Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: hzVySVT2TJ9cL+65jlVaNI25N5WnfRyXoOCu7tay6O4=
Subject key identifier: 3B:A7:E2:7C:E8:90:C4:65:93:5A:6A:E7:75:DC:88:DF:50:38:2B:31
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 019D38658DAAFDBF26E62EE5957F12B1B2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 164C
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: ME-WSg_qDtNY1enNt8ZxubiSk_k.roa (hash: FTTWPKUGtwY38rjYU+89HgDF4DYinIX0Sq5ZBNPIMPU=)
2: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: UdHBwBJFF9dgP3/L4UZv2l85bFFV2UjuPOYjb4RGwX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8d:aa:fd:bf:26:e6:2e:e5:95:7f:12:b1:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=3ba7e27ce890c465935a6ae775dc88df50382b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:f0:b1:a8:fb:d3:66:67:c3:cb:64:4a:97:
ef:26:90:ff:34:66:c1:6a:62:43:66:d3:fa:51:a9:
ed:d9:75:f2:24:ed:00:12:7a:7d:07:2f:29:78:aa:
65:1a:40:1a:30:04:65:06:f7:0b:d3:41:a0:d6:2d:
e1:ab:9c:e1:45:3a:34:15:20:3b:13:ba:e7:df:fc:
8d:bc:b7:14:b7:d0:20:6e:cc:62:ef:75:90:b8:cc:
75:ec:7b:52:d5:10:b6:3a:37:3a:ed:58:f6:60:4a:
66:26:b7:92:84:d2:05:78:3a:82:7b:ca:77:3f:6b:
c0:9c:76:42:bf:1c:ed:1a:77:9b:37:84:d3:a3:45:
78:d8:f3:cf:02:79:67:d7:32:a2:e7:33:e2:52:0d:
9b:c9:95:33:fe:82:9d:fe:48:6d:c5:3e:7c:c0:e0:
53:72:e1:49:1b:fa:1f:af:1a:59:3d:95:28:23:c2:
c0:fd:dd:a0:96:f2:64:73:4d:08:ce:5d:ab:8f:f3:
4c:0f:65:19:e1:e7:9b:a2:2e:5f:27:3f:2a:3a:b6:
2d:d8:82:3f:2c:89:92:4f:7b:0c:ee:28:c4:a0:35:
fc:2e:6a:58:f5:fd:91:87:29:eb:5a:ff:96:0f:b7:
b7:fc:78:36:d2:38:63:62:ba:16:ca:f1:98:59:e3:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:E2:7C:E8:90:C4:65:93:5A:6A:E7:75:DC:88:DF:50:38:2B:31
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:cc:08:6b:24:10:31:fd:2b:0a:f5:b9:6b:5a:ae:0f:48:
af:f1:24:7b:97:ba:8a:a6:0e:88:6f:c6:17:72:50:7b:bc:7e:
20:df:e7:36:8a:9f:cd:7f:85:9b:bb:38:4e:84:e6:d9:60:5a:
20:73:6f:4f:9d:88:51:c9:5c:06:d9:74:4b:8a:60:e4:ce:fc:
96:f2:6e:57:82:b5:6c:41:d7:24:47:1a:80:c3:d9:86:c2:e2:
cd:7c:1e:e4:0c:bb:16:c9:3c:69:b6:24:2b:b4:2d:d8:f0:2f:
eb:ac:44:24:a4:fa:7f:8c:91:66:59:eb:2a:70:09:31:6a:21:
1e:a3:98:f0:98:68:ad:ab:85:f8:35:64:9c:46:a5:ef:8b:93:
6d:4c:59:cb:71:f0:ad:bc:ee:dc:7b:e1:5d:87:de:29:05:b7:
59:a9:93:0e:73:73:01:29:63:89:a2:e3:43:d8:c0:c8:0e:8b:
fb:c8:70:d5:16:a9:9b:e5:24:93:e6:ed:11:10:b1:cf:5d:c8:
3d:45:6e:43:7f:14:b9:90:5e:07:83:7f:76:1b:69:37:0e:e2:
d2:01:38:03:f4:f4:38:93:ad:1d:27:6c:97:b7:db:cd:c8:60:
9f:ff:f9:73:91:f6:12:09:06:b7:5d:ad:0c:92:be:eb:74:a0:
ac:30:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:08 2026 by rpki-client