Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: n6poESS/kkyf0UeH7/pXyo1hs8ByNahUdQJENeZmHf0=
Subject key identifier: AE:BA:BA:8C:12:F8:A0:1C:18:0A:E0:98:60:F6:A6:03:1B:45:C5:14
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 019D389C3E8985E2A3D55B59F1A1BB8EA151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa (hash: Gb31UnfXmOSYeiOedmM5BYaTEZl9dUUluUrhCjeeCRE=)
2: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: m48vUOb0+UZaxZt6fRc3Zj/gbMURF1Z0sffatoqwUMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3e:89:85:e2:a3:d5:5b:59:f1:a1:bb:8e:a1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=aebaba8c12f8a01c180ae09860f6a6031b45c514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:ee:27:31:28:28:1f:26:71:e5:61:52:8b:
53:6d:d9:ba:f5:4f:e7:c5:66:02:54:36:84:43:3c:
39:cc:cd:5c:c0:9c:68:91:d6:ac:d2:82:fd:8c:81:
8c:6a:b2:b5:63:ad:26:97:c9:93:79:c8:59:9b:2c:
76:d9:cc:c9:46:64:60:91:0a:29:39:f2:c2:69:48:
fa:ee:8a:6f:32:9f:93:1b:ac:89:18:41:45:e8:d2:
af:7c:91:6d:d9:c6:60:86:e0:e9:2a:51:70:c5:b8:
26:a3:54:db:e8:b6:8b:e6:f8:ea:46:ff:55:1a:dd:
3f:4a:7d:d6:ff:8c:93:5c:2c:c5:95:1f:9e:22:5e:
11:5c:59:31:df:e1:25:94:fa:fe:45:b8:c7:2c:a5:
3f:e3:b7:bd:cb:ef:95:50:f0:94:58:e3:8d:c1:02:
40:4a:21:12:1a:bf:80:65:0a:b8:f1:7a:6f:da:b4:
39:3b:72:55:13:ad:61:6f:55:12:75:99:ce:3a:84:
74:0e:3a:ca:71:e1:45:ea:35:c6:29:54:f6:2c:57:
44:32:98:39:76:5e:89:00:a9:69:d8:7e:49:7d:f6:
13:fc:21:9d:d5:7c:d6:dc:60:86:7d:00:08:40:c4:
95:5c:d9:69:7c:c7:e3:88:74:40:bf:bb:ea:3c:98:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:BA:8C:12:F8:A0:1C:18:0A:E0:98:60:F6:A6:03:1B:45:C5:14
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:0e:10:cb:74:4a:61:48:21:fb:c8:25:1a:cb:98:8b:4b:
5e:55:5a:1b:e9:f8:81:ed:1f:52:0c:7b:13:ea:6d:c1:27:da:
53:af:31:48:9c:b0:27:7c:b3:dd:d1:07:15:ae:a8:6e:3d:11:
b3:a6:34:24:35:8c:92:04:e1:16:5a:f2:4c:de:e7:d1:dd:93:
5a:90:88:7f:33:ee:1c:66:b0:f3:8a:c3:6b:d6:b3:64:26:70:
dc:f1:ed:b6:b2:b7:90:ca:60:a9:68:0a:29:11:e3:c9:88:c1:
e6:98:f3:30:25:72:8a:8c:f8:99:ba:75:65:45:41:71:89:5a:
38:71:a7:1e:7f:f7:10:7b:85:aa:a9:b6:bd:3b:35:34:06:e2:
aa:a4:64:be:2c:51:da:9f:f0:e6:86:14:cd:22:f1:2c:2d:66:
c9:00:d9:c7:2a:7f:74:1e:0d:2d:18:b2:bd:38:8a:d2:88:ef:
e2:62:c8:d0:be:33:67:03:d0:11:fe:c2:59:7d:56:e8:62:99:
f8:ee:50:4b:67:fd:07:81:20:a5:7d:64:2e:81:f9:70:4e:37:
37:ce:6d:9a:74:fa:22:ff:a5:86:2e:a0:6f:6d:97:ee:71:a8:
ec:8b:44:ec:05:8b:67:7a:64:4b:16:02:7b:ce:dc:55:f3:2e:
83:71:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:06 2026 by rpki-client