Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: HYL8G+XFt2a/qvm/lKe3u8kWEwOmFOcO8vsFBWImWSE=
Subject key identifier: 21:09:99:43:F6:B0:3F:71:8A:FF:B4:68:1E:C2:65:AD:54:26:AB:42
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019D37C0F60A51B79FFD3A55D6BC8E2A8305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0786
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: yOpwj/GVR933gi8g1+iHsN1xC3za9Ydlv02ku/mHn9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f6:0a:51:b7:9f:fd:3a:55:d6:bc:8e:2a:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=21099943f6b03f718affb4681ec265ad5426ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:9b:2a:ea:c1:fe:7e:74:88:be:bc:8a:94:
12:ab:56:97:0d:38:5c:3d:83:11:39:c2:ec:dd:14:
e0:23:2b:7f:63:70:ed:7f:bf:88:b7:4f:e2:f6:68:
5e:ac:ba:ad:b0:c4:d9:d5:60:1c:12:51:cf:3d:56:
ff:f5:36:63:f6:cd:24:6c:b3:ae:a7:0c:15:ca:95:
87:5d:18:50:18:05:3b:98:87:a1:6f:dc:be:a1:c1:
f1:2a:f5:a6:0e:e8:f6:07:86:7b:2b:65:75:29:1f:
81:c2:f3:df:a9:05:f7:c0:9e:c4:7a:c9:20:da:a1:
ee:80:e8:db:80:59:97:d0:b8:fd:ec:ec:75:6f:b5:
05:ba:fe:0e:49:af:e7:ca:94:33:4a:5e:2a:ca:a6:
0d:c4:59:e8:a4:ab:b1:e3:e4:d0:b1:58:1a:a0:73:
37:69:9b:d1:41:47:08:b5:ae:f2:1d:ad:15:49:2b:
68:26:12:83:7c:16:6d:b2:cd:6a:85:85:fc:b1:1e:
de:01:ad:30:2f:79:f6:01:e6:0a:d7:3a:d8:48:81:
35:96:51:4f:65:7a:87:5a:8f:4e:b6:a7:63:39:f4:
af:d0:41:73:75:7b:09:aa:0b:ff:b1:ee:eb:a2:b4:
9a:1c:a4:ee:b0:38:ab:c4:b8:75:8a:5d:0b:83:81:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:99:43:F6:B0:3F:71:8A:FF:B4:68:1E:C2:65:AD:54:26:AB:42
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:94:6f:18:9a:1f:c4:7a:b0:00:dc:77:52:db:6a:ef:a1:d0:
31:ec:dc:29:25:23:2c:4f:04:a6:e5:dc:b2:35:07:ed:69:88:
f9:1a:a3:e4:4d:9f:ce:93:7f:06:ee:1a:7c:0a:74:7d:f9:c9:
90:37:17:aa:1d:0e:e3:8f:b6:d8:98:5d:39:41:19:6e:3b:d2:
e3:1f:5a:25:66:3e:fd:d5:80:6e:b2:89:09:43:54:62:0d:c5:
76:b3:8e:0a:cf:32:5a:d4:41:c8:37:5e:ea:d5:6a:06:52:e4:
df:31:e0:c1:75:8b:0a:2d:ca:87:77:fb:db:e9:79:48:25:dd:
f0:6a:e0:a4:76:f4:c9:05:49:7f:2a:3f:3f:a7:40:79:62:3a:
84:98:4c:69:0c:3b:a6:6c:8b:6d:20:09:80:82:40:54:6e:24:
0c:26:b5:c8:bc:89:e5:13:f2:44:7a:27:38:bf:45:e0:1f:bf:
65:8a:30:c3:87:97:5d:bb:a0:a2:e7:92:60:4b:9c:e4:55:6b:
84:67:19:fc:45:37:7a:cb:a2:1f:24:1d:da:f3:a8:62:6a:f6:
c2:9b:42:e0:0d:53:78:92:d3:eb:a0:63:aa:d9:8d:bb:c2:83:
96:a9:ba:5b:ed:6f:54:22:65:f5:00:16:c0:14:03:e3:df:f6:
f7:b2:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:29 2026 by rpki-client