Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: MuAag5yJWEkcBqn+Ah1TK9Hgyb43JwwZzCcjt0kKLVI=
Subject key identifier: 3F:EC:48:D3:92:F9:AB:1E:F2:C6:C4:DB:BD:D8:04:50:A4:D0:C1:86
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019D3B2F949D1E818BA18F9E5D1CFE7F6DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 07C5
Signing time: Sun 29 Mar 2026 20:01:07 +0000
Manifest this update: Sun 29 Mar 2026 20:01:07 +0000
Manifest next update: Mon 30 Mar 2026 20:01:07 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: S06xJYHSpaYOxfcBJwTTFtKUtGaXGzj1aUSut+r65zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:94:9d:1e:81:8b:a1:8f:9e:5d:1c:fe:7f:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Mar 29 20:01:07 2026 GMT
Not After : Mar 30 20:01:07 2026 GMT
Subject: CN=3fec48d392f9ab1ef2c6c4dbbdd80450a4d0c186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:a3:34:f8:eb:13:af:b0:62:01:2a:76:d8:
23:91:60:d9:60:c0:78:2d:ba:3c:24:b2:d1:eb:0d:
f4:58:4f:d2:8a:ef:c9:2c:f5:cc:32:53:a3:3b:53:
74:5e:26:7e:53:14:41:58:5d:72:39:7b:f4:71:ae:
4c:e5:90:f0:f2:86:f3:1a:57:21:ec:06:89:38:8d:
e9:a8:9f:29:ee:76:55:cf:0b:93:8c:a6:bd:31:6d:
fa:62:47:20:e7:f2:b1:dd:5a:37:8f:dd:33:be:86:
1e:b8:eb:b4:be:f4:47:a2:a8:e6:78:e8:19:93:17:
6e:de:f6:a5:6c:f2:dc:93:b8:f3:c8:54:f7:65:16:
73:67:0e:91:23:c2:26:a3:73:f6:3d:7a:5d:85:6c:
28:4b:60:ac:a8:18:6c:5e:4f:e3:60:c8:64:6e:65:
17:3a:a0:44:fa:37:20:07:e2:37:75:69:aa:7e:e5:
fe:62:03:d8:06:ee:27:5f:7a:ed:e7:02:d7:99:52:
76:37:3c:a9:e6:6d:aa:2c:7f:a6:02:fe:c9:42:0f:
a7:ae:ec:05:60:3f:28:77:f1:55:85:a8:58:3d:17:
90:69:b8:da:00:56:15:f3:72:c3:98:47:57:0a:a6:
39:1b:a9:07:b9:ec:16:94:3a:30:59:52:26:4c:72:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:48:D3:92:F9:AB:1E:F2:C6:C4:DB:BD:D8:04:50:A4:D0:C1:86
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:73:7c:61:0b:a2:af:1e:85:cf:16:ce:25:f8:41:a5:c2:ec:
c0:db:82:af:a0:b9:eb:a2:79:31:12:9c:fe:d6:1a:6a:13:f6:
67:7e:27:f3:64:3e:0a:8b:4a:f7:07:e4:94:1a:0c:96:d3:70:
90:c6:61:3d:42:36:a4:89:80:e4:a7:46:ec:51:75:65:b6:67:
38:7c:00:21:8f:04:1a:1b:a0:b9:d2:bd:10:a9:74:5e:88:a8:
cf:f2:bd:0d:1d:b8:04:87:87:2d:69:33:b5:75:69:99:c4:ec:
a8:da:3b:72:f2:ec:d9:04:95:65:e5:96:b0:7d:68:53:43:fc:
8e:0d:a8:24:79:b8:03:e1:f2:cf:9d:fa:6c:fe:05:b9:59:09:
90:77:07:90:a1:fa:7e:38:4b:ac:25:83:3d:c3:10:de:f9:48:
67:cf:67:36:cd:24:b8:10:00:69:f8:74:84:e8:70:30:53:f0:
e4:cd:33:bd:81:14:88:04:a7:2e:c5:95:c3:ad:05:1f:a2:a1:
c2:3f:3a:2d:6d:54:ac:0a:dd:4e:78:19:e4:16:03:bc:2c:43:
02:8a:39:9a:61:62:02:d7:19:03:4c:fd:b2:f4:59:95:17:10:
37:30:af:3a:71:65:e4:93:09:32:87:a0:0a:93:bf:81:f6:d6:
cf:95:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:08:40 2026 by rpki-client