Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: bDl0sMYfSQfYv2HA6NGcLsfJcYqFV9mnqfYBuGUx/us=
Subject key identifier: 62:2E:96:DE:CC:E9:66:63:74:87:28:BF:A9:37:88:10:F0:C1:72:A3
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 019CAE35F41BD9B05C63C665E255753EF80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 0AC8
Signing time: Mon 02 Mar 2026 11:01:37 +0000
Manifest this update: Mon 02 Mar 2026 11:01:37 +0000
Manifest next update: Tue 03 Mar 2026 11:01:37 +0000
Files and hashes: 1: KKTxvi4QT-uw2rVsD47tdsRqIEw.roa (hash: xejVwgC/oSDE2f2FYXW8noid3jsDDlJ6in2DKcaZdI8=)
2: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: K5u3h3TK+LYn86Nee3LZuH4dFMxtUUcN7q8szQRtII0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f4:1b:d9:b0:5c:63:c6:65:e2:55:75:3e:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Mar 2 11:01:37 2026 GMT
Not After : Mar 3 11:01:37 2026 GMT
Subject: CN=622e96decce96663748728bfa9378810f0c172a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:30:ce:b8:2d:05:81:75:da:c8:93:a4:b9:
a5:31:9b:09:4b:7e:7f:05:7f:26:e0:2d:d0:d9:d9:
c0:5a:81:30:02:2f:7e:18:32:1b:2a:fa:c5:90:77:
02:ec:bb:b7:8c:b7:07:8a:de:50:37:8d:4a:bb:87:
13:51:35:6e:f5:79:8f:d3:bc:5a:46:bc:06:c2:9f:
56:56:59:b6:db:5d:3a:de:90:41:3b:9b:23:b3:43:
c2:5a:fc:be:f8:80:f2:bf:ee:77:80:b1:fd:58:06:
94:b3:81:0f:f1:1f:01:4f:94:47:45:64:35:72:d2:
c1:8c:2e:6a:33:8e:6c:c2:92:b7:8b:b0:a3:2d:36:
6b:86:43:aa:38:8e:00:8c:15:39:45:31:9d:25:7e:
91:b8:6a:ac:20:57:88:5a:2f:0c:f7:19:36:04:0d:
2d:d9:09:17:a6:49:cb:d1:3d:bf:d3:0d:06:95:27:
ac:37:0e:6f:53:d3:40:c7:d9:e9:09:d2:20:8a:5f:
96:02:59:a4:88:ba:ac:2f:89:9b:c3:5e:1b:63:fc:
e8:82:c8:61:30:d2:85:26:cc:0c:c7:68:55:c3:c9:
e4:25:d4:04:02:a8:0b:37:dc:b1:e0:32:ef:0f:26:
67:28:a6:f6:3c:ea:ac:a7:07:22:11:2f:c0:bc:71:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:96:DE:CC:E9:66:63:74:87:28:BF:A9:37:88:10:F0:C1:72:A3
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:21:95:54:95:b9:53:f5:e9:12:19:32:b0:f7:5b:21:89:49:
c6:ac:ed:85:b8:12:c0:69:25:cb:ea:64:a6:c3:97:ea:e6:90:
c3:b4:38:76:0f:2a:8c:04:66:1f:4b:af:d6:83:24:0d:95:51:
59:7c:47:96:6a:cb:a4:ee:15:5b:b0:41:12:5a:e7:c1:5c:fd:
4d:62:08:f2:16:6d:95:e3:1d:96:5e:90:ac:23:e2:c3:db:7c:
22:20:e8:ab:4c:95:68:b6:bb:be:a1:b8:58:e3:fd:72:9c:7d:
64:22:45:a3:6a:59:33:c6:45:97:b2:cd:e8:cd:36:40:bd:40:
fc:71:8e:a0:3d:a3:33:22:21:7e:19:31:2d:dd:a3:38:20:69:
01:65:14:2e:f9:ec:6c:c9:e2:4a:ab:de:0e:f8:73:80:4a:6d:
39:5b:2a:71:ea:98:99:ed:9d:b8:1e:16:d9:79:3a:56:7f:c1:
22:79:33:af:36:5b:65:56:0b:52:78:10:e5:f0:78:75:b7:4b:
dc:4c:e5:cc:4d:3e:35:3a:dd:44:be:29:b1:4f:8c:3c:48:a0:
9a:53:e1:f3:14:32:bb:50:c9:9b:ad:cf:d1:4e:3e:cb:9c:7a:
64:89:eb:a0:09:dc:ce:68:44:c5:c2:c0:b7:df:f8:5a:24:d3:
3b:b1:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:15 2026 by rpki-client