Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: oRecWtYpYELfgl0PNi/MNu9Rj5P/dm9jdOOFjflQ2r0=
Subject key identifier: AF:79:CE:0D:88:CD:89:AD:29:84:DF:6E:14:7E:A7:B7:45:7A:28:80
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019CACB518BB921CC350DB094433F9367F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 0623
Signing time: Mon 02 Mar 2026 04:01:15 +0000
Manifest this update: Mon 02 Mar 2026 04:01:15 +0000
Manifest next update: Tue 03 Mar 2026 04:01:15 +0000
Files and hashes: 1: GFIibP3fcCQAXue-pLs_MEmE4aM.roa (hash: vZPkadzf5zT9TuSZwyNbMA/XV23iCETvdmYU8OniDec=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: RkHbI8qRLIAU0xnpex/7vQgRRpQ42xbZDEru4z8BylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:18:bb:92:1c:c3:50:db:09:44:33:f9:36:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Mar 2 04:01:15 2026 GMT
Not After : Mar 3 04:01:15 2026 GMT
Subject: CN=af79ce0d88cd89ad2984df6e147ea7b7457a2880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:ed:e1:26:2e:0f:3f:af:b2:4e:1a:d8:d0:
87:b1:38:c6:c2:8a:48:f4:3e:b6:05:88:18:f9:df:
54:b8:83:64:60:87:50:86:09:b1:51:32:f7:5f:15:
a0:4f:a4:79:c5:94:b8:5f:bf:c8:d6:cc:00:23:18:
b0:de:23:77:3d:2c:d0:38:df:eb:26:16:06:94:c3:
b4:23:ec:72:63:6b:f9:d5:e5:17:8d:32:ff:7c:88:
5c:83:25:6e:57:26:9c:a3:64:92:3a:e2:2d:8e:ac:
c2:a7:d1:9b:cf:eb:c2:b5:87:4f:cf:98:59:8b:c2:
93:ea:55:27:df:08:80:36:c4:d3:f5:0b:5a:30:3f:
65:eb:4d:a1:32:ab:87:23:d3:bb:3f:5f:d5:77:82:
08:a4:a3:4f:b5:f8:80:e4:1f:d6:a2:5e:4b:b1:82:
8f:6d:ef:88:c5:1e:b7:fc:27:5b:c5:25:90:8a:7a:
0b:f2:15:46:dc:d1:98:f2:07:2c:91:5b:2c:ef:bf:
50:fb:dd:db:61:9d:b8:5b:35:ef:4a:e4:2c:25:e8:
86:d3:62:bd:01:6d:5b:9e:88:b3:ee:12:b1:0c:f9:
f6:fa:42:fc:5d:e0:7b:7a:46:be:78:fd:a2:4a:4e:
7b:df:61:d5:11:17:ff:10:a8:7e:0e:5b:59:8a:ff:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:CE:0D:88:CD:89:AD:29:84:DF:6E:14:7E:A7:B7:45:7A:28:80
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:51:50:48:8d:7d:7d:7e:b5:b1:57:4f:8e:48:7e:81:1b:
46:13:f7:cb:2e:bf:88:37:be:d0:e4:e9:eb:19:4e:ab:7d:b0:
4a:88:85:2d:d8:bf:df:c7:be:21:e8:01:6b:95:94:0a:f5:9f:
74:ec:e1:1b:d5:c7:38:1b:2f:fd:07:67:75:2a:9a:f7:e8:32:
d9:44:7c:3e:b4:48:63:38:65:8d:d3:0c:cc:9e:d4:0a:20:d2:
a9:c8:0a:f6:e4:40:15:01:f0:02:04:9f:58:cc:59:f7:68:8c:
32:3e:c0:16:9d:48:2b:d4:ff:dd:55:86:e4:73:0c:5a:c6:d0:
23:94:e4:40:40:c9:71:f9:36:98:21:ca:b6:ed:43:56:5a:cc:
12:10:ec:db:c7:0e:a5:2e:c3:64:61:48:28:3a:ac:97:aa:cf:
a6:2c:d2:a3:9f:05:de:91:8a:33:ce:28:20:91:d9:f9:71:23:
b5:d5:ca:e9:b0:24:00:cd:61:31:f0:af:8a:b0:a5:e9:5e:ee:
0e:e0:02:b2:86:eb:eb:0e:ad:36:6d:b0:8d:bd:a2:0d:ff:ac:
72:b5:cc:37:9b:05:41:de:aa:b5:78:e2:e0:c2:3b:9a:f8:8f:
75:21:80:19:69:99:1f:5a:8b:fe:5a:31:f4:ae:1d:03:59:ba:
8a:39:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:29 2026 by rpki-client