Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: ji6oSzHXlke59w9noBqSTfoVhAM0F8ByJPGubHwTEV0=
Subject key identifier: 7B:71:74:CF:DB:A4:D9:67:1E:F0:71:3B:F1:87:55:FA:4E:E9:F0:7D
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019CE6366C9F05DD07FEC1CD994B42EEAC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 17F5
Signing time: Fri 13 Mar 2026 08:00:52 +0000
Manifest this update: Fri 13 Mar 2026 08:00:52 +0000
Manifest next update: Sat 14 Mar 2026 08:00:52 +0000
Files and hashes: 1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: W6xQv1zDleiurqtYenTofAzdSSbhJKwPcBXPwygyNe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:6c:9f:05:dd:07:fe:c1:cd:99:4b:42:ee:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Mar 13 08:00:52 2026 GMT
Not After : Mar 14 08:00:52 2026 GMT
Subject: CN=7b7174cfdba4d9671ef0713bf18755fa4ee9f07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:be:fa:34:3f:c0:39:b5:fc:30:fc:5f:df:
ff:a9:63:49:12:60:86:1f:04:29:ee:45:11:f0:a8:
74:10:0d:1f:a4:cc:ce:5f:38:6f:ba:1f:cc:d6:8a:
d1:cf:c3:0c:83:01:3f:ae:bf:7f:e8:99:ce:1e:45:
c0:4c:06:1e:4a:1c:91:21:de:ab:3b:b7:da:f9:99:
cc:c3:41:38:3f:d2:03:1f:00:9c:f9:30:ad:67:dc:
d2:03:e0:f9:34:79:17:c1:06:10:d6:f7:1d:bf:f3:
1f:8f:c0:77:1e:cb:0e:08:86:8c:28:de:62:55:ba:
e4:91:fc:c8:33:e7:ac:37:bf:79:fc:d2:0c:71:3a:
3d:40:5a:11:e1:2f:51:df:09:78:4b:c5:ac:3c:2a:
36:d3:80:3c:17:d4:45:b6:69:a6:e1:42:af:42:13:
7b:f3:51:bb:77:78:2e:9d:89:f1:bf:27:d5:60:bd:
bb:15:19:ef:68:5b:ae:6f:8d:fb:8e:24:cf:a2:5c:
12:f5:96:0c:ad:1a:e3:9d:c2:58:78:09:0a:29:65:
22:63:ce:4d:19:4a:e1:cb:92:46:b8:60:71:3a:f7:
4b:46:51:d3:05:bf:ea:3b:3f:81:9e:2d:2c:0c:31:
2b:cc:81:8a:eb:c4:bb:eb:7a:27:14:76:5d:24:82:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:74:CF:DB:A4:D9:67:1E:F0:71:3B:F1:87:55:FA:4E:E9:F0:7D
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:69:73:b5:ec:1d:b0:42:10:11:2e:63:75:9f:76:63:fe:ac:
4c:a3:a1:c1:66:4e:16:36:73:6e:ec:5b:17:fd:1a:72:ad:89:
37:4c:8a:49:c0:f8:97:0e:f2:ae:04:13:a7:af:73:cd:65:b5:
e1:e3:77:db:2f:54:c5:8f:3d:17:7b:e7:9f:e7:58:56:62:c9:
73:1f:a9:8c:68:24:54:3b:a1:26:ae:be:75:7c:f1:f3:26:a9:
3d:32:41:bc:ac:0e:e0:0d:cb:fa:28:5f:8e:8b:6d:55:71:ad:
f0:5f:14:fc:9e:69:d4:a0:c2:99:b5:3a:d5:49:9a:40:3f:47:
58:23:04:5a:f4:9f:10:27:ce:2c:37:a1:c5:c7:4f:a7:e9:dd:
83:00:f7:e0:55:eb:40:12:bb:aa:7f:25:31:fe:3f:5b:8d:3b:
18:30:ee:9a:aa:f7:8b:40:d9:3b:75:59:a8:84:1c:2c:c4:71:
f3:ed:47:6f:93:be:bd:a0:b5:ec:36:3c:cf:ab:4f:da:5e:ba:
1f:80:5e:77:c2:e9:6f:7e:14:23:55:79:c9:ed:c0:88:03:ec:
82:55:18:3a:f5:0d:ff:bd:94:7d:03:67:c2:47:28:8f:a8:61:
4f:e6:9f:98:83:f8:f0:8e:83:06:62:cf:62:5c:bd:4e:08:e7:
b4:2f:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:11:47 2026 by rpki-client