Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: fh3EmZCH62Nu4ZWKIG0JvgkCFWNEedL8W+o96YT2ff8=
Subject key identifier: F4:99:C3:86:D7:83:EC:7B:0F:9D:23:53:1F:A3:53:36:3C:A5:E1:2A
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019CC82C1669721651C389B0D62D07894E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1410
Signing time: Sat 07 Mar 2026 12:00:58 +0000
Manifest this update: Sat 07 Mar 2026 12:00:58 +0000
Manifest next update: Sun 08 Mar 2026 12:00:58 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: Ldbl8jV7rP8Il6pnCRACGIHp5vnu0uTt1QHLNA4zrlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:2c:16:69:72:16:51:c3:89:b0:d6:2d:07:89:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Mar 7 12:00:58 2026 GMT
Not After : Mar 8 12:00:58 2026 GMT
Subject: CN=f499c386d783ec7b0f9d23531fa353363ca5e12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:5b:5b:74:5f:fc:7d:0f:0a:ad:bc:0b:89:
1e:07:ba:e5:f2:19:a5:80:cc:e4:b3:d7:ca:59:ac:
f2:bd:73:16:ef:af:11:c8:21:c1:44:da:70:74:ac:
e0:48:ea:f6:c1:53:b6:5a:62:06:c4:3e:c1:d9:7f:
00:6f:04:28:de:32:1f:19:a0:b0:10:31:05:01:6b:
60:a1:8b:80:88:4c:4e:bf:9e:52:0a:62:5d:bc:b1:
1f:ea:c8:e3:02:fa:e1:5d:63:89:e2:b0:2f:02:67:
30:aa:20:f1:09:c7:fc:42:93:90:cb:1c:16:fa:e5:
32:0d:f1:cd:1b:9e:6a:7d:45:85:02:64:f1:f6:3b:
15:a3:6c:f7:7f:39:b3:a1:7e:1e:4d:31:1b:7d:a5:
cb:4a:a9:e7:95:d1:53:68:ca:25:37:51:65:a7:e5:
84:a2:f8:dc:7d:85:05:b1:71:75:00:b7:8b:bd:a7:
d8:30:67:2b:8f:d5:b4:03:0a:84:f4:05:e8:f8:b7:
68:a1:6d:83:9a:4a:68:22:e4:99:92:b3:ec:a6:30:
36:2e:9a:80:b2:ee:cb:ea:84:a0:c1:48:d7:38:3e:
50:37:16:d0:55:8c:e3:3b:ff:ce:57:d2:19:4e:10:
6b:58:79:55:3c:65:c2:1f:53:2c:20:d3:e4:27:a4:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:C3:86:D7:83:EC:7B:0F:9D:23:53:1F:A3:53:36:3C:A5:E1:2A
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:ec:d0:7b:5c:c1:fb:b6:ca:04:a8:c7:0e:8a:76:92:7e:
16:cf:0a:be:5b:69:2f:91:ca:b0:12:ef:bd:22:19:c9:ae:5a:
e3:ed:73:82:7b:95:ce:b9:99:1d:68:de:b6:cf:3e:7d:28:c2:
96:3a:78:e4:87:22:13:ca:4f:20:82:8d:2d:b7:a3:4a:d0:5f:
aa:22:4b:c0:1d:1a:52:13:b6:d2:78:ec:b1:a8:01:6d:a5:12:
bf:d6:94:0d:6d:13:fc:21:8e:1e:c5:18:56:07:bc:45:87:7f:
75:60:93:b6:e3:8e:90:9f:44:b5:b1:91:ee:71:58:2f:34:93:
5d:3d:67:95:38:5c:f3:8d:72:f2:f9:a9:b3:f7:46:d4:5d:51:
2d:2d:19:04:66:47:10:53:e4:4e:26:77:ce:d7:bb:f5:06:3e:
3f:b1:34:05:e4:94:b3:26:70:9d:1d:d1:9e:32:5f:6e:61:a5:
99:e2:39:bc:7c:44:a5:51:04:20:0b:77:99:68:47:4d:bb:a6:
42:04:48:6a:0e:21:b8:25:44:be:95:b1:61:13:1a:71:c5:54:
7f:ee:a5:36:22:71:82:c8:68:00:2f:53:68:4d:bf:f8:f1:09:
f7:93:5f:2f:22:f2:ad:90:00:3a:48:92:61:b8:8b:aa:cd:35:
5d:bd:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:55:40 2026 by rpki-client