Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: pF1toCiTg/R8/e9Nl3VrQqCYA0wkB2tJ4Kjpr2wyFSM=
Subject key identifier: 8C:0E:2A:4E:F0:96:48:0D:36:6C:3E:43:4C:8B:7E:41:A9:25:19:F5
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019D389C05E4EA39A1F194BDAFA5459DCEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 176F
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: 9I9pakXMOUEguUvqieh0yvX7Lx/ShgOb6GNICvlq/kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:05:e4:ea:39:a1:f1:94:bd:af:a5:45:9d:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=8c0e2a4ef096480d366c3e434c8b7e41a92519f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:bd:79:f3:6f:33:57:08:07:d6:55:6d:4f:
12:e4:e0:fc:25:35:55:da:71:10:84:16:f9:16:dd:
a1:b7:ff:9f:5f:d4:59:85:51:e7:16:e4:cf:1e:d8:
d0:4f:09:62:7c:29:0b:ab:f4:5e:aa:83:c0:09:40:
d6:ca:17:d4:f1:b4:cb:40:b4:8d:c1:6e:67:bf:5b:
74:3a:a7:df:43:0b:d0:54:d0:f2:81:44:b9:94:7d:
d1:a7:cf:d5:fd:d1:d9:da:50:be:95:f6:90:41:da:
24:c8:ca:49:a0:69:4a:a0:f1:85:37:81:c3:11:27:
4d:1c:b9:78:23:f4:c7:15:7c:65:ce:2b:bf:9f:22:
3d:43:b9:33:95:28:cb:6e:fd:90:7a:03:06:5b:a2:
7c:f9:87:17:da:ee:92:77:f9:17:57:a2:fc:ea:10:
23:e5:a8:c2:c9:f2:d6:e6:54:56:ba:35:c4:a0:2e:
2e:a2:cf:63:b2:7f:78:73:9f:28:4d:be:0e:73:a6:
2f:e3:b1:4e:0e:fd:2c:0f:8f:d0:76:10:46:c9:82:
ee:dc:31:8f:73:c0:7c:16:f5:b7:23:1b:88:20:e0:
e2:49:3b:b3:cf:1d:99:ce:8d:a3:45:9a:5d:41:c5:
59:9b:32:b7:2d:46:f4:8d:7a:c5:fa:7e:62:df:32:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:2A:4E:F0:96:48:0D:36:6C:3E:43:4C:8B:7E:41:A9:25:19:F5
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f6:14:b6:27:c3:25:c3:10:99:b9:cb:57:fd:b8:66:5d:f2:
bc:d0:9b:f2:15:29:27:59:70:fb:95:71:87:67:f0:74:85:75:
05:6b:f4:c7:ad:64:57:39:dd:57:a8:38:b3:dc:1a:f2:a4:bc:
84:f2:2e:62:55:60:a9:1c:60:20:70:39:44:0c:33:c4:7d:de:
a5:61:20:33:e2:76:c4:78:e0:b2:55:92:4c:60:a5:33:75:59:
c3:0c:9c:3f:b7:9d:2c:00:ed:0d:40:68:60:aa:08:92:50:cc:
95:4e:91:4e:69:28:07:90:33:30:fc:b5:87:4f:87:19:a5:9e:
51:0b:09:48:21:ab:03:7f:e4:84:7e:d1:a9:19:e7:57:09:ae:
68:70:c7:4e:b4:8d:24:26:74:db:1f:e6:21:7f:fc:2d:d8:4b:
9a:d3:79:6c:af:84:2e:ac:ba:e0:2c:45:37:8d:8a:9a:6b:4c:
88:2e:5c:6e:b1:0c:28:7e:e7:e9:d4:57:3a:a3:28:ff:70:01:
81:a7:cc:1f:77:5f:45:53:b5:7f:ee:7e:0c:c5:b2:ba:ab:77:
a9:7d:80:5e:23:f1:ba:92:da:19:6c:e6:c5:e5:8b:18:85:e2:
21:57:f7:ba:98:3e:9d:59:12:95:23:78:11:3a:43:44:42:30:
7b:60:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:25 2026 by rpki-client