Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: Unyb/5hK1BPOAJRdraAYpXh5yNM37TlXrBs+hwdO42A=
Subject key identifier: 23:72:47:AE:22:98:E3:8F:06:E9:BE:43:87:2C:06:D5:7D:A5:B5:F0
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019D99D07EF92FD5D238B622F894C0EBB1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0FA1
Signing time: Fri 17 Apr 2026 05:01:11 +0000
Manifest this update: Fri 17 Apr 2026 05:01:11 +0000
Manifest next update: Sat 18 Apr 2026 05:01:11 +0000
Files and hashes: 1: a5gV2iTHliPR8LhFYU-KK7QJJvE.roa (hash: Wf9B8UaHcibkRfA0zFpN6M9JgI+cnQ8hTvGPe2+Coc4=)
2: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: LR5ndvdcrExSvW2PFStVfeJHgg2Y6ctpthLpKXlRC9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7e:f9:2f:d5:d2:38:b6:22:f8:94:c0:eb:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Apr 17 05:01:11 2026 GMT
Not After : Apr 18 05:01:11 2026 GMT
Subject: CN=237247ae2298e38f06e9be43872c06d57da5b5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:7d:0e:8a:00:5c:34:a4:2d:44:00:0e:9a:
b8:2b:89:91:d3:04:93:7b:3f:6d:a0:78:fd:5f:58:
17:58:c0:35:60:c0:7b:00:15:38:97:ce:a5:07:48:
0e:e1:48:a4:f5:98:2d:3e:58:18:82:cb:f1:f7:0a:
5e:7d:25:01:e2:ce:22:7f:05:fc:5b:ef:86:9e:38:
37:d7:33:ec:07:a1:30:2a:57:c1:36:0a:e4:41:78:
18:07:62:c8:27:55:33:4c:f6:9c:e6:dd:26:26:4c:
20:cf:d0:41:0c:ff:e5:1d:e1:1d:87:de:34:93:c6:
c8:d4:c4:50:e3:a4:51:a9:91:79:b7:4d:36:01:54:
8b:64:34:84:68:37:90:22:1c:3c:5a:bf:9f:f0:e2:
25:3d:99:55:72:bf:d9:bd:19:bb:83:62:c8:85:80:
4f:42:de:4b:1d:24:50:22:05:6e:0e:dc:e0:8f:50:
dd:6d:b6:8e:ce:44:ce:32:bb:24:df:b9:8c:0d:ee:
3a:b2:2b:9f:a2:93:f9:b7:57:c9:68:a0:72:eb:28:
b5:2c:e6:8e:03:1c:23:cf:0c:51:0e:26:1c:41:fd:
9c:a0:bd:40:ff:61:bc:c7:68:00:82:ab:da:e3:d4:
06:e1:5c:11:15:15:81:2f:d9:4b:07:e6:7f:83:31:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:47:AE:22:98:E3:8F:06:E9:BE:43:87:2C:06:D5:7D:A5:B5:F0
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e1:50:05:69:f7:c2:ee:2e:e8:e0:8b:b6:43:58:ad:e1:ab:
f7:e1:e9:17:28:4b:56:07:d0:b1:6a:4f:07:f3:c1:7b:af:55:
4e:d0:cc:89:25:37:e9:9c:d7:aa:34:0d:b2:cb:b1:be:7f:6c:
29:61:3d:77:f0:e7:94:ef:65:c5:21:b1:43:0c:8e:0b:04:35:
e0:24:25:d2:81:2b:f6:f4:3a:1c:de:b6:1d:a3:76:1d:79:35:
95:d9:2c:4a:ef:ea:38:11:ff:db:95:28:7e:11:ce:76:bb:73:
4e:41:b7:ae:92:ba:f6:72:b9:02:b0:bf:87:10:6b:15:d3:94:
bf:43:be:44:94:ba:41:d3:ee:13:a0:60:cb:ea:d4:a5:e5:f3:
9f:fa:3a:e3:45:77:18:a8:4b:05:c5:a0:e6:4f:5b:92:8a:33:
fa:bf:3c:ea:f3:4f:6c:a1:b8:ea:b7:d9:76:e8:e0:fa:57:12:
83:5f:aa:f9:f4:66:bb:c8:c4:85:cc:56:ed:0d:b1:55:b9:4d:
7a:ac:5c:fc:a2:ba:a7:14:a1:93:ec:c7:40:e1:09:9a:61:b2:
19:25:89:bc:5b:35:0f:2f:60:b8:7d:10:02:b5:31:19:61:02:
5c:ed:bf:9e:3f:e9:bd:de:d8:5b:84:2d:cd:56:d2:e0:e0:a4:
1a:12:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:57 2026 by rpki-client