Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: MDjsXTd3b8jmmCTnMdQOK7OvSD2oEGm5KwYGBzw83DM=
Subject key identifier: A1:3D:60:18:DF:28:F8:9D:78:10:5F:8A:95:E9:95:B5:65:AE:9C:5F
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 019D38D35F177D7A9786F752197C478F6626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: 172ug1U0IoshcM0hvXTl7KshgicoeDMLr+F7d671HHY=)
2: uFl_ZizKGWHrxXUyCquBDXz3y3k.roa (hash: /TpoOOO6sEekhbdoi+eDFkK9983+dY21TSBKPL3C0K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5f:17:7d:7a:97:86:f7:52:19:7c:47:8f:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=a13d6018df28f89d78105f8a95e995b565ae9c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:f9:ec:6d:ba:8c:69:61:c3:b6:19:72:cc:
17:f0:d2:f6:48:0a:97:a4:16:31:45:18:7e:d8:6b:
5d:78:88:7c:9e:73:ef:89:0c:dd:3c:d7:03:c2:3b:
2c:b8:21:76:d3:3b:6f:ed:21:ea:57:af:2e:e8:be:
58:14:10:5d:2f:36:fb:09:53:17:e6:b8:db:45:b5:
20:c4:81:9c:9a:22:f1:ed:20:b9:48:0a:f3:3a:4c:
65:0f:14:b5:cd:9b:2f:60:72:c7:cc:ba:bd:a7:2e:
41:6a:ad:7d:6c:7a:ea:26:64:f0:7c:59:6d:1b:cf:
09:c2:67:67:e0:3b:1a:25:d9:d7:04:62:c3:29:83:
e5:fa:fa:e3:5e:67:b4:a1:ef:0c:81:6d:21:df:d2:
94:7c:a0:8a:1d:bb:0a:34:13:70:af:71:ac:e0:92:
55:69:ee:bb:77:0e:7c:c9:e4:f7:bc:81:41:b2:45:
25:36:97:cf:d8:a3:d0:38:69:a6:0b:9d:3d:28:b0:
2c:0a:79:1b:cb:2a:93:aa:b2:8e:01:79:ec:40:96:
79:06:8a:a9:89:ce:23:7f:b8:d2:a5:f6:b5:77:df:
12:d7:5d:87:e7:45:ac:b8:f0:01:55:2d:43:c5:9a:
c7:1b:b0:2f:2c:62:52:33:70:f1:52:f5:95:46:b5:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:60:18:DF:28:F8:9D:78:10:5F:8A:95:E9:95:B5:65:AE:9C:5F
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1b:80:1b:e4:c3:68:d6:ec:8f:b0:c9:cf:08:d9:a9:8d:fa:
08:98:51:ce:de:ea:9c:08:15:17:96:11:a7:f4:57:9c:7e:6b:
7e:35:c1:b2:42:d5:42:e1:fe:11:e1:ae:b5:60:44:ac:0f:f5:
17:cc:d8:04:25:87:d4:db:46:14:b1:43:e9:c6:a6:cc:3c:d4:
de:07:d2:94:85:a9:70:9c:29:f0:83:21:fa:79:ad:da:1d:e3:
50:79:bc:c2:16:48:dd:52:5b:3f:cd:4a:6e:36:64:b4:63:02:
8b:c2:6a:64:54:a5:cb:f4:da:8d:41:81:88:a9:de:a7:6f:bc:
33:c8:29:7c:da:fe:df:4f:b7:18:79:72:d0:65:31:39:95:d5:
d2:a4:7b:85:72:e1:13:b9:83:cb:56:f6:58:62:22:95:d4:1f:
ec:98:75:41:4f:80:0f:22:20:2d:04:27:c3:05:fe:9b:3f:b2:
e2:a5:33:fd:dc:38:7f:2e:d6:9f:fa:c3:b3:e5:d0:fd:75:4c:
e7:fc:2a:04:50:ad:b1:e4:6b:30:43:33:4a:9a:25:8f:3f:80:
58:f5:a8:5b:ca:28:9e:76:43:ca:f8:47:c0:bf:35:56:87:24:
f6:95:c7:72:bd:ae:c7:a9:b5:e3:f3:36:98:f8:34:cc:4a:06:
3e:de:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:55 2026 by rpki-client