Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier: KD65uUbC5u0l1qaV2KGhOzem267PG5Z7pRVsJnI4rDw=
Subject key identifier: 4F:F8:37:BC:E2:5F:2A:16:5A:7F:16:47:24:08:3B:BD:12:AE:75:A8
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 019D389BEFEEB4EBCB1D30794394E295E1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: sLPgedRARc17Tm/shBjrmBH/kPBdA5NRB6dh+z2UcAo=)
2: UxsjjV_Gt9-OxRcgz90c19qriuk.roa (hash: 3EeDtpjQ6swXAQQE3Mf+vnblA6AQ2AaH7/97p2AeAtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ef:ee:b4:eb:cb:1d:30:79:43:94:e2:95:e1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=4ff837bce25f2a165a7f164724083bbd12ae75a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:b7:ca:d6:01:4a:aa:35:bb:40:ca:b0:cb:
b2:94:2b:53:a7:4d:25:25:b2:20:7e:24:76:4f:62:
c5:0b:b3:b4:f1:09:7f:aa:78:f9:6c:71:6b:97:47:
11:da:8b:33:55:58:8d:c3:78:ee:99:f1:88:df:57:
44:f1:a6:e2:2e:8a:d5:45:4e:01:d9:4b:b8:ec:31:
2b:62:dc:bc:24:18:be:dc:62:fe:a0:91:94:12:db:
b7:d6:2c:87:28:1c:3a:19:e4:39:05:3b:61:8a:ed:
7e:17:a6:aa:23:45:48:d7:27:ae:9a:29:3a:c8:7f:
0c:e2:44:c8:27:e3:43:cb:56:4d:68:e6:8e:5d:83:
b0:2d:d2:c0:99:3b:a9:8b:36:01:fa:69:81:e9:71:
10:34:2e:38:6d:7b:1c:a8:aa:69:81:7e:23:e5:a6:
c6:ea:cd:e3:a1:15:65:b1:36:4d:fd:2e:50:21:e3:
a4:94:1e:fb:5a:5c:97:47:6f:df:9e:97:3b:a4:a0:
9a:9f:1b:43:95:e7:d7:e5:aa:3b:ff:27:12:db:4b:
8e:4d:c0:7b:14:3e:c1:6c:4b:bf:5e:e4:71:ce:ea:
c4:7b:82:e7:cc:89:9d:2b:75:6a:f4:86:9a:ba:0c:
ad:9f:f4:6b:14:80:e2:bf:01:11:a0:af:b5:89:1b:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:37:BC:E2:5F:2A:16:5A:7F:16:47:24:08:3B:BD:12:AE:75:A8
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8e:bc:bd:e8:fb:e2:26:be:3f:2c:2f:1d:b5:0e:7d:5f:b1:
99:62:1d:a4:c6:d0:bf:7a:e8:aa:9b:96:e7:83:03:c8:20:db:
c4:9d:f1:dd:44:63:bb:07:7e:47:35:52:50:20:4d:67:78:a3:
72:63:58:06:cc:43:05:e2:f6:6e:27:34:ff:0b:74:fc:72:8e:
25:2e:e0:d0:0c:c2:5a:b1:22:f6:25:00:b0:de:de:5a:62:cb:
a3:07:4b:a5:ee:7e:34:60:3c:1f:f8:7f:3b:24:09:bd:07:fb:
9a:34:dc:ea:bc:b5:cb:69:bc:d2:fc:dd:ca:d3:14:6a:f9:35:
03:64:e2:77:5c:f6:d3:5b:ad:34:00:de:39:02:70:40:f3:f6:
ae:a9:ab:48:85:fa:49:84:5a:53:39:41:3b:f2:83:fd:55:e1:
eb:7f:49:16:d6:b3:0d:6e:38:8f:bf:63:72:af:3a:9e:f7:f5:
0e:c2:14:a2:50:31:80:9e:b1:42:4c:0f:13:9a:c1:e7:71:c9:
97:67:18:1b:ef:db:10:29:6c:1d:4b:7b:3d:95:f7:fa:e2:6a:
a2:80:48:93:f1:93:ec:38:d4:c0:00:f8:64:40:10:78:32:05:
2a:d2:7a:8e:68:9a:e5:bc:81:e3:08:5d:75:35:a9:b4:fc:d2:
21:ea:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client