Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: 2LJEvno709B20Vcs/UpWEq92CNVkBTYTd0rnu0qUMzY=
Subject key identifier: FA:9A:1F:07:59:FF:47:35:B5:19:17:C2:35:81:D4:9C:27:BF:61:BE
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019E3F77CB5EEEC19EAC5353AC4794641DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0D84
Signing time: Tue 19 May 2026 09:01:15 +0000
Manifest this update: Tue 19 May 2026 09:01:15 +0000
Manifest next update: Wed 20 May 2026 09:01:15 +0000
Files and hashes: 1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: pbs8Ri8bljRBLgWuDnZr7m4/nNVQCxujNrV3B4WC6JA=)
2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:77:cb:5e:ee:c1:9e:ac:53:53:ac:47:94:64:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: May 19 09:01:15 2026 GMT
Not After : May 20 09:01:15 2026 GMT
Subject: CN=fa9a1f0759ff4735b51917c23581d49c27bf61be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:c5:af:ef:4a:6e:a3:1f:eb:d2:d4:87:fe:
da:07:c1:da:40:c9:ab:e6:ef:f3:00:54:20:48:9f:
74:19:f7:8c:ec:5f:2e:e2:04:4d:0d:b1:50:f4:71:
69:56:e0:41:fe:6f:c8:5f:33:41:86:f0:c7:15:9e:
04:5f:32:ae:c1:f0:f7:60:d1:46:33:45:8f:6b:91:
af:77:3f:62:b6:23:c0:0b:b6:5c:4f:a4:f2:5a:34:
ff:7e:de:fb:e1:6c:9d:6c:13:9c:9f:e3:3c:bd:0c:
eb:1c:9d:66:98:01:0a:62:8b:61:0b:59:45:9c:d4:
50:de:9c:cc:ba:91:ee:42:66:f4:ab:9c:48:7d:d9:
83:e3:59:f4:e8:f8:92:be:50:40:97:2f:e4:9d:98:
f5:92:66:21:59:db:d0:d3:a6:40:44:e1:f3:81:2c:
73:3a:49:54:8d:be:17:51:cf:39:07:ae:91:73:75:
63:f1:a3:d7:23:f0:8e:69:94:de:65:e7:f7:87:dc:
0b:da:b9:7c:80:be:8d:1d:cd:47:be:36:9e:09:7b:
2c:c5:03:70:25:99:51:84:5e:81:49:1c:76:1d:00:
da:98:00:5a:98:32:26:e3:41:04:b8:d2:a0:88:97:
26:3d:1f:47:12:77:2a:02:0a:05:ee:db:eb:9d:76:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:1F:07:59:FF:47:35:B5:19:17:C2:35:81:D4:9C:27:BF:61:BE
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8c:ce:63:2a:15:f5:45:5f:ef:3b:a1:22:c7:ab:3c:10:26:
e2:87:bb:f5:6a:04:af:5e:11:f7:16:ff:ce:7f:16:db:8d:e5:
b3:df:fe:7b:5b:c9:23:6c:67:54:05:0b:24:e9:0d:3d:78:4b:
eb:31:52:9a:b7:04:d0:f4:f0:55:9b:be:8f:65:36:5b:ee:d1:
63:85:d0:d3:80:3a:0b:0f:46:10:ec:13:75:5e:70:5a:b2:39:
a5:7a:21:48:7f:0a:8a:cc:15:64:3d:b5:17:90:74:88:82:d1:
7f:1f:d0:45:7d:3f:c9:49:17:08:fe:57:b4:a9:e7:7c:56:18:
3b:b9:eb:80:0c:a2:dd:6d:24:da:2c:67:c8:b3:89:bc:dc:0b:
47:f3:d2:75:1c:23:fc:77:2f:fd:c0:03:dd:f7:ea:d2:9b:2b:
21:ce:d6:59:7a:e2:22:66:ef:0b:03:20:2f:4b:31:69:94:9f:
4e:96:0a:c2:25:30:ce:cc:2f:5c:ef:dd:8f:58:71:2b:ad:0e:
16:87:a2:5e:1d:c2:39:a0:a7:0a:29:dc:5d:6b:5d:a6:bb:19:
9b:a4:c5:83:31:ce:70:8a:7d:5e:8e:cd:35:97:d1:72:7f:2a:
bf:d9:c3:f5:8b:d1:8b:17:ff:1d:80:32:f2:b5:40:ef:b1:a5:
fd:6e:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 14:15:08 2026 by rpki-client