Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: Bl/OejTRMkhZMqzF3Z7XuCl4+1kGBP7MYbUvhTUTstE=
Subject key identifier: 45:19:29:D6:C0:7C:30:15:C8:13:B2:F4:3B:C2:4F:A8:4B:18:DE:D4
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019D39E55C6D1E4D25B1F7F2745BD10B8A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:25 +0000
Manifest this update: Sun 29 Mar 2026 14:00:25 +0000
Manifest next update: Mon 30 Mar 2026 14:00:25 +0000
Files and hashes: 1: EpA_Ep7US9arWt2LAQnWqt8G0MQ.roa (hash: Enhj2i2fenmWvJgS9B/Dve2c1SF+MZkG+SV2591CLso=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: 9kulZJUp4mxt3cvScSdZrZ/CCot/oB8nml2Svq8QJSk=)
3: qr2Qsm_m43gmQ4yBbPFTPZR9e5E.roa (hash: 3+Soe86vT0NYIViAWLAPp8YdyjKuUQGSfLwiQOP3wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:5c:6d:1e:4d:25:b1:f7:f2:74:5b:d1:0b:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Mar 29 14:00:25 2026 GMT
Not After : Mar 30 14:00:25 2026 GMT
Subject: CN=451929d6c07c3015c813b2f43bc24fa84b18ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:b7:38:91:5b:0b:43:cc:df:2c:f6:62:05:
fc:e3:28:6b:19:ae:d0:9d:97:5d:06:a3:b1:27:2d:
91:47:89:7c:65:8c:4e:7c:a4:51:26:9b:fb:a9:4a:
67:d6:cc:f4:01:7d:1f:40:88:8a:bb:9e:5e:37:ef:
50:74:9a:8d:c0:71:50:37:8e:b2:2f:2d:f5:73:cf:
13:d3:00:49:a9:ff:fc:df:a6:0b:06:50:3f:1f:6b:
9a:31:98:bd:cf:c8:d4:b3:29:9f:0d:3b:02:b9:fd:
74:dd:50:1e:17:25:74:4b:b2:30:cf:75:9a:5e:ab:
0e:4d:3d:9a:cc:7d:ec:7e:ef:62:74:ce:52:45:65:
f9:ec:3c:5e:44:2c:3e:ed:a1:0e:2b:d8:b4:40:a8:
a7:ac:61:a5:ad:05:41:84:49:df:22:65:a5:d1:30:
e9:fb:b9:12:db:5b:3d:14:e6:8d:21:f3:a6:bc:f5:
09:be:8f:0f:a6:6a:39:c0:12:3d:a8:5b:ba:b9:f5:
13:87:f2:e5:39:e1:07:cf:f3:b0:13:b7:9b:8a:ff:
37:fc:13:50:ab:c1:6e:f7:e4:8b:4e:e6:0d:55:79:
5c:ba:16:53:4f:f7:1a:4e:a0:fe:09:0f:e5:34:06:
ce:4d:cb:1f:b3:f5:e8:25:a6:c7:7d:5f:da:94:f4:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:29:D6:C0:7C:30:15:C8:13:B2:F4:3B:C2:4F:A8:4B:18:DE:D4
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:e1:07:14:07:53:8e:ae:bd:86:87:50:21:e7:05:62:cc:
67:3e:77:ef:67:af:44:85:ac:50:3e:ba:64:02:41:ea:21:d8:
f7:bd:fc:eb:e6:49:4d:10:78:22:7e:9e:33:ad:6f:b6:d6:bd:
5e:6a:43:11:36:0c:ac:88:69:72:3b:a4:22:61:14:b8:bd:0e:
2b:bc:f2:7b:fc:41:2f:18:76:91:43:19:02:fe:7e:e6:09:15:
57:9e:a4:cb:98:39:2a:91:f1:6e:e7:4c:7a:8b:ba:81:8d:39:
97:16:85:21:80:c5:ef:ce:52:8e:8c:4e:dd:f8:bc:89:52:4e:
4d:78:2a:19:e8:3a:79:37:43:43:94:2a:09:c3:07:3c:f5:e2:
8b:f6:54:97:04:98:c3:43:6e:26:cb:02:80:c9:0f:73:e7:0c:
f0:38:08:8f:32:c2:a5:3a:62:ca:ee:c6:7c:a2:de:be:11:f5:
99:33:1a:f0:da:ea:70:aa:2d:50:6d:4e:8b:c0:1e:71:f8:9d:
14:92:94:14:fc:e7:7b:51:64:3a:27:8a:91:c3:06:f9:9d:2b:
03:30:76:02:07:b9:d9:0a:81:64:10:89:8a:f1:08:2a:17:c9:
5b:54:c9:4d:02:f3:4e:fe:60:45:fe:05:14:46:2e:54:b0:07:
b7:7f:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:22 2026 by rpki-client