Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: de8UCAGET1drC84++3kKxYVtLstj2ZZ6Uqkg5GfuCR4=
Subject key identifier: AD:B8:51:13:3E:E4:49:E9:B6:AA:C8:91:49:1A:5A:D5:BE:16:9C:48
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019D37892AFA2E9638F5B65E5B24B50B1610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0F3B
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: 4wk9G6gIn4aYwuhM1IHla1F3g_o.roa (hash: zRDXNJfCkrvxLeiW37gj5jm7Vy6uGsNGYEbIgmJIKNY=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: 5C+DJNUkUkbTOQaJpx99yu6+Xkdcr4dQ1h9klL/bJi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2a:fa:2e:96:38:f5:b6:5e:5b:24:b5:0b:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=adb851133ee449e9b6aac891491a5ad5be169c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:84:8c:93:ac:6d:81:53:d2:19:e8:19:43:
08:2b:8c:63:0c:70:ca:45:ab:bd:fe:bd:1a:23:18:
dc:a8:44:af:77:27:8c:4a:a5:6d:27:d2:9e:1a:ac:
23:fe:c9:4b:70:6a:f1:27:eb:51:14:41:bd:7a:70:
fb:74:6f:2a:47:da:24:76:dc:54:fc:87:13:29:77:
02:76:9d:fd:1a:51:89:51:4b:51:1c:d1:80:2c:78:
52:c8:53:9d:a0:9f:44:3b:89:64:0f:d0:c4:0e:09:
93:fa:dd:54:55:6f:4c:05:91:75:40:f9:eb:27:e3:
20:7f:ba:e6:f3:0b:2c:db:e7:e8:14:0f:68:10:a0:
a4:4e:c0:c9:26:98:bb:f2:0e:35:99:a2:b9:9e:be:
40:0b:10:d1:fe:06:95:05:96:3c:68:14:25:2b:cb:
e0:65:4e:92:31:42:47:a5:93:04:46:eb:58:81:80:
92:67:28:87:3c:80:0a:0a:9a:7c:ff:98:78:aa:9b:
07:f5:d8:8f:68:d5:00:e7:cb:61:af:51:f0:4c:80:
e8:23:0c:db:6c:1a:79:2b:a4:b2:52:c5:de:6c:4f:
a9:e1:fb:6e:87:02:a7:30:11:eb:91:52:d0:be:d0:
d2:5e:0e:3e:6e:ee:45:34:56:7c:ff:d3:9f:38:4a:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:51:13:3E:E4:49:E9:B6:AA:C8:91:49:1A:5A:D5:BE:16:9C:48
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:43:65:5e:ed:51:63:bc:49:f9:b3:77:da:73:22:cf:d5:df:
2a:e7:fc:3d:5a:e4:e1:39:46:ad:9e:e2:12:5a:6e:20:4a:fe:
e1:03:72:34:06:07:ce:a0:4b:52:62:de:84:b7:d0:7f:b5:ca:
62:01:1b:f3:cb:86:20:ed:28:9f:d5:b4:b4:37:dc:d2:cc:97:
be:6e:a2:2d:f0:9f:30:40:1e:9f:f4:7b:a6:07:ea:8f:84:93:
69:cf:23:29:f7:3c:6c:91:86:6b:44:bc:ea:81:9d:22:b6:85:
1a:ba:27:94:ba:e3:f3:37:d7:7f:fe:b0:6b:04:dc:b0:d5:2f:
17:90:7b:3b:a9:29:bb:17:fd:52:fb:4a:73:87:45:f3:f9:5b:
c4:c7:6c:cb:d2:b4:48:06:91:98:b1:dc:66:59:ad:88:16:fa:
88:46:80:f5:50:5a:e4:ec:1f:1e:d6:20:b2:0a:d0:35:21:a6:
6b:37:81:c4:62:3b:4d:da:79:99:64:d3:f8:0a:a0:2f:90:ec:
38:bb:bb:09:a1:a5:64:88:2a:70:58:67:b8:71:7c:1e:d6:de:
cd:f0:9f:c3:71:ce:fd:6b:48:99:88:03:e4:87:75:2d:56:a8:
ad:b5:95:e9:1a:52:a9:6a:de:8a:0c:92:2b:55:c7:55:eb:dc:
9d:1e:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:48 2026 by rpki-client