Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: DTqtwWf/o5iUOSSlJBIBEzT4fbYSXuJ9XZNQ+Z+l+Y0=
Subject key identifier: 16:BC:7D:E6:78:DF:DF:81:43:6F:99:EB:9B:D1:8F:D5:E2:D3:4C:D6
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 019D39410FAAC8923008A6EC2945FEF98053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 11:00:58 +0000
Manifest this update: Sun 29 Mar 2026 11:00:58 +0000
Manifest next update: Mon 30 Mar 2026 11:00:58 +0000
Files and hashes: 1: 7BMZ0omDPc26s6_MCfCUOwcORjM.roa (hash: QMlG7taSZJAaCj6Bos4CT4Fhxoin+745NGHuOhoUkzE=)
2: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: gjI1yzs6rPzSffpMWe0TuuwJ7kKtfLkjOIhTMRWKZnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0f:aa:c8:92:30:08:a6:ec:29:45:fe:f9:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Mar 29 11:00:58 2026 GMT
Not After : Mar 30 11:00:58 2026 GMT
Subject: CN=16bc7de678dfdf81436f99eb9bd18fd5e2d34cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:5a:41:6e:16:66:78:95:a6:2b:6d:63:a9:
41:99:98:61:f3:ab:e1:79:dd:2f:87:0e:a5:ee:6d:
f0:7e:03:1d:05:93:38:14:9b:2f:13:03:bf:69:cd:
18:26:96:ea:a0:a4:72:cb:f3:fa:e6:02:0c:32:16:
0e:26:6a:e4:60:cc:d8:e5:0a:d5:fa:6a:b2:db:5a:
34:4a:39:53:b2:53:a2:a6:0c:cc:19:ad:a5:e3:3d:
cf:8c:96:97:5b:20:6f:bc:00:1d:54:69:48:96:e1:
fa:4f:7e:9e:ed:0e:9f:74:b6:cb:96:f6:d5:23:cd:
bc:2b:3b:b9:d6:9c:bb:b9:f9:5e:5a:ec:66:59:89:
3b:8b:24:50:7e:60:41:1c:11:b0:86:bc:f3:41:27:
26:94:c2:97:eb:b5:e2:fb:48:88:8f:d2:b7:88:04:
a7:56:6a:9e:2e:8e:33:ea:77:4c:7e:82:3f:ac:af:
26:b1:36:81:56:f3:2f:02:52:4f:ae:47:14:54:f4:
58:24:c2:2c:6b:62:e6:84:27:ad:57:12:04:05:99:
e6:66:23:ce:32:3a:58:e4:31:dd:ce:ff:3c:05:be:
de:c5:2e:21:28:02:24:7a:05:e7:4b:0f:20:cb:62:
23:a7:4e:62:16:87:03:78:97:14:7b:75:79:0d:13:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:7D:E6:78:DF:DF:81:43:6F:99:EB:9B:D1:8F:D5:E2:D3:4C:D6
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e4:b8:48:b3:f7:cf:96:20:46:74:2e:82:1c:f5:8f:13:32:
4c:64:8e:86:9a:48:4e:a1:4c:fc:a4:50:dc:b0:00:39:f8:7b:
1e:65:61:63:55:11:db:d5:66:a7:79:a9:a5:6e:df:be:b0:a5:
ee:94:58:73:22:dc:1c:8e:5e:9e:4b:d1:1f:a5:89:c4:75:09:
cc:53:55:39:73:19:99:02:9f:48:20:ce:48:2a:3e:9d:9e:0d:
4d:67:8e:75:d4:49:d9:64:35:ae:9d:61:3d:83:ea:0f:37:42:
d3:f3:e8:ff:78:62:06:31:d6:f4:43:18:99:57:98:60:db:4b:
d2:da:f0:dc:a6:5e:a1:bc:81:d5:e1:32:08:66:18:b9:e7:18:
22:58:1c:69:90:82:a7:2b:27:4e:11:38:cc:51:f7:da:db:0f:
7b:49:55:f8:1a:04:ce:63:8d:ed:a5:fe:34:07:6b:cf:61:9b:
82:37:1b:7f:2a:51:e3:1e:9d:19:c0:82:5c:75:56:c5:e7:8c:
6b:91:5a:18:42:91:7c:4e:c3:79:26:63:fb:35:07:f7:47:19:
55:e5:ef:4a:11:39:0f:fc:f7:e6:e3:8d:c8:42:49:68:dc:71:
1b:67:09:e4:4f:f8:cb:46:6e:42:8b:9f:fc:fa:51:6e:8d:4a:
29:91:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:19 2026 by rpki-client