Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: /xKR3dYZn5BkkOfVEkKSG6Gzh+u0JtcASdjx7j0oLZU=
Subject key identifier: A6:9D:53:01:32:7E:BC:F7:64:6E:CE:1D:9C:4B:E9:38:97:5E:CA:15
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 019D39E5C054B0F8E88866DDA04F74040898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 15A3
Signing time: Sun 29 Mar 2026 14:00:51 +0000
Manifest this update: Sun 29 Mar 2026 14:00:51 +0000
Manifest next update: Mon 30 Mar 2026 14:00:51 +0000
Files and hashes: 1: KoZviyPQEL5Xi6gVwYr2Cd9mx2c.roa (hash: fqe8eG4WVuOA3Nqn5E8vEQ5c8f4TyPMKdiIPBRAGwdE=)
2: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: p7u1OGqs1ufyMe8cEa9snp3CCT9UHc6dO0aLwORXBt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c0:54:b0:f8:e8:88:66:dd:a0:4f:74:04:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Mar 29 14:00:51 2026 GMT
Not After : Mar 30 14:00:51 2026 GMT
Subject: CN=a69d5301327ebcf7646ece1d9c4be938975eca15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:3e:0f:fa:da:f8:e8:da:f9:02:18:0f:b0:
7d:5d:52:96:39:58:d1:21:b0:c8:bb:9b:c2:01:51:
c3:d6:65:02:63:f7:11:b2:85:f7:57:60:d6:bd:b9:
08:7e:01:41:30:6d:e0:fa:5b:cc:49:50:55:2a:9a:
39:13:ab:96:4c:6d:88:23:30:1d:f9:03:61:f2:58:
39:13:21:ea:85:76:0f:c6:df:15:25:df:02:27:ea:
d8:48:09:f9:2b:79:bc:22:55:d0:54:44:6b:3b:94:
52:b2:92:2e:34:28:c5:e4:57:b8:79:7b:f2:5e:ad:
b4:e2:04:37:0a:8c:92:bc:32:6e:c2:b0:3b:eb:a3:
12:f0:5f:92:57:a5:e0:c0:dc:ed:1f:3b:17:01:81:
e4:68:6c:c9:62:a5:bc:96:6e:21:d6:ba:ea:f7:c9:
2b:20:d2:86:d6:29:08:6e:5a:1f:d4:26:5a:34:bf:
39:a3:0d:77:be:54:8e:af:eb:7e:0c:7a:a9:b9:fd:
99:29:95:e8:6d:08:ea:41:67:da:d3:fe:e6:07:f7:
70:3d:c5:36:5a:ef:25:b5:a4:77:99:43:e8:ab:3e:
9f:fa:c6:25:28:b9:77:5d:87:43:30:78:8c:35:10:
aa:2f:fb:dc:8f:cc:d4:1d:5b:f0:d7:21:4a:71:6d:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:53:01:32:7E:BC:F7:64:6E:CE:1D:9C:4B:E9:38:97:5E:CA:15
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1d:7b:fe:1b:78:60:e6:00:4a:9a:c1:cf:11:bc:db:7c:27:
19:b1:56:21:03:10:2a:f9:5e:d9:9c:dc:8d:3b:7a:10:47:41:
c3:bd:8b:4b:d8:44:3d:c1:e1:4a:1c:9a:fc:0b:a3:32:bc:2a:
cc:1d:41:17:17:b8:23:82:1a:63:b6:09:1c:9a:51:c1:f8:7d:
29:7c:45:d1:16:9e:19:e3:64:43:12:89:37:01:36:70:7c:e8:
45:d3:19:e0:c2:8e:a6:bb:f7:96:de:b3:97:bf:65:a8:bd:03:
44:26:2b:2c:1c:4e:15:90:57:fa:00:56:c7:e9:d0:73:63:d1:
89:d4:04:a9:9b:31:7c:5c:8a:df:5c:60:6b:c8:87:57:e2:52:
b4:ed:95:1c:4c:5c:34:18:70:f2:df:16:c5:4d:84:1e:b3:c8:
a1:13:64:05:25:ff:c0:92:27:21:cf:66:73:df:9a:1a:0c:a1:
79:19:d4:6e:23:95:af:53:97:f0:b2:fa:74:b6:e2:1f:25:88:
67:81:c3:4a:05:d8:d3:ad:fb:d1:3d:d1:24:e3:97:4a:1d:70:
1d:82:6c:dc:47:d9:4c:53:fc:56:22:18:02:5f:80:1a:24:41:
b5:89:18:fa:b8:9d:c3:90:f7:5b:68:2b:c4:e9:7f:9f:e6:f5:
39:2a:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:26 2026 by rpki-client