Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: CUXq1UtkL0onpRphZK+NeKNAGx0DqZ736QSphWtjM4o=
Subject key identifier: 00:C1:9B:D6:F4:E7:65:33:45:10:BA:46:98:A9:B1:CE:EE:49:1A:36
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 019D3A53C6F3A3DFCE0B21BAD8C2658B0C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:01:01 +0000
Manifest this update: Sun 29 Mar 2026 16:01:01 +0000
Manifest next update: Mon 30 Mar 2026 16:01:01 +0000
Files and hashes: 1: 1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa (hash: GhIPKfB66xl/U3CpScF6j5w7weYfFaK0TgCynT83hYQ=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: nGjjBcXle/0Fq+KAkhaXLWycGaywVxJo8+M9rK14KS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:c6:f3:a3:df:ce:0b:21:ba:d8:c2:65:8b:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Mar 29 16:01:01 2026 GMT
Not After : Mar 30 16:01:01 2026 GMT
Subject: CN=00c19bd6f4e765334510ba4698a9b1ceee491a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:07:78:c3:7f:4c:17:d8:73:cc:83:ef:f1:
3e:a1:52:be:79:28:a8:89:e1:cd:16:ad:be:a6:15:
d9:13:14:1e:58:cd:2e:16:70:1d:30:f0:83:55:9f:
82:76:ae:8b:ca:e4:6e:52:f7:d8:17:58:e6:3d:8f:
9f:48:3e:b7:3e:23:4c:18:e0:e0:95:91:a2:b5:41:
c5:9d:fe:80:2d:be:d4:65:96:b3:e2:44:fa:41:9e:
b7:7d:19:43:58:98:0b:8b:c9:95:99:ac:d7:97:4b:
db:32:7b:93:b4:ff:a9:e1:59:e3:de:12:13:bd:a1:
a4:32:d7:e3:ca:c9:43:e9:f4:0e:da:c2:38:42:44:
9b:ae:7a:80:e1:d1:45:7f:26:ac:92:09:f3:c4:ec:
ec:4f:45:6f:2d:64:7b:1b:8e:9a:38:f3:64:3c:39:
31:42:a8:03:e2:c6:d0:2d:df:86:81:e2:a7:7e:bf:
d1:d0:3e:32:05:81:1a:80:86:fa:d7:7d:c3:c9:67:
0b:0c:f3:75:e8:0c:54:51:b2:f1:0d:83:97:c3:c0:
ba:41:a9:87:08:9c:a2:1a:4d:c4:45:71:f3:f4:55:
59:87:bd:88:14:1a:55:70:95:79:5d:80:c0:63:29:
ae:a6:f5:5c:52:ce:ea:da:57:12:18:f5:a5:7a:1f:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:9B:D6:F4:E7:65:33:45:10:BA:46:98:A9:B1:CE:EE:49:1A:36
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ac:0b:d0:df:01:04:51:b9:73:f1:57:89:0c:d9:59:2f:e0:
a9:ba:ef:23:e0:88:13:83:c0:50:f1:48:27:e9:75:8e:d4:23:
81:87:0d:56:6e:71:44:1f:78:cd:98:3f:da:1e:50:cd:7a:e5:
cc:32:71:d0:d4:18:18:78:54:09:d6:ea:a1:aa:c6:3a:12:24:
f3:2e:98:73:aa:20:cc:ab:33:93:bc:1c:e6:6e:84:a4:53:3e:
01:a9:41:e2:41:69:da:3a:f4:6e:70:64:33:0d:35:33:c9:d1:
54:96:94:69:ac:31:35:94:99:d8:04:72:39:85:1c:98:e4:ce:
e7:26:9c:5e:3f:50:2d:0c:c7:73:c4:74:40:d0:85:00:e9:6d:
43:4c:97:5e:c3:a6:26:c0:4d:d1:61:0e:bf:ea:f3:ba:40:18:
4d:7a:c4:94:bc:08:08:57:68:11:73:f7:93:fb:48:16:08:ee:
54:ee:ca:f2:ad:13:2c:11:a5:09:3c:b1:cb:7b:fb:60:e2:e1:
e8:30:aa:ce:b9:d6:1c:f6:00:2f:e2:98:aa:4e:39:f6:47:6e:
04:c7:05:c0:50:27:54:31:c4:05:ee:9b:31:4f:5f:52:ef:7c:
95:a0:42:e2:83:1b:f6:87:90:eb:c7:c7:3d:e3:f8:55:7a:54:
a4:95:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:13 2026 by rpki-client