Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: Ejsbph01Ks6GPI62yV4XOofOUYiqdHeKitdasr1tXFM=
Subject key identifier: 02:21:B7:8E:43:AE:BF:1A:19:F0:02:06:64:00:36:57:A7:F2:78:59
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019D3941909E755980A5BCE41E59AD3A458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: px06oNAROm54krbpZaxHlJM9ONsG9DKeVRadh9TBclM=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:90:9e:75:59:80:a5:bc:e4:1e:59:ad:3a:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=0221b78e43aebf1a19f0020664003657a7f27859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:4c:e2:ef:23:ee:0d:65:a3:8c:7a:6f:57:
4b:fc:7d:78:2f:4a:9c:8c:b6:e5:9b:59:bf:a5:fd:
fb:ba:65:35:ca:7d:ac:0e:ea:56:7d:f3:17:bc:c1:
92:02:c5:0e:50:1b:16:17:3b:f3:9e:58:8c:57:90:
f1:d2:e7:b6:83:96:5c:fc:bd:f3:66:73:a9:ee:7d:
01:2a:2f:66:55:95:6c:18:31:7d:2e:68:54:ca:f1:
c1:31:27:e3:46:60:e5:d5:07:6c:d2:5f:06:b0:51:
93:47:19:7d:e1:84:3a:c1:e1:21:99:7f:be:c4:3e:
a4:d4:61:8a:ce:1d:98:d0:f1:23:b3:f3:f0:67:f1:
1a:7d:8d:19:c1:5a:55:c9:8a:b0:d4:34:80:dd:e4:
9a:de:b5:dc:df:1e:c9:86:f4:0a:bd:07:c8:5e:28:
24:a0:d3:50:24:b9:32:60:8d:4e:e5:4a:f4:52:20:
31:f9:d1:f1:2b:88:fd:7e:ca:35:79:03:dc:19:eb:
2d:9a:58:39:04:1a:89:6a:80:f3:56:b6:05:82:d7:
88:57:15:ba:4c:c2:a4:c5:3f:b7:7c:a5:43:45:6d:
66:f8:e4:1f:64:9e:82:15:98:26:bd:92:4f:7b:7f:
80:dd:cb:e7:69:41:7b:e5:e6:1a:6b:8e:8f:0f:bd:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:21:B7:8E:43:AE:BF:1A:19:F0:02:06:64:00:36:57:A7:F2:78:59
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:99:43:ea:42:5f:e8:52:62:b2:0b:05:92:13:ae:a3:eb:
c3:b4:df:44:8e:d4:a3:e6:0c:d1:55:a1:78:c5:cb:17:a0:0c:
ea:11:9b:47:f2:de:14:9a:69:1c:c1:51:ec:ea:61:dc:5e:73:
64:de:d7:17:28:dc:14:29:dc:e2:7f:20:e2:cc:10:d2:fd:e8:
23:31:ec:c4:cb:3d:c6:2b:87:ab:fa:f8:cc:2a:19:ac:87:1e:
7c:b3:22:2c:c7:59:ff:18:dc:8f:c6:74:68:b8:46:4e:d3:5a:
fb:a2:09:76:3a:da:00:ba:f9:d1:2d:d5:83:f7:20:f7:6c:2c:
f6:01:81:fe:f8:a4:55:32:42:2d:31:72:85:04:04:33:1e:59:
c1:27:3a:e0:c8:b6:3d:c9:c8:95:22:84:68:67:e5:91:32:29:
db:51:85:8d:4c:ff:04:49:f0:90:65:de:76:8a:bb:a4:4d:f5:
d8:f1:aa:0b:cb:28:c6:61:be:97:96:72:e4:d3:34:2d:bb:67:
d1:81:df:af:d0:23:d5:b5:9b:ad:b4:dc:d6:35:79:b8:62:da:
d4:b3:c7:9a:70:57:1f:0a:20:88:9e:0b:1a:3d:b6:c6:bc:26:
a4:e0:05:21:6f:f6:1c:fd:14:9d:66:0b:da:54:5f:08:36:c4:
3f:4b:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client