Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: 7xbqXsyk6uK0xyAjH6sB6ohJHm4j/eKjyAylg9J2P+U=
Subject key identifier: 10:38:63:34:06:C1:15:C8:B8:8E:D6:A0:04:24:8C:60:28:B4:D3:56
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019D37F6F6B32E47A9460D04E73B671B4C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: FZXNAo_-RfWe2H9RHiCZ7xGUnYo.roa (hash: TDYzUGrD9meaYvgjEQfqWP3QZzAK3PuLuA6ZQryLHGU=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: oHdQoLGoW868yJ0rVlsnJ1V9CstFR3XPC+z9LW17Pa0=)
3: qMQHyQ9qH1ECk7KL-kR203MB75k.roa (hash: vhQOUoORkCKEMjziW3Ye82TVpPsPBlso5nGmSCXjKmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f6:b3:2e:47:a9:46:0d:04:e7:3b:67:1b:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=1038633406c115c8b88ed6a004248c6028b4d356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:70:c7:e1:64:70:30:04:ca:d1:87:ff:4f:
c8:35:1b:34:77:39:d0:33:b7:ea:5b:60:87:79:dd:
ff:68:30:4b:22:ab:61:20:93:8a:f7:59:af:e0:75:
49:b7:4f:3b:80:4c:bb:18:d5:9a:55:13:ac:9b:77:
a3:fe:50:92:2e:22:c9:ed:73:dc:e4:93:be:db:82:
d8:55:fa:22:30:bc:7b:32:b0:86:1d:b5:45:89:97:
e6:f5:03:03:97:23:6e:d6:93:41:66:56:bd:b6:f3:
cc:09:81:0a:f3:b2:e4:2f:0a:e7:16:7d:7b:76:2d:
8e:27:2b:1b:26:bc:3f:bc:ea:4a:62:25:ed:65:3f:
c8:4d:c2:61:dc:92:5f:97:00:42:05:99:65:d0:9b:
2e:1a:be:44:a2:be:cc:58:8b:8f:ad:71:a0:0d:18:
94:e1:35:19:f6:f0:0b:7f:57:99:fe:53:4c:69:88:
bb:72:87:2b:b1:30:62:1b:fc:d2:25:20:ea:e0:d3:
ad:9d:5a:19:f1:fc:54:2b:62:33:fa:71:2a:44:1f:
e9:d7:ad:68:41:34:76:b7:53:19:65:02:67:8b:4d:
57:89:6a:eb:f7:28:d8:85:64:0e:df:c3:5b:af:72:
d3:e2:c6:ca:10:22:61:76:8d:eb:3b:63:96:5f:50:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:63:34:06:C1:15:C8:B8:8E:D6:A0:04:24:8C:60:28:B4:D3:56
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:08:13:b3:6b:59:2d:ca:bd:65:db:5b:e0:a0:c5:fb:6c:
8a:17:95:ed:4a:78:b9:eb:c2:19:8c:df:63:75:a4:70:56:70:
2b:3b:04:68:56:92:05:bd:03:90:76:18:81:83:2d:47:51:3c:
09:3b:4b:ab:73:2c:eb:45:06:d0:ea:3b:96:d3:9a:32:1e:37:
62:77:71:2a:16:0c:e9:15:c2:4e:93:b9:7f:1c:e0:59:f7:8c:
27:c0:43:46:65:83:f9:93:0a:bc:97:32:5e:08:49:05:a3:1e:
b9:b2:79:c3:87:e2:f8:fc:8f:2d:d3:ee:24:10:0f:a3:e3:ef:
d5:28:17:65:80:b5:55:2d:e4:47:22:68:dc:74:de:d7:97:64:
7d:e1:7d:39:f7:c7:cb:f2:e6:91:a9:99:03:69:98:cc:35:2b:
a7:44:bf:cd:53:8e:49:1c:40:35:8a:ec:56:b9:cd:8c:08:aa:
58:b4:e0:f7:ac:b3:0c:c9:54:be:ae:c7:fb:1d:e1:0d:bb:71:
ca:a6:62:f1:0d:fd:fb:23:56:21:cd:18:1c:d6:ea:0e:88:f6:
f5:29:ba:69:f8:3a:1c:e0:a6:65:de:0f:b7:84:fc:d6:0f:c6:
9d:43:6b:d3:6a:a9:d3:ea:c2:df:80:b4:90:12:c9:74:f1:16:
56:71:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:22 2026 by rpki-client