Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: FoNu0UEmDguhYGaB+ex8Htkw85AlGWjBtzX307aF9t8=
Subject key identifier: 54:DA:6D:79:A7:AE:7A:21:E1:EC:F1:60:A8:13:41:79:BE:53:D0:6C
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019CE71273EE8D83A7304D61CFC4E0190C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 12:01:12 +0000
Manifest this update: Fri 13 Mar 2026 12:01:12 +0000
Manifest next update: Sat 14 Mar 2026 12:01:12 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: vSd04HkRM9686NlNq8qqLMvPLsArwmmxR6+hFIetZgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:73:ee:8d:83:a7:30:4d:61:cf:c4:e0:19:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Mar 13 12:01:12 2026 GMT
Not After : Mar 14 12:01:12 2026 GMT
Subject: CN=54da6d79a7ae7a21e1ecf160a8134179be53d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:db:e5:81:02:1c:74:ac:72:00:68:74:b6:
19:9b:49:6d:17:59:92:91:34:5b:cf:3e:df:81:50:
b8:4f:2d:f8:8d:19:3d:65:2f:88:35:e7:44:64:81:
5c:05:c2:fc:3b:f3:3b:4a:f1:79:2b:d7:8a:32:2d:
5a:36:b9:5f:ad:6b:43:d3:bd:11:1e:e1:21:f0:2b:
90:9a:99:28:19:1c:95:2c:2c:76:2e:08:bc:0d:25:
68:91:e6:e3:a2:86:0b:b3:6c:14:8d:d4:ee:0d:e0:
85:bf:27:aa:0d:15:76:47:6e:1f:55:cb:0b:a1:da:
61:77:01:a3:80:74:b7:fa:1a:77:2f:e7:ea:e3:e4:
be:6f:59:79:7d:48:de:07:85:ef:01:7a:9c:67:3c:
21:69:b6:32:f3:8c:39:65:df:01:d8:83:69:09:ee:
7d:6c:c9:f6:7e:c9:f6:14:04:78:ba:94:16:66:00:
3c:e7:13:15:e7:ae:41:03:78:6e:da:76:43:4c:8a:
b1:1a:c6:41:e5:80:97:a0:94:ac:10:43:aa:8d:e5:
b5:56:cd:3e:31:d4:fc:6c:0d:56:b4:23:3a:39:34:
3c:bc:53:55:ad:d6:86:1a:0c:f2:a9:ec:d7:18:60:
f9:cb:1a:d7:6c:fc:f8:bf:ed:30:28:73:ef:2f:96:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:6D:79:A7:AE:7A:21:E1:EC:F1:60:A8:13:41:79:BE:53:D0:6C
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:26:41:7b:66:f1:e7:6d:b6:31:bf:1a:ca:54:f0:45:21:
6d:7d:ec:f0:f3:be:39:e8:e2:05:74:56:a0:0a:c8:2f:c2:fb:
96:1f:aa:ce:28:37:b7:9f:36:da:58:3a:38:e0:90:9e:9d:92:
52:01:71:26:b1:66:34:01:ba:a0:91:68:8f:47:e3:db:3f:2e:
5b:35:0f:7e:87:29:65:de:1f:12:0c:4a:08:de:09:be:51:8d:
98:4f:dd:80:46:7d:c7:5b:9a:e4:01:f9:c1:bc:25:84:38:65:
eb:4e:54:93:2a:04:21:bd:c2:b0:40:70:96:1d:4e:2a:7d:e2:
81:ec:02:49:93:32:67:f8:f4:d4:f6:ae:83:d0:e3:bf:21:41:
62:15:a7:a9:05:fe:6c:b5:96:01:00:33:1f:e3:be:49:1e:10:
a7:67:2d:9c:6f:f2:2a:9d:b8:87:42:cf:42:aa:e2:5b:24:46:
bd:1f:e2:f5:7d:ee:68:ee:90:30:6b:82:fe:f9:3f:a9:6a:5e:
1c:33:01:67:01:fc:3f:af:3c:90:a9:e8:01:31:46:26:00:b4:
f2:8b:77:59:c3:dd:4b:62:08:cb:15:ca:00:a9:6f:1d:bb:e8:
97:cd:02:24:b3:9a:b9:80:b6:c0:09:db:9f:a4:ab:06:3b:bd:
d9:63:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:25:43 2026 by rpki-client