Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier: HV+8pi8W0NC9cwxxS7iBR/3gG7JtLTgPO0tkbDUFWNw=
Subject key identifier: 3E:65:00:00:F1:5C:68:25:40:74:06:55:FE:A9:33:13:01:9A:7B:2B
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 019D3A542193A9A8A94FA5F92F1DF77233EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 16:01:25 +0000
Manifest this update: Sun 29 Mar 2026 16:01:25 +0000
Manifest next update: Mon 30 Mar 2026 16:01:25 +0000
Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: 6lv7UjrB4hqqCHaF4yPOn8iliee6maChVxWMcxK8pKY=)
2: B_KGcXQ0DuIdghhkI0CttQjaBiY.roa (hash: vrjC5dTNYvxDZ+tn/uxjJ/eLDEIZEWZ3qbbhNWSnHdg=)
3: Fzbx011u7RVOot7S1xohG9qyhz8.roa (hash: d3cH8nlBzo4ygFaoC3yncTUnU72/qEe1SfOmm7ZS+sU=)
4: ZMvIxxGP7qocWq6cskVSeYzqx0o.roa (hash: 3C3h+rU23U84LO7lG7BTF7dtlYQvYrPkr1tHRpjMHRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:21:93:a9:a8:a9:4f:a5:f9:2f:1d:f7:72:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Mar 29 16:01:25 2026 GMT
Not After : Mar 30 16:01:25 2026 GMT
Subject: CN=3e650000f15c682540740655fea93313019a7b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:7f:1a:eb:8a:83:26:38:64:11:d9:31:d3:
3b:ad:da:07:84:79:ef:9a:b2:57:0d:a7:58:94:59:
88:01:be:a9:e6:79:9c:30:bd:12:5a:6e:23:8d:fd:
e9:09:4c:fb:3f:f6:2f:8d:58:e5:ca:2a:62:bc:49:
da:48:e7:d1:e6:a0:cd:00:fd:86:15:46:bd:79:4c:
df:61:6a:34:e2:8e:d3:66:ee:bb:a3:34:d7:9d:20:
47:43:d6:f9:5e:27:2d:92:03:30:51:38:23:23:3d:
f9:e4:84:d7:f0:7b:1d:7b:1e:71:c1:90:0b:06:7d:
28:45:e6:87:cb:5c:26:49:c7:a1:da:53:87:39:46:
84:83:b5:1b:4a:e4:e6:e8:66:ba:e1:4d:53:3c:bd:
00:a8:d4:d1:4e:82:31:83:91:c4:2b:fd:3e:ae:4b:
52:6c:b0:1e:74:c2:09:7b:fa:06:26:fd:58:92:27:
71:54:0c:4b:9e:e7:b3:ad:f9:20:30:9c:33:f2:14:
84:4c:05:62:e7:07:86:ec:37:3a:72:18:66:5b:a4:
2d:f3:16:13:7b:d4:76:d1:0b:9d:dd:44:4a:c4:82:
93:1c:87:bf:ce:56:5c:89:38:8d:e8:d1:6e:0b:8a:
ce:ff:f8:1c:f3:b0:07:f5:2e:b3:ef:da:44:38:17:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:00:00:F1:5C:68:25:40:74:06:55:FE:A9:33:13:01:9A:7B:2B
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:3c:99:81:24:34:58:0f:00:74:02:d8:79:bb:2d:4a:0e:
6f:71:8a:00:51:4a:29:d3:22:61:27:a1:9a:ca:e5:ca:91:8b:
a0:7a:e1:33:09:b3:87:7d:17:b9:64:d7:bf:4e:f9:4c:07:ae:
56:69:58:f3:bd:02:9e:14:f8:36:3b:69:a1:ad:d3:e6:fa:7c:
4e:8a:b9:92:89:7a:b7:50:46:69:01:8c:96:cd:e2:7e:3a:5b:
27:e3:30:04:23:39:b7:30:39:d9:6e:dd:51:03:62:29:c4:1b:
48:8f:82:f2:e0:d3:45:03:3c:bc:56:b9:9f:d7:97:30:7b:27:
04:56:46:21:78:12:7b:68:a5:35:cf:d3:7c:04:1c:87:54:15:
03:7e:7a:99:44:8d:3c:b7:30:45:72:b4:68:74:25:17:58:8b:
f9:24:fb:37:68:1f:68:a4:21:29:4e:d1:eb:71:cd:65:89:dc:
31:c1:38:e6:f3:2c:a6:06:90:81:38:8f:8d:a5:47:f5:c6:a4:
a9:48:b6:dc:49:72:a4:3d:0f:38:23:07:33:36:e9:c7:39:a2:
f1:86:3c:62:c4:fa:a4:98:8a:ba:4f:75:1a:b9:21:d9:34:0f:
dd:b1:ed:66:39:9e:dc:2f:82:8d:8a:4a:bf:78:29:e3:4e:24:
db:94:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:50 2026 by rpki-client