Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: WNOo9P2qhZY4LAv0KgCd5QgWDEM64LH9KDGGfffUqyQ=
Subject key identifier: 91:A8:78:9C:F7:F7:06:B3:B6:18:0B:5A:B8:FF:80:D3:4E:8B:99:6B
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 019D371B9BBBB40C045AC75A1DFA7F8FFA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 0570
Signing time: Sun 29 Mar 2026 01:00:49 +0000
Manifest this update: Sun 29 Mar 2026 01:00:49 +0000
Manifest next update: Mon 30 Mar 2026 01:00:49 +0000
Files and hashes: 1: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: jWjyTIdlPDxhlFDlJY6l791J8DM08hCZ97Qm4k8X4G0=)
2: ubtmDBZWL-_XbVApVZixkkSYAus.roa (hash: ur+VLKLd0ko7liueH3AQXPuJrl5bo0viE+tYtSib7Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9b:bb:b4:0c:04:5a:c7:5a:1d:fa:7f:8f:fa:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Mar 29 01:00:49 2026 GMT
Not After : Mar 30 01:00:49 2026 GMT
Subject: CN=91a8789cf7f706b3b6180b5ab8ff80d34e8b996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:18:a0:18:dc:a9:1e:a2:b4:23:07:79:94:
e9:e3:6f:e6:a1:44:96:94:f2:b6:a6:60:a6:bb:ac:
5b:a8:9c:59:ab:5c:ae:12:a5:f7:0b:43:27:32:91:
35:44:51:f3:6e:b2:3e:2d:21:57:df:75:28:89:40:
60:43:69:eb:10:f4:9d:29:26:21:6d:ad:5a:0a:5a:
d7:29:68:90:24:fd:71:83:4b:f5:53:e8:ce:d2:0d:
63:43:ef:60:40:f3:7e:84:3c:fe:bf:7e:d6:7e:ab:
b1:a3:e1:80:46:a4:82:af:5b:af:e7:ba:bb:4b:b7:
53:a9:61:89:55:d2:24:9a:7a:69:e7:38:71:2e:52:
e5:bf:ce:20:e9:a5:e3:56:f7:f1:08:4a:00:dc:dc:
0b:88:e6:1e:06:91:58:e0:c1:b3:9b:a6:f4:0b:45:
8a:d1:ab:b8:89:19:20:22:dd:cf:5d:c2:af:b6:79:
ed:98:28:8c:73:07:49:4e:ac:55:f4:9d:66:2a:77:
6d:31:36:e2:4e:6f:50:e7:af:bf:9e:cc:59:e9:30:
ac:23:d4:91:8c:94:8d:35:90:d4:59:b3:f4:6b:23:
cb:5b:41:1a:ab:0c:08:d5:fb:37:4d:a6:c9:a1:21:
7f:5a:b4:df:ea:46:7b:e6:61:07:d9:46:0c:e5:ae:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:78:9C:F7:F7:06:B3:B6:18:0B:5A:B8:FF:80:D3:4E:8B:99:6B
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:92:9c:4d:af:ff:81:50:a4:9c:8c:d9:5a:ef:c1:fe:76:2a:
91:69:3b:1e:bd:1d:74:eb:73:72:99:85:6e:59:c8:52:29:ae:
ab:89:45:44:ad:06:95:db:2a:43:19:b5:ec:ed:42:1e:26:db:
83:73:e6:92:4b:4b:72:9d:e8:d4:fd:37:26:8d:f0:45:c2:de:
8b:55:ab:2d:f6:9d:dc:fc:97:2b:92:e4:2f:f7:11:9f:4d:4f:
6f:f6:46:9f:c9:e9:e4:c2:a0:f5:90:67:6a:e9:eb:a9:67:43:
23:a5:77:c3:98:03:02:91:89:9d:7c:4b:7e:72:10:17:73:4c:
51:8c:1a:84:5d:68:7e:0c:c3:25:85:fd:58:9a:04:f2:78:81:
31:d1:58:41:c3:7f:cf:aa:dc:80:c1:bd:86:24:63:6f:81:26:
3a:ea:02:1b:52:87:85:e6:e4:2e:46:9d:4c:1e:51:a3:03:6b:
1c:fd:a5:64:e5:05:da:8a:64:5e:e8:7b:34:a9:70:64:1a:42:
9a:49:d3:f8:42:0c:5c:e4:59:a8:2c:e7:06:ef:0f:54:35:40:
91:c2:7b:15:c6:f6:06:68:37:de:55:33:5e:10:d0:16:b7:7c:
3e:88:d3:53:96:80:7f:14:69:d8:7d:03:88:35:22:9a:80:5d:
9d:03:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:01 2026 by rpki-client