Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: MQfCVIYVp67JbZquBhI9eyNU3wTSmr5I7Ev29s+3bf8=
Subject key identifier: 1D:86:A5:57:53:74:AF:95:25:FA:EC:34:60:13:DD:15:F3:DD:88:5A
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019D37F7800CC96E8C5F191E62934CE69822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 18A2
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: 9l4eTxQiJdfwsUpte57Ojwmqkt8.roa (hash: emeHHUrFvsDMnCrOVZjdq3feYW1b8D0yrHBj07czvhI=)
2: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: B/C8PyrK0OKYTwgux50H65h/0NJI8Jlrg/trm+Vlw8g=)
3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:80:0c:c9:6e:8c:5f:19:1e:62:93:4c:e6:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=1d86a5575374af9525faec346013dd15f3dd885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:84:cd:4f:06:87:86:1c:11:7d:d0:08:00:
db:8f:6e:58:c8:ff:4f:b6:25:c5:ab:3e:e4:b5:ac:
5a:7d:a9:d8:80:f5:e3:03:e5:63:de:19:5d:f8:08:
75:1f:e9:24:e4:93:b8:f7:6d:12:62:b8:ff:73:50:
03:4f:05:c5:5a:17:b6:4e:9c:76:ff:23:2c:8f:25:
b4:94:65:bf:3e:55:ad:f4:a3:8b:16:31:95:e0:70:
d4:e4:e5:af:f5:59:55:96:12:bc:17:ea:ae:9b:9c:
43:ee:bf:e7:c1:78:5e:1f:31:aa:57:5f:89:55:31:
12:ac:98:b2:39:3e:c1:ee:5b:4f:bd:0c:a9:d2:4e:
45:c9:cd:e8:d7:97:bb:2a:da:90:3b:2c:1e:21:59:
bf:7b:cf:39:ca:51:6e:7e:aa:a7:9b:f8:e7:0c:54:
09:b9:95:40:d0:02:56:0a:fb:7a:7b:5a:e0:c6:df:
5c:78:fa:c3:0e:ca:45:f6:b0:5d:62:2e:21:0f:83:
21:2e:f6:34:4c:c6:95:c2:a2:48:4b:80:8a:58:0e:
4a:cd:37:ea:22:c3:14:fb:b0:7a:70:b6:f7:96:09:
3e:5d:d6:9d:7d:3e:4d:c4:61:ee:89:3f:16:a4:78:
30:20:aa:ce:6e:2f:d1:eb:6c:08:f9:c2:aa:d1:e6:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:A5:57:53:74:AF:95:25:FA:EC:34:60:13:DD:15:F3:DD:88:5A
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:43:f7:12:86:d7:67:63:39:82:48:0b:0b:8e:cf:05:25:5a:
a1:60:ad:95:fc:3a:3e:4e:62:d2:8a:39:f8:55:3f:d9:35:2a:
2f:67:7b:94:e3:a0:c9:16:7f:b5:38:d1:69:67:2f:4c:62:20:
97:f2:43:a0:25:2d:6d:28:28:93:36:3c:e8:77:e3:c8:ff:d4:
6b:30:63:e9:3b:79:d9:52:fe:22:ea:d2:36:29:67:81:cb:5f:
51:a5:97:7e:ca:74:ba:44:a4:54:dd:38:57:c4:ff:d2:50:02:
50:dd:04:16:20:45:ee:9b:de:06:98:28:7f:35:88:c2:db:47:
0b:39:43:90:d2:b0:38:d2:fd:c0:44:46:55:42:39:12:96:90:
78:5e:3e:bc:fe:36:02:a6:b4:3f:30:ea:49:07:e6:3a:a4:3c:
5b:da:ff:70:26:ee:58:9c:12:ce:44:e6:88:9b:5e:05:c2:6a:
23:ae:74:f0:af:4a:5b:c7:2c:e2:7a:c6:38:10:da:16:95:9a:
29:a3:95:53:bc:b8:33:a0:b1:c2:66:a6:f9:1f:2d:95:67:5a:
67:e7:79:56:a9:51:03:f9:d4:00:90:0d:63:04:83:5c:c8:07:
aa:54:ea:56:b2:b7:e9:b4:b8:82:40:7c:cb:7d:49:19:46:93:
71:fe:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:25 2026 by rpki-client