Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
File: lh80Y53Jb_GEYziBzXBzrjGf4to.mft (raw, json)
Hash identifier: /2o2UkGKZFTnj1whdfdS1xZcBdbDCqVDPQCvxLyW0Eg=
Subject key identifier: 1B:CF:9B:AB:D9:FA:A8:7F:52:60:4B:74:73:CA:C8:89:D1:42:05:B6
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Certificate issuer: /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial: 019D371BE4179B7BB2FC326FC2979D8830FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
Manifest number: 21
Signing time: Sun 29 Mar 2026 01:01:07 +0000
Manifest this update: Sun 29 Mar 2026 01:01:07 +0000
Manifest next update: Mon 30 Mar 2026 01:01:07 +0000
Files and hashes: 1: kjCR_bdCRqh1misX4Uz-yIyS1po.asa (hash: 82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=)
2: lh80Y53Jb_GEYziBzXBzrjGf4to.crl (hash: t7IeRf+eWzr6Pp6byF2PFf6w2rLqfPxTG3jPnasZ2/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e4:17:9b:7b:b2:fc:32:6f:c2:97:9d:88:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
Validity
Not Before: Mar 29 01:01:07 2026 GMT
Not After : Mar 30 01:01:07 2026 GMT
Subject: CN=1bcf9babd9faa87f52604b7473cac889d14205b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:ba:19:29:9a:7f:b0:a8:16:0d:32:2d:bf:
91:ba:41:8f:89:a5:b9:33:47:f2:8f:74:6c:fa:d2:
98:49:37:c0:bc:ec:55:07:84:f8:05:a4:b5:52:2d:
1f:85:f9:38:50:2b:11:4f:2e:34:47:6f:98:75:12:
5e:83:44:3f:70:d5:1f:6d:e2:21:a5:1e:0b:92:50:
3c:2a:9a:08:d9:2c:49:75:13:61:44:4b:82:d9:87:
6d:b1:a7:1b:92:5d:5f:79:18:29:f5:18:e3:25:e4:
ea:33:12:0e:ad:57:7d:00:66:8f:45:69:dd:b7:26:
c2:b8:72:34:07:69:d3:8c:27:6e:b9:4a:b0:a2:64:
97:5d:77:4c:23:db:2b:bc:2d:9a:3e:46:94:c8:90:
a5:3c:ad:51:8c:5b:f4:45:17:4c:86:69:59:81:eb:
b8:b8:b3:60:aa:03:73:e3:de:16:5b:f1:c1:c1:9f:
9c:2d:85:ff:00:fb:9e:df:69:19:21:04:66:a3:de:
52:b1:f8:17:32:b7:ac:3f:8d:fb:8a:3d:2a:0c:a1:
d2:d7:0a:2a:03:e9:b3:73:87:a8:a4:cb:df:02:25:
ba:0e:f4:bf:da:24:82:c5:73:b9:57:ec:44:87:62:
f7:2d:7e:4c:c3:fe:1f:ae:f2:4e:ed:2e:4f:54:66:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:9B:AB:D9:FA:A8:7F:52:60:4B:74:73:CA:C8:89:D1:42:05:B6
X509v3 Authority Key Identifier:
keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fd:3a:c5:dc:12:ae:8d:5a:f6:f2:63:98:28:a5:6c:cd:ba:
a1:cc:ef:99:74:b9:ae:91:ca:57:57:0b:f6:dd:fc:54:06:96:
55:b6:90:5b:d2:3c:b1:bb:51:28:eb:74:c5:0a:08:78:c2:7b:
e4:83:61:c8:ed:b0:c7:f3:f2:a5:11:75:ae:b0:d2:8c:a8:15:
b5:8c:46:ac:4a:40:be:ca:85:08:65:2b:ee:35:c4:e6:e3:a1:
d2:c8:18:72:f4:72:56:c2:74:40:06:74:fb:ee:d1:83:95:63:
08:1f:b7:42:d4:c3:7d:7d:cf:0a:8f:54:92:40:c8:ea:cc:ba:
1b:b2:13:cf:e2:4d:d4:7e:ae:04:54:41:71:0a:2d:42:28:00:
44:4e:4c:57:3d:48:c1:8b:7b:68:16:df:82:35:44:aa:80:31:
45:c2:60:a7:0b:b9:a8:d3:c6:be:d5:be:f5:49:96:fa:96:12:
a4:70:dc:3d:f6:0b:04:8a:51:be:d1:a2:4d:d9:8d:96:06:7f:
48:0a:b7:32:25:54:21:95:83:20:7e:68:16:2c:b4:0e:b2:e8:
3e:33:3b:43:8c:3b:5a:60:62:03:c9:1a:d1:82:0b:4a:39:3c:
11:36:3f:02:6f:ce:32:c4:a9:86:a1:18:35:74:4d:50:67:f1:
9d:28:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:14 2026 by rpki-client