Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: SxF32ko4ziTaVHqjQ2QLlrH7yE+qVB0N1SvhrAh5O90=
Subject key identifier: 96:CB:90:DE:7F:FF:F0:85:1C:1D:1B:F3:9B:93:1B:AB:F6:5B:3F:4F
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 019D37C10ECBAE22CED51F66C1AD5B85B2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 13D3
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: 4cyxgKfHx73cxANXfCDuCGGKNgI.roa (hash: JTW79OnrfXB/3TRgMkZzzLj69/ILo3f756ILXg43zmg=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: 3HfRJS7EQZ9PCx9k1TCIlC57Yt5acXY1UtnETA6D9F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0e:cb:ae:22:ce:d5:1f:66:c1:ad:5b:85:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=96cb90de7ffff0851c1d1bf39b931babf65b3f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:b2:7c:b5:af:0a:0c:e0:da:f3:54:9a:07:
48:3e:da:6d:81:9e:db:99:a9:41:8d:8b:6f:49:b1:
8a:4f:1f:91:54:70:29:2c:b7:65:ee:77:e2:02:f5:
69:68:eb:fd:ad:c8:2d:71:64:90:df:59:64:2c:f7:
43:2f:70:cf:21:43:96:f3:09:a0:02:93:83:1f:ee:
cf:3a:ef:6c:28:e4:a4:ac:fe:81:16:ce:49:1e:a3:
7d:b0:ca:53:84:e2:dd:ce:29:75:5e:71:00:17:ff:
d7:fe:0c:ac:92:42:c7:c7:d5:c7:8c:03:44:8c:86:
40:ad:2d:8a:51:89:bb:51:09:18:ee:45:fc:1a:d2:
73:73:46:02:82:85:61:dd:42:db:a8:5e:56:3f:e1:
eb:ee:14:7c:3a:9f:cf:43:bc:74:dd:61:bc:f5:26:
b1:f1:9a:53:bf:4c:59:42:84:5b:63:ef:13:f6:40:
88:f7:ff:c4:d7:97:a3:e3:7b:e4:56:ab:8e:da:0b:
59:16:82:88:40:32:96:26:59:e3:92:c9:ca:a5:c4:
7a:5a:92:9d:44:8f:1b:45:8b:ae:1a:df:9a:3f:c9:
4b:a5:a3:6c:28:9b:29:15:ea:b2:12:3f:59:9b:d6:
7c:9f:1f:00:39:6b:dc:e4:18:1c:ea:da:8d:84:e7:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CB:90:DE:7F:FF:F0:85:1C:1D:1B:F3:9B:93:1B:AB:F6:5B:3F:4F
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d6:af:1a:f4:2a:0d:a5:da:6b:93:ac:73:da:f4:4b:e3:22:
3b:78:3d:9b:75:21:3c:c8:5c:a2:5e:dc:83:d4:3e:e8:1c:b3:
23:14:7c:c5:ac:cc:8e:5c:2e:d0:a6:cc:82:d5:82:d7:4a:a4:
aa:9e:e3:f8:86:a7:15:11:c5:b6:a4:57:c8:3a:41:21:67:a6:
fd:31:28:4f:28:00:71:f3:f9:9f:88:03:13:2a:ce:7f:99:eb:
cb:25:76:ec:74:e6:dd:51:04:82:31:50:a8:0f:f4:04:01:8b:
9d:73:b7:69:9f:0d:e2:d5:0b:5a:10:b1:bb:0d:fc:6c:64:2a:
76:23:8f:6e:7b:54:4b:24:e2:cf:49:3a:38:f8:c7:35:74:e9:
c2:f0:ba:20:4b:7a:75:b3:3e:06:af:1e:31:d7:9b:b6:4c:03:
9d:b7:cc:38:4e:bb:6f:1a:87:71:49:b1:61:89:dd:47:21:d5:
f7:52:55:89:2f:09:69:f6:54:ac:f5:28:8f:b3:9d:b0:bb:3c:
2a:4b:f4:d5:3e:4a:3c:d4:a0:35:85:d7:b6:42:74:22:6f:e3:
bc:75:dd:8c:24:95:e5:cc:8a:f4:39:a8:dd:fd:0a:c7:95:9b:
9f:e7:e4:94:49:79:48:55:38:01:30:64:15:96:cd:42:c1:6d:
f3:cc:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:41 2026 by rpki-client