Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: IlzDLBHYI/ILMKUSQ8mGPXIVApho+DsgfTQ8CuI10QQ=
Subject key identifier: 73:C7:F8:F5:67:67:C4:08:E9:19:4D:25:00:73:AD:F1:C6:6D:49:C6
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019D38D2EB9E50517035AD6539FE79BABEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 0849
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 1ygXWl56xqWdwn4TflC3PtLjSqY.roa (hash: wDz5snBxEXcvrvGiZ9XQ0363TdLN4FN6tQlUAGosd4Y=)
2: kMPviltRtqxAKO4xs3FL286WfMI.roa (hash: b2KX7/1WNd0ZVOSNk+xrifaPOCqz2zXGvf6d4rAcmDs=)
3: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: eAB0N9rzv5VrxL7Ytf7ib+1U44wOZlxWLb0wdl/JEgE=)
4: xPQBc7eZ2R1OmzVk_QznLDcH24Y.roa (hash: EfDW7rBbqgixbRFm/O3kOxDuO6fhmyskTYvpF7yhzcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:eb:9e:50:51:70:35:ad:65:39:fe:79:ba:be:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=73c7f8f56767c408e9194d250073adf1c66d49c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:97:19:0d:12:ad:95:8f:fe:88:dd:ba:27:
43:6e:8b:80:bf:fc:4d:ca:aa:18:a3:f8:c7:17:8a:
9b:d2:db:81:3a:fc:b8:7c:c4:d8:b6:31:d4:f1:48:
2b:59:cd:56:82:96:28:73:20:08:57:38:20:0c:aa:
b7:9e:e8:c4:7c:df:31:d7:53:ef:94:c6:6e:b1:8c:
32:2d:99:ed:bd:d6:b2:33:b7:c6:5f:7b:52:86:c5:
2d:6e:3c:9e:40:aa:44:a5:99:a5:cd:d7:4f:4d:7c:
e5:ab:a9:2d:00:83:ae:33:a7:1b:f8:d7:48:ea:fa:
4e:24:f2:77:12:34:36:8b:5a:00:98:25:08:fc:55:
2f:2f:bc:da:ff:47:30:12:34:e1:5b:3e:71:6f:f8:
c1:a1:fb:eb:af:6a:b7:19:25:24:11:61:cb:2a:50:
34:d3:e9:ac:65:54:2a:f1:c5:21:3a:b1:b2:2b:7f:
4f:06:64:1a:e5:dc:4f:c2:ed:45:5f:fe:82:54:aa:
76:52:74:d2:02:ee:98:46:41:94:ab:32:e5:77:b8:
05:08:fb:ae:e4:7d:6e:c5:4e:55:9b:09:6d:53:4c:
7b:54:ae:83:d6:fe:d5:b6:20:2f:36:16:40:58:3e:
ec:10:db:e7:b3:c2:6d:c6:cd:31:03:de:e6:1c:b8:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:F8:F5:67:67:C4:08:E9:19:4D:25:00:73:AD:F1:C6:6D:49:C6
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e0:7c:b9:18:f6:4e:31:bd:f1:56:ee:62:08:18:20:3b:82:
62:92:48:b3:04:85:b5:2e:0d:47:cc:74:05:86:62:c5:ac:9f:
67:7a:6b:f0:d3:c3:05:55:0e:64:86:75:32:36:6d:a0:8d:8c:
37:70:30:32:18:72:4c:76:99:96:cf:c3:22:9f:8a:da:1d:2a:
b3:f3:d4:70:a5:55:66:9d:43:fb:7e:55:2d:c0:1f:dd:7b:e2:
f3:9a:cd:f5:d3:87:52:44:8d:2d:18:1a:1d:2b:7e:bd:c4:02:
73:72:cc:19:26:b3:28:ef:09:72:58:8e:4e:ff:ef:b1:db:53:
aa:77:22:35:62:98:30:40:be:52:1d:0c:0b:7a:db:37:10:ad:
69:bc:1f:1a:e6:35:17:21:d0:95:2a:9d:90:79:9e:3b:4b:9d:
f3:65:da:44:2f:2b:ab:13:c7:3a:b7:a3:c4:ca:f9:28:50:33:
8a:52:49:36:a6:c9:6f:b3:f9:ae:8e:fa:46:1c:52:00:6c:2f:
00:22:43:51:b1:67:06:08:57:74:bc:b1:2f:27:31:46:6d:24:
2b:f1:20:37:d0:f5:f4:ee:76:9b:be:84:82:55:f5:fa:d4:2a:
eb:67:c5:0b:e1:97:27:c2:fb:47:cd:e3:29:fa:6b:f7:c9:0e:
5a:23:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:51 2026 by rpki-client