Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: nrnl2UqA7wePPkggkYVDmZL/ObbiqX5CbzOy3IkSey4=
Subject key identifier: C5:AC:E7:4A:D2:0B:D6:CB:4C:9A:19:9A:77:6D:B0:00:ED:EF:DE:D8
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 019D37C0D6E9096356F8A3AF30F53A7B14DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 155E
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 8nXIbFghhbIgt8n2cEDxOIHgcvk.roa (hash: OLo/fVN4422Me1580uumZYkNJ6C1/oum8x+PWUvjDZ4=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: n9yqF9CSe3oqL29EgOaXhqoLQlwqpIbXk94YUfbhqZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d6:e9:09:63:56:f8:a3:af:30:f5:3a:7b:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=c5ace74ad20bd6cb4c9a199a776db000edefded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:eb:61:bb:1a:b5:ca:fc:55:78:e7:13:9b:
d6:56:5f:d4:45:1b:44:e2:48:8f:27:7d:91:75:d1:
37:ba:07:a1:5f:fa:6e:37:2b:15:e8:14:e6:87:99:
de:2e:5e:e7:a5:2d:69:11:d2:1c:4d:bf:90:5f:45:
4b:71:5e:b3:68:12:30:e2:9c:37:d7:31:54:fe:fa:
09:06:d9:d3:53:02:a3:fb:49:c0:c2:d3:fb:6b:8c:
8d:08:38:ca:e9:ca:b7:cc:df:16:29:5a:f1:bd:d6:
79:46:8c:97:ca:19:0e:3e:8d:1a:e1:9d:ac:14:6e:
1a:f9:28:3c:1d:d9:fb:ce:46:83:50:37:dd:02:fc:
2d:9e:0f:09:a3:54:c2:a7:0c:ab:e8:46:10:c3:e6:
3b:41:c0:59:aa:6d:e6:87:00:2d:2c:34:ce:2f:6f:
d4:19:05:8a:c3:d5:2e:fe:13:d4:b9:27:d7:33:dc:
7c:bd:48:33:f8:f7:bd:96:81:49:94:0d:21:87:ad:
81:41:d6:d5:2b:7a:0b:a1:35:87:52:e2:15:c4:10:
ef:9f:75:45:2b:e5:b8:84:af:fb:91:37:89:68:84:
ae:48:53:86:06:e5:77:2d:3a:80:2f:71:37:8f:bf:
2d:b1:3d:c6:c9:f0:5f:7f:4f:16:4e:46:81:04:39:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:E7:4A:D2:0B:D6:CB:4C:9A:19:9A:77:6D:B0:00:ED:EF:DE:D8
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ee:19:45:9d:3f:bb:02:bd:5e:04:31:99:e9:02:f8:60:6f:
24:6a:9b:73:ae:2f:30:e7:f7:d2:90:2f:73:ab:1a:22:96:f0:
df:01:f6:01:17:d8:27:02:ab:6c:5c:29:0e:0f:0c:87:51:01:
97:df:ae:68:5a:0e:fd:a2:50:89:d0:1e:f7:ae:6f:05:99:de:
21:57:5f:41:ab:c8:39:89:13:d1:2d:c8:6c:0a:9b:c9:7d:0a:
70:64:cb:43:02:1d:97:e9:28:4c:fb:a8:30:43:01:ca:47:9b:
4d:ff:5d:07:b9:a2:b5:dc:36:d9:d5:4d:c7:9f:80:08:9d:0b:
a0:a3:8a:1b:89:00:a9:7e:9a:50:03:56:6d:1f:a3:67:70:e4:
6d:f4:44:ac:e7:7d:cb:83:f5:0e:1f:ff:91:33:74:6a:0b:2d:
71:2d:1c:14:b5:32:22:4e:71:cb:9a:cf:09:6a:6b:bb:56:00:
0f:69:6c:ce:a7:25:ed:66:6b:1a:37:41:3c:85:22:9e:60:a6:
31:a8:67:df:26:b3:6d:24:de:f8:bf:b6:1e:94:f9:b0:82:01:
12:a4:5a:c7:ee:b7:e6:62:81:d9:bb:56:a0:a0:ea:7a:f9:30:
84:47:99:ed:c3:57:7f:67:6b:f4:c7:d8:23:dc:b3:40:06:1b:
6c:d6:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:10 2026 by rpki-client