Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: 3WwBRUffbMpf4fnZwyq6Lg+Fxw+DngOF8gDVW28ylYA=
Subject key identifier: 73:FA:3B:9B:A6:66:32:E3:CD:24:A4:88:D7:29:FB:F4:1E:CA:6D:2A
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019CB95DF773FA7871E0466B45F90E47388A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 1853
Signing time: Wed 04 Mar 2026 15:01:09 +0000
Manifest this update: Wed 04 Mar 2026 15:01:09 +0000
Manifest next update: Thu 05 Mar 2026 15:01:09 +0000
Files and hashes: 1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: 1FkF0nkSLJNpAJ/T31jG4yeX1kJAqyEHF+9SlT2/Eo8=)
4: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
5: mMjQwsKF24ZKL7c4zTHAfg4rumM.roa (hash: G+TwoGVMZse5gGI9aYgtJxQEsuU/r7y/8I2CjknEOrk=)
6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5d:f7:73:fa:78:71:e0:46:6b:45:f9:0e:47:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Mar 4 15:01:09 2026 GMT
Not After : Mar 5 15:01:09 2026 GMT
Subject: CN=73fa3b9ba66632e3cd24a488d729fbf41eca6d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:6c:a6:12:2c:67:1b:2f:cd:6b:de:26:e3:
3b:e8:d9:4c:77:84:41:f5:70:8a:fb:c2:fd:fc:81:
c6:36:65:95:b2:05:59:68:32:60:e9:65:27:12:97:
71:84:31:ce:78:b6:ed:92:da:81:ba:18:bb:f9:57:
cc:1a:c0:6e:a6:27:3a:70:fd:ef:3d:17:8a:c0:e4:
a0:b6:53:d0:e3:78:b0:c3:50:9f:01:04:8f:e0:1e:
4d:9e:cd:85:70:4a:b4:4f:fe:d2:64:23:94:f4:2d:
37:45:fc:b7:7a:f8:39:55:02:bd:e1:25:d3:4d:44:
8c:2d:58:de:23:58:c7:9b:d3:1e:58:15:1e:04:42:
ea:32:96:e1:e2:b1:05:bd:45:7e:32:04:9b:65:6c:
79:cf:98:bd:20:72:b7:61:b5:ba:0c:7e:15:34:28:
32:bb:7b:74:f9:2b:67:d1:5f:87:f9:39:37:01:72:
ba:c2:2c:7e:2e:93:fb:b6:50:cb:95:35:e0:8e:1d:
7b:c4:43:06:58:22:7d:ab:b3:c0:6a:cb:16:72:c5:
9b:98:08:64:0b:db:23:b3:de:ba:ab:91:88:8e:83:
44:0f:22:47:a6:a5:a4:5a:d2:cf:3b:96:a1:6f:d3:
ec:40:91:df:ca:a9:53:15:71:a1:6c:26:ad:50:80:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:3B:9B:A6:66:32:E3:CD:24:A4:88:D7:29:FB:F4:1E:CA:6D:2A
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:02:28:cf:3e:48:67:9a:a2:89:28:ef:ff:34:f1:5c:60:83:
37:41:80:75:2e:90:54:cc:22:9e:a0:7f:a6:8f:cd:c3:fc:c7:
eb:af:65:aa:91:d8:f0:c6:d7:a2:7b:e2:ba:80:02:aa:63:7b:
78:4b:22:28:81:f9:57:4a:06:b0:cd:52:96:35:93:a2:58:2a:
68:db:23:f0:1a:d4:1d:60:d8:24:a9:3d:7b:12:c8:af:dd:07:
32:6f:01:e3:57:bd:ad:0d:65:f8:d0:de:10:f6:e6:96:69:f3:
f2:d2:aa:ec:c9:85:ac:1c:34:5b:61:4f:c5:56:2e:c3:51:04:
9f:67:da:f4:ec:4d:72:4c:be:13:5d:8f:92:b2:92:bf:c4:b9:
d7:5f:b5:01:01:52:fa:96:55:d3:a4:40:40:14:d8:11:ab:a3:
6f:51:c0:26:98:be:c5:ab:23:e1:f5:bb:19:f2:b8:53:a4:8d:
ae:19:7b:62:bf:bf:a3:20:a6:64:aa:85:55:e9:a8:e2:36:ce:
18:f8:67:76:c2:b0:f4:71:45:7c:5f:24:e7:21:06:0a:c0:f5:
0d:de:76:19:1c:09:5b:77:ea:21:07:2a:2d:68:a4:a9:29:50:
ed:44:dd:37:a7:ee:e3:f8:e8:fc:00:fa:95:d6:a7:d1:78:27:
bc:0b:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:12:42 2026 by rpki-client