Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: x2Rm4LfNfRQz7Ry9BbK5Ejnlz7GZejeaKCldAmr2HgE=
Subject key identifier: 9B:36:C3:CA:75:48:9F:CF:C0:0D:1D:11:F0:7E:29:44:8F:B6:2F:29
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019CABD90937AFCF5E4B2A48AC964B52A9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: RZP_EJvUPRy8N5V44f-ykW1wgg8.roa (hash: LUUspyCZgfPy/9PXdd/3xbh9XNVlKFlsig4SSBadF24=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: NlDZ8Yc4oSKioWIqXsi4WdyKuUgrfm9CYHLT7r91q9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:09:37:af:cf:5e:4b:2a:48:ac:96:4b:52:a9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=9b36c3ca75489fcfc00d1d11f07e29448fb62f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:2d:fe:6a:69:8f:bd:4f:03:5c:94:fd:c6:
5d:e6:e4:87:4e:b6:d2:6c:a0:2f:07:60:e8:d0:b0:
6c:83:fe:ee:27:1b:9b:58:e8:e9:91:ea:3c:8b:50:
ec:15:b4:92:a6:70:0b:fd:39:60:5e:9e:67:49:e1:
e6:e0:e4:34:cd:86:24:8c:82:dd:05:5b:9a:68:6d:
96:4e:7a:e6:0c:06:ff:e2:36:b2:df:d0:d5:1c:c1:
2c:fe:db:b7:40:49:02:da:36:2b:b0:d1:72:76:c8:
8e:9b:06:39:7b:2c:9b:f9:50:f9:28:25:0d:ac:1e:
40:aa:60:ab:4a:e8:f6:e8:2d:74:fb:ca:0d:5a:9c:
46:db:ca:5a:01:50:f1:02:a0:e5:e6:df:a5:d3:83:
38:ce:b8:40:19:ca:79:fd:e9:96:ec:58:7d:bc:cc:
28:01:e2:42:53:f4:11:7b:9e:84:6b:a6:88:a8:71:
02:63:83:e2:2c:1f:d0:fd:8d:84:82:ca:c9:c1:c9:
43:56:01:ca:59:51:c6:36:ee:0e:6d:cf:00:28:10:
ba:53:dc:3c:34:7c:fe:d9:11:61:b7:3c:66:14:b1:
ba:a2:97:23:e2:32:99:41:d2:a5:41:c7:48:d7:23:
86:c5:12:ab:c8:98:dc:48:ed:1a:81:84:20:c3:32:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:C3:CA:75:48:9F:CF:C0:0D:1D:11:F0:7E:29:44:8F:B6:2F:29
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c3:e0:45:4a:e8:b5:d3:68:cb:f5:f8:03:22:78:c4:2c:10:
14:42:11:64:fc:d0:0b:ec:1c:bc:c1:18:70:b3:96:0c:61:fb:
93:45:1e:37:dc:25:a8:0f:67:ca:ef:06:13:be:cf:73:3a:5e:
a7:d5:46:28:8c:c4:0f:b4:5e:00:81:81:b6:d3:6f:b9:57:68:
53:3b:85:54:df:2f:73:06:2c:93:2d:fb:cf:d0:1c:09:ac:a9:
e9:3b:59:1d:91:82:13:9a:25:38:47:79:30:4d:34:40:bd:e9:
21:3a:8a:ef:f1:af:5d:fd:f3:3c:7d:16:43:1a:81:15:58:cf:
28:a6:dc:65:c2:2a:dd:4d:db:2e:74:69:0d:10:11:0e:bb:df:
37:40:f6:3f:d5:c4:43:b0:71:2c:70:72:8c:bf:5f:01:08:eb:
2e:a7:51:97:cd:3d:3b:a2:47:4d:9c:4e:c9:3d:8b:c0:82:72:
af:58:bc:81:d1:24:8f:cd:ad:89:d1:64:fb:75:6f:38:01:6e:
fa:8c:75:c8:cb:0a:00:c4:c7:a7:c2:ab:a9:02:b6:b3:50:c5:
2d:3c:89:c9:99:61:49:f4:34:c5:25:7a:67:ba:db:89:11:90:
72:c6:02:b3:db:21:20:16:4d:df:73:4a:37:30:52:b8:3e:54:
63:9f:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:37 2026 by rpki-client