:f6:15:28:38:92:78:fd:
98:0c:3f:23:f6:66:02:ed:bd:5f:02:c2:98:19:62:
a5:34:26:27:83:53:05:74:16:d4:77:e8:54:80:03:
c6:6f:28:0c:35:e0:3f:02:66:01:96:72:16:68:90:
4c:d6:5f:af:91:2e:ac:fc:73:37:4c:79:d8:f7:a1:
84:58:cb:8e:a0:9e:0b:e2:1c:d7:e5:1b:20:76:13:
ec:81:37:64:b3:1f:f7:c4:a9:59:11:26:cf:d6:05:
ac:d6:dd:e1:84:94:2f:be:9c:ad:3a:0b:1b:d9:e9:
d0:d1:61:c2:b7:e4:20:f1:bb:73:7e:34:dd:5b:fc:
5a:89:54:4d:21:e6:56:c7:cf:45:c7:ac:59:ed:66:
72:3c:f6:0c:76:12:d2:e8:f2:8c:61:59:a4:86:bf:
56:97:97:64:ea:f1:72:b5:95:73:7f:fe:98:47:8d:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:8C:03:02:7C:45:57:BE:2A:4A:2F:49:7E:69:79:6F:24:B9:CA
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b6:47:c8:81:c8:e8:67:37:9b:f3:35:af:a5:62:74:3c:99:
dc:a1:e2:f2:4a:24:54:9c:56:d9:6d:4b:d2:69:6f:33:74:aa:
ce:07:59:bd:30:86:02:e7:a1:fe:b4:93:b5:8f:90:94:71:80:
90:3d:db:b2:30:53:32:8b:41:df:b9:5b:e3:fe:62:44:ed:a3:
ca:23:cc:76:10:64:b9:c0:ef:6f:f8:45:dc:19:07:4f:59:34:
39:ca:c0:17:0a:6c:29:d0:aa:40:8b:a6:e7:7b:13:f6:f1:6c:
d5:32:85:d2:94:84:67:e2:b9:67:bc:fc:87:8e:4e:cc:c8:7c:
9c:1c:17:2e:d7:fe:48:1d:6f:e8:17:60:e9:75:a0:42:fd:65:
7a:45:84:c5:0d:5b:32:20:c5:66:75:66:f7:9e:01:00:aa:1d:
36:19:99:f6:cd:62:2e:81:3b:c8:7d:98:be:a9:76:1e:9f:54:
b0:54:33:76:90:af:00:2c:11:d7:78:23:b0:88:a5:28:4e:94:
41:70:82:ee:93:29:bf:23:27:e4:75:7d:ce:1f:75:85:f0:3e:
b2:07:01:f7:96:0c:c5:48:20:be:f8:8d:7b:a1:b2:cd:f7:28:
29:a5:d0:b0:b4:06:84:55:be:61:d1:e1:f5:ed:b9:69:7e:f6:
7a:a4:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:00 2026 by rpki-client