Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d8225f-8b73-46b0-9d84-a09a73770568/1/lMp9m_kc3nabJ3LU1RmIW8mF56k.mft
File: lMp9m_kc3nabJ3LU1RmIW8mF56k.mft (raw, json)
Hash identifier: qgbBbCojfwaU1N/b0B2XvQUgrLTb1d/omrZB5K+/qYc=
Subject key identifier: 69:53:FD:37:2F:5F:B5:F0:13:FD:18:21:93:F6:75:18:39:74:13:58
Authority key identifier: 94:CA:7D:9B:F9:1C:DE:76:9B:27:72:D4:D5:19:88:5B:C9:85:E7:A9
Certificate issuer: /CN=94ca7d9bf91cde769b2772d4d519885bc985e7a9
Certificate serial: 019D3A8AE066F937BFDE45F0C634C354007A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMp9m_kc3nabJ3LU1RmIW8mF56k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d8225f-8b73-46b0-9d84-a09a73770568/1/lMp9m_kc3nabJ3LU1RmIW8mF56k.mft
Manifest number: 7A
Signing time: Sun 29 Mar 2026 17:01:12 +0000
Manifest this update: Sun 29 Mar 2026 17:01:12 +0000
Manifest next update: Mon 30 Mar 2026 17:01:12 +0000
Files and hashes: 1: LixKFAOu81SmYmL4xCgVhf_Xlcg.roa (hash: aRLT5CHgFsSmckl/aN4gO8NDbuP1WY8705e0YB2xo6U=)
2: lMp9m_kc3nabJ3LU1RmIW8mF56k.crl (hash: lKlVgXSciGyA43/N019Dyc+AwA0dteXSIgeoWzrPmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d8225f-8b73-46b0-9d84-a09a73770568/1/lMp9m_kc3nabJ3LU1RmIW8mF56k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d8225f-8b73-46b0-9d84-a09a73770568/1/lMp9m_kc3nabJ3LU1RmIW8mF56k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMp9m_kc3nabJ3LU1RmIW8mF56k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:e0:66:f9:37:bf:de:45:f0:c6:34:c3:54:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca7d9bf91cde769b2772d4d519885bc985e7a9
Validity
Not Before: Mar 29 17:01:12 2026 GMT
Not After : Mar 30 17:01:12 2026 GMT
Subject: CN=6953fd372f5fb5f013fd182193f6751839741358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:fc:d3:50:7f:bf:91:74:94:ef:5e:69:d1:
5e:47:2a:e0:e9:99:36:5a:e4:2a:2b:b9:5e:45:ab:
fb:cb:ec:90:19:d2:fa:82:33:b7:d3:7e:63:c5:0f:
32:17:95:c5:96:49:8d:57:a2:5d:8a:65:2b:de:80:
41:41:e7:f2:42:56:1f:5f:2c:9a:58:f8:01:80:9b:
05:6d:1b:46:20:4b:2e:41:30:90:0c:a7:0d:7d:7f:
40:f1:1b:29:da:b0:65:37:57:04:f0:6d:78:50:96:
d8:cf:81:45:14:b0:82:fb:45:ae:b8:27:7f:e4:d4:
53:a7:0b:d1:86:ab:dd:85:6b:9f:6e:38:12:68:11:
94:0a:7f:4e:46:78:2a:7e:37:91:11:54:b7:01:df:
96:75:67:c0:a4:e0:de:27:24:bd:22:5e:bc:8b:15:
ff:af:21:9b:68:3d:84:aa:5d:39:03:5e:8a:1f:75:
70:9c:7b:cb:67:24:b4:38:e5:fe:8f:b8:78:4b:9a:
9d:44:10:0c:9d:00:d9:24:b7:28:0e:a6:67:73:a2:
08:c6:9b:f8:6a:25:4b:7e:e4:ab:ea:80:f7:d0:18:
de:75:66:fe:f0:3c:e1:da:e8:d2:89:14:25:5f:7c:
cf:c3:16:de:68:76:48:37:71:4a:7e:78:d5:c6:c7:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:FD:37:2F:5F:B5:F0:13:FD:18:21:93:F6:75:18:39:74:13:58
X509v3 Authority Key Identifier:
keyid:94:CA:7D:9B:F9:1C:DE:76:9B:27:72:D4:D5:19:88:5B:C9:85:E7:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMp9m_kc3nabJ3LU1RmIW8mF56k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d8225f-8b73-46b0-9d84-a09a73770568/1/lMp9m_kc3nabJ3LU1RmIW8mF56k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d8225f-8b73-46b0-9d84-a09a73770568/1/lMp9m_kc3nabJ3LU1RmIW8mF56k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:11:fb:a8:b3:c0:35:31:a3:79:cf:62:69:d6:9b:ac:56:
5c:9c:55:6a:e2:f4:a5:05:a4:ca:38:34:9d:86:31:ee:d2:36:
ae:e4:5f:bf:0f:d4:5e:c2:79:73:a8:1a:15:09:bb:2f:e7:a0:
ff:04:12:93:70:ff:e5:5b:1b:15:e1:a1:ea:6a:82:66:31:3c:
ba:97:c6:72:0a:d9:78:6a:70:c4:b8:19:5c:e0:79:47:3a:29:
47:e7:2d:62:17:70:ba:57:42:50:d7:72:be:5d:24:15:97:27:
c2:aa:8e:09:a8:18:fe:3f:c9:64:8f:f1:3b:26:be:9b:98:55:
64:3f:04:d5:26:ae:2d:ee:0e:ec:13:b3:bc:97:9b:fc:fe:92:
1e:80:2e:25:84:a8:0a:4c:19:b8:5f:d6:17:c4:f0:9b:60:1d:
5b:da:19:fa:57:2c:03:31:3e:a3:67:75:b3:2d:3e:78:24:16:
e2:f8:d3:2d:51:2e:62:7b:92:f2:bf:a5:c3:bd:92:1a:fe:71:
15:6d:2d:4a:2e:3c:1f:42:85:93:1d:cf:6a:48:21:46:c6:c1:
96:01:bf:f3:1f:96:0b:8c:5e:b8:1e:12:8d:8a:5f:f7:90:c2:
07:95:6f:df:1d:31:3b:c7:c4:8d:b6:e8:d3:64:2c:ed:f2:e4:
26:50:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:27 2026 by rpki-client