Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json)
Hash identifier: eD+oM3p4rbpieIndspFKDRAYYa4fuGGmGr7z0Vo88Uk=
Subject key identifier: 13:4C:14:C0:28:5B:87:9F:64:35:C5:1F:A3:19:6D:C3:CD:4B:F2:5F
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial: 019D389C5DE8C3E5273EB293DEBC335A3878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
Manifest number: 1258
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: F0X0Kldz9ZbWiCYe5dgOuGe8cE8.roa (hash: l3MXfi0HIHId22Sz44wGoyo4bnLBnE9WiSKYA9yuZAM=)
2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: NoSt9C8WfTjoWMD3rh1TYoDscLjJmeUF/egADYfKe0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5d:e8:c3:e5:27:3e:b2:93:de:bc:33:5a:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=134c14c0285b879f6435c51fa3196dc3cd4bf25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:89:5f:06:f9:c2:be:d7:70:43:78:1d:8f:
0f:67:06:60:3e:09:e9:c7:59:f2:15:eb:c7:32:1f:
fd:32:59:09:43:52:73:0e:e9:be:ff:e9:df:67:46:
37:04:6d:6a:1d:d6:c1:ce:4a:8a:98:f3:a6:c0:d3:
d1:06:f7:84:83:6a:d4:de:3f:71:73:38:89:8b:3d:
b2:e9:98:7a:a3:e8:f2:fa:b7:d3:31:91:09:25:a1:
1b:0e:55:47:c4:92:4f:19:e0:53:f6:a9:c4:8d:3e:
fe:10:bd:1d:70:63:e9:c3:52:ab:54:e4:d5:90:f0:
bb:d6:fd:fa:fd:82:00:21:39:7c:d9:bb:bc:7e:61:
c3:89:86:26:11:e7:fc:a8:6d:3c:d9:2c:da:a5:59:
c6:2b:2a:84:45:d8:9f:5f:5d:09:98:92:13:05:40:
70:59:c5:78:47:42:c7:c0:83:35:49:c8:35:4b:41:
d3:ce:82:d8:73:af:23:6b:8a:31:c3:39:de:bc:80:
62:0d:ad:e8:70:cb:3a:96:a9:5a:70:8a:88:07:2b:
2a:eb:d6:07:bf:bd:99:e5:2c:8b:dd:ea:4d:94:05:
58:01:16:69:17:bb:71:0c:a0:0c:81:67:76:b8:ad:
69:2c:94:89:74:7c:7a:af:4f:05:e0:51:15:5f:5b:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4C:14:C0:28:5B:87:9F:64:35:C5:1F:A3:19:6D:C3:CD:4B:F2:5F
X509v3 Authority Key Identifier:
keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:36:58:a3:b4:af:4e:c7:34:45:68:b6:92:10:0c:22:4e:
59:d3:c2:79:d7:0b:85:b2:d9:76:ae:fb:10:81:78:f4:d5:f9:
6e:ff:57:74:69:b2:2b:6d:61:db:84:54:7d:4f:f9:16:d5:7b:
51:4d:57:2e:29:ba:f8:34:27:71:72:bd:1c:4a:cf:89:8f:76:
0b:36:a9:ff:c1:00:51:31:80:c8:5d:ea:80:ed:e2:f6:3f:0e:
ee:38:cb:51:e9:bd:76:2f:48:47:73:6f:cb:30:43:10:66:ed:
2c:50:86:bb:b3:b3:b3:65:ca:0f:bd:01:50:95:97:16:cf:6a:
e7:3b:48:1b:97:a2:27:63:c0:95:d1:a3:f9:ff:4a:86:35:fc:
b0:63:de:71:ed:8a:8d:0a:3a:62:ea:dd:f4:4c:ec:21:1a:f9:
b4:ab:8b:15:95:63:53:a6:63:3e:fe:3c:c3:79:90:76:94:5f:
b2:cb:6e:b0:cf:94:de:08:04:3e:60:8c:17:04:c2:e6:6d:f8:
fc:0c:ac:52:e2:93:8e:3f:48:eb:00:49:9e:b3:89:2c:b0:a8:
18:21:ee:8b:29:cf:9b:9b:0f:fd:f3:71:3d:72:2c:42:5a:4f:
e1:78:40:9c:34:41:ea:fd:9e:b1:b0:53:1a:50:02:14:99:1c:
a8:45:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:23 2026 by rpki-client