Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: kJXISNHfKBqRe3FpXYCdo5qAsJUCndiX1eOOFHlhjbo=
Subject key identifier: FB:0D:5F:48:3A:98:1D:F6:37:CA:BE:BC:75:CB:5A:D3:C6:65:A5:E6
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 019D39412387232D08730B18E5F3CDD60D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 0B10
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: KKTxvi4QT-uw2rVsD47tdsRqIEw.roa (hash: xejVwgC/oSDE2f2FYXW8noid3jsDDlJ6in2DKcaZdI8=)
2: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: gNcX3o2+IKTY78CGxghvtlSyeA0qMJBgtGBUf4Ghyvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:23:87:23:2d:08:73:0b:18:e5:f3:cd:d6:0d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=fb0d5f483a981df637cabebc75cb5ad3c665a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:85:a0:44:67:82:46:12:bd:00:38:a1:de:
cc:d8:69:ac:aa:cc:f4:81:d7:39:81:dc:8c:74:80:
c8:a4:5d:ab:6d:5e:2b:cd:c0:0d:2d:c7:ef:b3:15:
02:64:b1:21:01:3a:84:4b:1d:b7:03:93:4d:b0:00:
a9:64:3b:f7:35:1d:cb:1b:5d:72:fb:5e:a2:81:38:
f1:0c:ba:77:d8:56:18:0b:e5:a9:b9:bc:c6:c6:62:
e0:d5:31:35:d8:98:57:11:36:13:82:44:c5:01:7f:
70:0d:cf:98:fd:ee:47:91:26:c1:63:07:b5:95:1a:
a2:e7:27:f9:0c:37:52:e3:6d:4f:5c:86:4e:b1:68:
2b:40:6b:6d:66:57:f5:2e:35:86:52:9b:18:ed:1c:
64:a7:44:1a:d5:e6:40:53:c8:16:91:a8:a7:d1:fb:
12:fd:41:7b:88:47:38:83:f4:b3:e8:ef:f0:8c:ac:
ce:0f:79:30:cd:1c:c3:50:15:1a:fa:72:86:43:d2:
78:b3:16:74:ac:82:97:1b:9c:cf:a9:6e:1a:4e:29:
40:4a:c2:5e:64:d4:b9:cb:a3:44:e7:63:2e:a2:7d:
18:73:95:52:d4:d9:a5:52:90:f7:30:47:16:f6:bc:
b2:60:02:c1:6d:59:2b:9e:0b:bf:a4:90:78:3d:3f:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:5F:48:3A:98:1D:F6:37:CA:BE:BC:75:CB:5A:D3:C6:65:A5:E6
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:ac:c3:33:57:b3:99:17:e3:2e:23:f0:78:42:59:1e:22:
be:67:68:ae:a8:62:96:ad:42:df:33:91:03:e1:2c:60:1c:be:
b3:e5:48:4c:c1:c4:5f:db:61:e8:91:b0:27:40:b5:d1:14:8a:
41:d8:67:b2:a5:bd:a5:04:f2:0f:e5:1f:9f:b8:f6:2e:67:f3:
b7:3d:ec:a9:6f:c4:33:0d:3d:d3:c9:d1:6f:b9:82:aa:17:4e:
36:56:45:c2:a5:fd:0e:04:56:08:dd:eb:e4:17:5b:12:fd:7c:
6e:62:9e:87:a5:c6:4a:3e:6b:08:79:ee:48:c7:d2:1f:fd:0d:
4e:06:de:17:1c:a0:9c:34:23:dd:df:6a:f0:0e:de:6b:cc:4e:
b3:71:6e:ad:d6:28:67:f2:cb:d2:d2:0d:32:90:77:47:36:cd:
91:a9:b3:3c:40:76:66:bf:04:4b:73:2e:64:fb:9c:34:c1:82:
58:fd:70:87:ce:4d:81:f2:4c:f3:77:bb:37:0d:b2:e4:74:ab:
12:f5:cf:87:64:ab:cd:d8:62:74:3b:8c:e7:ff:51:99:fc:da:
56:50:87:65:5b:57:c9:e8:f4:5f:b1:99:f4:0e:12:97:35:70:
ac:0c:80:4f:74:a6:72:d4:3f:1d:6d:26:c0:92:af:95:1f:fc:
6f:b2:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:25 2026 by rpki-client