Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: 17QULWB3kgyDYlnnI1J3i1dTtxptQyqKyMoyx4cy+HU=
Subject key identifier: EA:C8:6D:72:42:34:5C:12:4C:C5:C3:D4:38:29:DA:2E:00:77:32:A2
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019CAD5A59C7FF0DDFE13D4CA0DF01D0EC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:45 +0000
Manifest this update: Mon 02 Mar 2026 07:01:45 +0000
Manifest next update: Tue 03 Mar 2026 07:01:45 +0000
Files and hashes: 1: LSPYdHWOrzjzMpezGhhKeAopRDI.roa (hash: 6BFI+idpDJu59Bp+c/vo26t3qsjR1ad7pcSlb8AZ7Qs=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: YaqCnCS0x7lUn25qdw5wPv++aGwB6uNPD9MZB4JHG6A=)
3: qxNtM6lXc-IHu0RFMi09jBOcq44.roa (hash: lGaxRvwWm1pfHeT9l+8KNnzK2furIDbOHauCtS0rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:59:c7:ff:0d:df:e1:3d:4c:a0:df:01:d0:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Mar 2 07:01:45 2026 GMT
Not After : Mar 3 07:01:45 2026 GMT
Subject: CN=eac86d7242345c124cc5c3d43829da2e007732a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:47:50:f4:0a:68:36:6e:f2:72:4b:ad:08:
f4:49:82:23:28:62:47:9c:fc:71:ea:62:95:cc:a1:
fb:0e:a5:ea:ac:76:be:f7:db:9f:32:81:94:0c:18:
5d:97:6d:51:49:43:99:e5:48:64:28:3d:69:db:85:
bd:d1:f1:02:d2:88:55:df:3a:01:89:c7:d9:0d:06:
6a:69:f2:0d:61:a8:ae:e2:30:80:40:f3:e1:dc:98:
9b:26:c5:cb:11:d6:cc:e0:b6:19:af:21:8b:01:85:
a7:de:d8:d9:5b:cf:70:f5:61:4a:24:ee:ef:36:cf:
09:60:32:c6:8c:10:87:b5:a3:3e:16:25:df:73:7a:
7e:26:33:ea:06:27:f8:6c:ee:cb:ae:8a:05:7f:53:
21:71:7a:4c:4a:06:de:bb:3e:be:40:e2:92:b3:b3:
5f:20:66:60:5b:6d:09:21:e4:97:9b:d0:01:8e:68:
57:68:d1:57:35:01:98:29:af:06:33:d0:3d:f5:a5:
2e:15:12:d3:19:da:af:dd:70:8f:4c:47:98:2e:69:
91:40:00:c4:a0:07:37:5b:f9:12:f0:67:7b:54:41:
80:b9:0f:ef:42:e4:8c:a1:28:f8:2a:54:5b:63:e0:
c4:69:72:b8:31:8b:68:64:32:f9:98:d7:7f:4d:13:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C8:6D:72:42:34:5C:12:4C:C5:C3:D4:38:29:DA:2E:00:77:32:A2
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:25:34:fc:5b:f7:76:3b:11:8b:f0:fe:79:6f:ba:63:d9:a3:
22:4c:fa:e9:b9:10:a2:f6:a9:a4:75:6c:c7:51:e1:46:48:a2:
ab:0f:a6:77:39:b8:69:e5:6c:5b:0d:f0:df:f4:66:24:ba:c4:
fc:5d:07:bf:e7:b2:46:b6:28:4c:d0:d2:89:5e:13:94:97:d6:
77:e2:e7:31:a7:bc:1f:c8:99:f2:54:f3:00:ee:47:5a:68:dd:
7b:f7:a8:38:eb:7c:6f:3b:0e:2e:4f:bc:a5:e1:8f:00:9a:84:
ba:99:7a:2c:79:ad:8d:30:1b:ab:af:56:c2:a4:28:c6:85:d9:
57:c5:3b:a0:51:30:20:21:8b:85:e6:c6:0d:68:6f:ba:23:fe:
1c:4c:a6:bc:8e:58:01:01:eb:ac:3f:d7:db:c3:0d:14:17:43:
89:bd:76:48:c8:cb:e8:df:c0:b7:65:79:4f:44:c1:fa:ea:c9:
27:60:3f:88:bf:a8:cc:c8:aa:94:6e:ba:30:03:62:29:18:4c:
d1:d3:83:8a:b6:1b:28:c7:44:36:44:5d:a2:ca:f3:70:db:fe:
86:16:c6:11:5f:67:12:2c:d1:b1:26:9e:3a:1e:1d:70:a4:b8:
12:56:cc:1d:77:34:e8:fe:4f:f2:b3:57:5b:0d:e3:61:3f:ed:
22:d2:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:42 2026 by rpki-client