Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: kBIF+gF7ceUaVSV2rM1vyJ9w+z8x3lzE9ZoMj32hb/I=
Subject key identifier: 4A:D5:0A:CF:44:1A:F2:E4:EC:B6:E8:DB:E9:A6:C7:25:5D:C0:DE:C5
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019D37F6F17E35593FE06997269F732904F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0F1C
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: USwT2SeaguMlyEEPFKrGUCTjicc.roa (hash: fLXx8GADpNCNj3rL26EzgEHCDr9VafNfGAWI6je4Vrw=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: s91+f4Wk1C0Dseydkb2HWi9AvOJEVCq6rYw3O833j30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f1:7e:35:59:3f:e0:69:97:26:9f:73:29:04:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=4ad50acf441af2e4ecb6e8dbe9a6c7255dc0dec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:53:c3:f5:31:d2:47:cc:8b:ce:b2:13:9d:
58:5a:57:b3:7e:44:eb:43:b6:bc:93:af:18:ec:f1:
fc:56:41:84:f8:0e:7f:45:fb:7f:3f:f5:a9:ee:99:
13:91:d2:91:ef:9e:a9:02:f5:81:bd:94:9f:75:33:
f1:fc:35:f9:5c:3d:8a:1d:fc:b3:07:2f:82:03:46:
a5:33:23:cb:b6:6c:94:65:0c:8c:25:22:cf:4c:6b:
8f:1b:77:e5:a5:75:25:70:6a:0d:ec:c2:af:cc:93:
10:f7:3f:dd:22:d5:05:9d:bd:3a:c5:09:7e:3f:ce:
ad:70:40:a5:21:eb:78:95:cd:42:7b:a0:94:3f:91:
74:f6:da:bb:ab:af:c4:3a:f1:ab:e8:71:f5:24:1a:
0c:91:76:57:83:14:28:2f:e5:f2:97:59:d5:41:c0:
cf:96:a5:84:90:89:93:b7:9e:2e:c4:81:0d:26:86:
73:b9:8f:e4:35:03:1f:20:55:d7:94:ab:8e:59:21:
a5:73:c9:bd:c8:d7:b5:7b:52:a3:49:cb:4d:79:f8:
24:1d:4b:be:1b:4e:cc:39:28:f3:6c:cf:ee:b6:66:
e7:1c:a7:1f:2b:18:7a:cf:b9:02:2f:87:d8:a0:ca:
91:2c:3d:13:5a:10:69:a5:4f:5c:26:a2:62:e2:3b:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:0A:CF:44:1A:F2:E4:EC:B6:E8:DB:E9:A6:C7:25:5D:C0:DE:C5
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:ea:57:8e:fc:c7:31:93:ff:e7:77:2a:e0:47:64:09:7a:
bd:8a:35:1d:5c:b2:b5:e0:ff:73:68:2d:5a:f6:52:9b:86:88:
5c:c6:05:b5:25:c9:26:e5:bb:dd:66:4b:d3:47:e5:36:e9:51:
fe:12:80:ad:55:da:0d:a5:f5:4a:77:ec:23:c9:42:cb:65:3e:
4a:5b:44:51:cd:a7:c5:62:4e:38:9e:9d:ca:b3:fe:65:f1:54:
cf:37:56:94:1f:2e:09:3c:aa:cb:c1:4b:8d:0d:cf:7b:de:4e:
1d:8c:44:04:cd:94:83:6c:91:e2:a8:ad:a3:80:05:37:1a:35:
7b:4e:46:34:4a:e7:41:7b:94:a5:9b:8a:39:03:53:e5:38:76:
7a:aa:5f:e6:25:c3:cc:b8:92:d5:ed:65:04:e3:5e:28:1f:28:
4d:84:e5:80:69:2e:79:85:54:75:ea:c6:72:50:22:5f:af:cc:
2e:19:19:54:90:c7:7d:5c:45:af:9d:79:2a:79:6d:97:4b:f6:
f3:cc:b8:1b:25:cc:25:8b:cf:4f:f2:99:19:7e:b4:d5:49:4c:
95:ab:0b:96:36:96:86:97:b8:58:82:1f:76:22:5e:01:1e:ac:
57:a6:38:6e:fc:f1:6a:c2:5d:6d:86:d3:d6:be:dd:96:c1:9c:
b8:6e:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:02 2026 by rpki-client