Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier: Tl7FdBLjEDv+uJhkY5zCRtKWLYlXK68f+/OZp87lXBI=
Subject key identifier: 93:57:57:CB:8E:37:ED:3C:91:C5:5B:7B:41:17:05:A3:B7:C5:E3:97
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019D38D34469912EF9245ED05312D1770202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: NCKrnZ6BBgRyh9N8rjzonLxGGi8.roa (hash: cPlIwNXE1gIgFxpt8lhNk4Dl9OB1ImP6P9GMfjOfmqQ=)
2: QN1eUaTvYAP_ELe-EbMtz85iMfc.roa (hash: xwP2gxjcLucn9cj9qV9ME9PvxT/Q/xeoP3TDbLZIYfY=)
3: Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa (hash: 5B/exxRvB/e4faBVuRg/6C6JUY3dZXdeStf6YjAxx6c=)
4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: CoAn/gojdTcwSFB3nMtzVVJ+xOWdpEFiRwdHVVadrkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:44:69:91:2e:f9:24:5e:d0:53:12:d1:77:02:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=935757cb8e37ed3c91c55b7b411705a3b7c5e397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:cc:e1:13:df:ab:ea:0f:6e:3f:98:6c:0c:
96:d1:8f:52:40:98:84:18:c6:a5:e0:7d:d7:c1:ee:
20:85:4a:c0:49:b2:97:3c:49:ce:26:47:28:44:f8:
38:26:06:57:bd:51:25:1b:85:fe:eb:57:b4:0a:a0:
63:86:f7:5b:fd:86:4b:b3:47:78:13:53:b7:31:c7:
02:a1:17:42:1e:33:fd:c7:f5:ea:19:82:b3:cc:35:
c8:97:0a:d1:7c:8c:94:5b:1b:75:8d:a8:63:60:52:
ce:86:f5:a4:ac:5d:22:d8:21:36:e3:45:a5:f4:f2:
d1:bb:da:6a:87:08:95:d2:59:2a:ee:32:88:5b:7b:
2e:2b:5e:c0:45:e3:46:8d:4e:3f:a4:aa:6f:7b:61:
96:2d:1b:60:02:ad:65:4a:83:58:83:36:81:56:52:
37:ea:0b:ad:e7:1b:c8:f8:99:81:4d:aa:76:ed:31:
1d:4a:ff:92:8b:b2:ec:6f:8f:f0:b7:60:7f:5c:33:
65:cc:6b:5a:4e:d0:6b:1a:6b:dc:c6:89:92:3f:df:
65:33:cd:ff:2b:27:20:0c:6a:af:56:f2:21:ed:67:
63:16:70:99:2a:91:c5:ec:dd:ed:0c:81:1a:34:be:
f7:d2:2e:e9:06:53:84:2b:4c:81:66:e6:9c:0b:84:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:57:57:CB:8E:37:ED:3C:91:C5:5B:7B:41:17:05:A3:B7:C5:E3:97
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:3a:e0:cb:16:c2:4a:f0:61:05:7a:52:7f:46:69:16:70:
35:68:fa:23:a3:7a:b4:6b:6c:ec:5b:92:96:5e:a7:ed:85:93:
d0:73:c6:a4:2a:c7:98:9c:07:f2:81:2d:40:da:6e:39:a5:94:
56:55:51:96:4c:65:39:f1:56:d0:ba:ad:1c:6b:db:e3:ca:99:
75:63:e5:b2:46:a1:bf:de:15:cb:28:1c:e9:6f:23:47:69:64:
18:f0:de:45:27:ad:31:e4:a0:e8:c9:c9:0c:a9:16:5d:95:97:
4a:f8:31:89:f4:d1:22:ab:bd:ae:da:a5:e6:e0:b3:eb:dc:bb:
81:1c:24:41:a8:c3:f7:bb:65:6c:2a:d4:62:e0:6e:94:37:27:
88:e4:c0:1f:1b:61:f3:02:a6:4b:25:73:c5:d6:56:19:74:0d:
5f:6e:ec:bc:e5:b8:b0:f7:0b:44:e1:eb:c4:25:8f:a6:35:6a:
5a:2a:78:4b:6a:74:a7:c7:65:cf:e5:91:82:0b:75:ca:f0:0d:
9b:6e:b7:99:62:8c:1b:13:f3:ad:8b:07:66:33:b5:7e:f0:73:
f5:16:fd:cd:9a:b8:9a:d0:c4:92:b0:62:ab:77:67:d7:dc:52:
1b:55:f5:ef:16:8d:ab:ba:df:a8:3b:86:f5:17:46:bf:a4:a1:
7c:38:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:05 2026 by rpki-client