Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: gR4BxNPayHlasfAxiyfgtQ5OCOuqMwrHbuwZjljx8nA=
Subject key identifier: C4:A4:E8:A1:90:56:00:3E:74:4F:E9:B3:E1:DF:BD:C2:6E:D4:FC:98
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019D394109E14AAD32B4582B767E17590871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: dfMUl/CYRGyTQFYvPOZb2CApl0k6WSISEv7grrnfhig=)
2: tYHsABD7wqlyFO9X8Yy_-luDgKw.roa (hash: i2ZdarVr8LLRaDGxjRmRFhWtnj6AvxOcMrUABRbNylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:09:e1:4a:ad:32:b4:58:2b:76:7e:17:59:08:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=c4a4e8a19056003e744fe9b3e1dfbdc26ed4fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:ab:45:bb:44:43:a2:83:02:d3:04:38:a9:
82:e3:ab:e0:9a:37:d3:8c:92:41:c9:ae:5b:36:c8:
f6:44:b9:2d:e1:8e:f2:55:f4:c1:9a:9e:94:2c:ec:
b7:9c:2f:df:47:11:f9:a3:93:14:f8:eb:7f:37:64:
aa:99:e1:bf:66:9e:9f:93:e1:2d:50:de:98:12:1f:
ec:35:1e:d6:21:05:6a:32:62:df:62:ac:76:e9:27:
d1:f8:9e:37:fd:6f:cc:b0:1a:23:b9:f5:89:c0:6a:
dd:8f:6d:f0:16:60:96:b4:ea:ff:a4:65:bc:32:61:
db:77:c6:93:96:07:f6:04:c3:16:cd:45:8f:23:07:
31:01:ca:18:75:34:a9:45:ef:ad:2c:12:6d:c5:9e:
a1:03:26:dd:87:95:76:91:c7:3a:58:df:d7:ac:6a:
cb:7d:57:a8:c8:a0:e8:aa:33:3d:f5:02:47:01:17:
4e:07:91:e3:64:21:81:a3:44:5d:69:56:82:de:aa:
18:3b:94:27:48:d6:9e:8e:55:87:22:c7:80:7d:90:
cb:81:f4:2e:c3:79:52:63:f1:21:fe:94:a8:b4:08:
77:74:1b:33:f1:77:ea:83:12:60:5b:4c:ec:58:d9:
25:6c:50:60:8e:10:18:e5:8f:6e:81:df:66:b1:69:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:E8:A1:90:56:00:3E:74:4F:E9:B3:E1:DF:BD:C2:6E:D4:FC:98
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:9c:85:be:3e:de:ee:2c:75:2f:a7:07:af:fd:92:53:9a:
92:cf:32:2f:2d:9a:70:f8:ea:0b:08:97:af:e9:1d:9a:78:9f:
b9:f8:4c:3e:ca:2b:27:3d:c4:35:81:11:a7:d1:f8:62:23:45:
ab:5d:3d:59:f0:02:76:30:b0:a2:46:c5:f9:e7:a3:4b:6d:43:
58:23:38:d3:fb:9b:1d:b1:2e:12:d2:5a:57:8d:43:2c:e7:fc:
27:ad:ed:18:e9:f4:ba:2a:37:07:a0:38:17:2f:7f:70:a8:6a:
d9:fd:5d:12:34:1f:78:c6:92:85:bf:9c:e5:26:7e:53:85:fe:
45:1b:83:a8:16:10:97:d6:14:c4:6b:53:e0:31:33:4a:01:18:
e9:08:74:76:0c:51:d6:ef:23:4f:7a:01:ef:8c:72:41:eb:04:
31:b8:15:5d:5f:1b:7b:c6:df:5e:27:4a:5c:16:5e:23:b3:21:
f5:68:40:78:e9:b4:d9:58:ad:f5:8b:ae:ea:c2:a3:62:ca:f3:
9a:35:14:cb:d3:bd:60:75:04:f1:39:ca:d2:23:74:f5:09:46:
a4:e8:c9:d0:2a:77:2f:44:09:30:2a:dc:62:82:ae:69:71:d7:
a6:a1:04:f9:d8:c3:ad:96:90:3d:6c:50:d0:7e:a1:0a:56:1b:
57:70:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:57 2026 by rpki-client