Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: vDICqw4HuN/K3QnyiQt9p33qBZ0Bxx2omtNTc8fWlxw=
Subject key identifier: 61:A7:7E:48:26:87:BA:64:FC:13:BD:EB:9E:AF:54:E7:B0:DB:A1:63
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 019D36E51541ED2AE3D796AC97944484A439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0598
Signing time: Sun 29 Mar 2026 00:01:15 +0000
Manifest this update: Sun 29 Mar 2026 00:01:15 +0000
Manifest next update: Mon 30 Mar 2026 00:01:15 +0000
Files and hashes: 1: 9IHrAt44QyoQXEQYn8yZd1FCGBU.roa (hash: AqcqSMjwHuNGwoWeAKqJtnJMa/jkdc0IN4+ezx8SqwA=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: jJSUMDr6xKbwzA4+D6tXdsZaCNRsNVuATNJ/5KM+3BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:15:41:ed:2a:e3:d7:96:ac:97:94:44:84:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Mar 29 00:01:15 2026 GMT
Not After : Mar 30 00:01:15 2026 GMT
Subject: CN=61a77e482687ba64fc13bdeb9eaf54e7b0dba163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:d8:ab:3a:58:34:78:41:b6:3d:9f:9e:d7:
4c:c9:f9:aa:67:1e:50:28:cd:c2:d3:7b:84:9e:39:
b4:55:34:0c:dc:78:bf:20:6f:b9:4b:24:81:53:bd:
c7:13:39:a3:89:e7:ed:d5:85:28:b7:ad:0e:df:5d:
51:26:75:51:37:1f:08:4d:5b:19:08:35:a6:ab:1b:
17:0f:04:9f:ac:95:7e:2a:a2:f6:10:31:56:c0:f6:
c8:d5:d0:04:40:ff:36:dc:7f:af:ff:56:ec:7c:be:
75:df:66:96:f1:27:72:23:63:05:cb:ae:48:5c:46:
f0:ff:59:09:3b:92:9a:2b:3f:1c:a9:35:2f:60:25:
de:61:b8:ec:0a:b6:90:45:85:34:03:f2:69:47:a9:
3c:6f:3d:28:ec:e2:a3:05:87:be:10:89:66:39:41:
6d:d8:94:ab:1e:cb:4b:5c:58:5b:b4:f2:4c:70:e9:
99:fa:18:cb:8e:1e:e1:00:41:b7:1c:a6:6b:12:5c:
da:66:1f:68:94:f8:95:8c:6a:e0:f1:04:26:56:8c:
cc:21:5d:24:fd:09:b3:f1:f6:1a:28:cb:cd:76:9c:
70:88:41:7d:dc:06:1c:89:72:7f:c5:61:d5:62:c0:
86:a9:11:da:7d:d7:92:61:ad:04:ff:c0:a1:48:fc:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:7E:48:26:87:BA:64:FC:13:BD:EB:9E:AF:54:E7:B0:DB:A1:63
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:16:a8:a2:68:87:77:2b:42:a2:5c:d9:e8:f2:b0:9f:7a:
c0:b4:68:99:76:e2:db:5a:81:f5:43:b7:da:16:e9:8b:81:f5:
5c:28:da:9c:ad:4d:9f:16:95:85:ef:84:ea:a0:65:5a:f0:47:
8e:3e:1f:32:2f:65:b6:48:27:ad:38:48:ea:55:99:4c:51:27:
cb:53:81:96:ba:3a:2a:58:0a:50:e0:07:a9:a4:d2:6e:72:dc:
9b:96:d0:b6:f6:14:31:94:46:dc:db:ff:d4:3a:6a:a7:6e:6c:
cb:72:47:04:ea:6a:05:89:32:29:f3:9a:29:f4:58:62:bf:2d:
05:6e:aa:6e:0b:df:e7:ee:88:e1:80:44:70:16:a5:2c:91:47:
77:2f:bd:ca:df:da:f8:69:0c:52:0a:64:45:8c:76:64:3f:05:
4b:65:20:70:4a:d4:fe:91:e3:79:46:8c:d6:54:98:88:1f:28:
e1:b9:50:8e:44:c6:81:a0:f5:8d:1f:2e:78:39:51:7a:a0:8d:
65:4b:27:79:2e:b2:ff:ed:ca:2a:0c:5e:42:3e:5a:f4:49:3e:
fb:e7:87:3e:a2:06:b7:aa:75:49:ff:a2:fe:2e:86:39:3f:cc:
2f:2a:2a:a7:52:6c:3e:71:22:34:14:1e:25:aa:93:44:22:88:
4d:d2:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:21 2026 by rpki-client