Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: p7o7M2HxcXqq8Q1XCKUmalSF0eiDToMEmknCedOSHQA=
Subject key identifier: 58:25:EA:5D:8D:05:1C:9B:33:40:C1:12:C1:FF:3B:20:D8:26:91:28
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019D375275E7D727541F97CC5995BD9A5FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0F6E
Signing time: Sun 29 Mar 2026 02:00:44 +0000
Manifest this update: Sun 29 Mar 2026 02:00:44 +0000
Manifest next update: Mon 30 Mar 2026 02:00:44 +0000
Files and hashes: 1: a5gV2iTHliPR8LhFYU-KK7QJJvE.roa (hash: Wf9B8UaHcibkRfA0zFpN6M9JgI+cnQ8hTvGPe2+Coc4=)
2: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: AWGxjAeJZaspiY7SZeRN3lqncU2RrwCGovmCneA+8uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:75:e7:d7:27:54:1f:97:cc:59:95:bd:9a:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Mar 29 02:00:44 2026 GMT
Not After : Mar 30 02:00:44 2026 GMT
Subject: CN=5825ea5d8d051c9b3340c112c1ff3b20d8269128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:ac:61:e7:cd:c9:1d:45:d4:83:b5:98:db:
48:70:01:59:0f:2b:58:e9:e8:bd:f8:53:26:1c:5a:
42:e7:8f:72:0d:0d:c8:bf:a6:04:64:41:bb:9b:00:
e0:08:da:ab:ad:04:27:40:a7:24:d4:0f:47:07:b4:
e0:29:12:c3:ce:e0:24:09:d9:27:a6:be:82:f7:d0:
77:7b:ad:bd:ec:7b:3e:e6:9b:98:0d:33:d8:94:9d:
60:d7:a6:c7:ee:f3:a3:6c:cb:cc:ba:b8:68:a7:5e:
02:57:0c:c3:01:cf:0b:62:59:68:50:b5:af:ff:ce:
bd:84:ba:76:5c:4f:ee:35:d6:8c:d7:30:c1:bd:a9:
22:a5:4e:56:65:7f:5e:a1:a3:51:4a:84:fa:0f:ee:
59:86:98:75:1c:08:2e:53:59:69:a1:46:b5:83:dc:
41:74:4d:8e:91:ca:a0:86:ac:7a:b2:31:a2:cb:d3:
7a:39:76:c8:8c:14:db:a9:30:57:be:c8:35:5d:ca:
c3:76:ef:c1:b8:c7:f9:c8:c5:24:0a:dd:ab:3f:81:
7a:47:8e:96:d0:69:c7:e1:5c:a3:d2:32:aa:71:d7:
f0:63:6e:33:b3:de:c3:66:ab:21:20:46:bf:5a:e6:
9e:db:bc:00:54:60:66:ab:1e:51:3b:c5:6f:9e:d4:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:EA:5D:8D:05:1C:9B:33:40:C1:12:C1:FF:3B:20:D8:26:91:28
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8c:63:43:d3:94:61:cd:36:4e:6e:fc:23:24:d4:3d:f2:96:
6d:1b:04:0c:88:84:99:89:0a:09:69:72:3e:52:b6:b2:e6:ec:
5b:24:5d:c7:a8:fb:bc:ef:2f:d5:69:cb:d5:31:81:d1:02:d7:
a6:fd:fb:a1:e1:83:c6:e6:71:eb:8e:e2:65:d8:6b:77:1e:77:
82:3c:ec:ce:29:8d:05:4c:86:22:0a:b3:9d:07:b3:3a:8c:22:
d7:4a:16:01:fc:5e:3d:2b:0a:19:17:a2:e9:3e:d2:d6:18:c3:
e0:19:fd:cf:b9:a9:17:0c:5d:3d:79:3a:1a:97:e3:19:d4:41:
fc:bd:cf:55:65:4a:99:56:15:f7:b3:02:2c:fc:ad:06:f5:92:
9a:18:12:96:ee:1d:a5:b1:85:f3:00:25:b9:d4:5b:36:45:cf:
eb:39:6c:86:ef:03:a5:a3:1d:e1:3d:f6:7d:52:72:4e:f5:b4:
87:0f:7e:67:ae:2f:3c:18:5b:3c:15:22:cf:92:74:06:10:06:
8c:e9:e5:73:9a:e3:73:69:df:7d:9e:32:45:85:f9:db:8a:4b:
a6:55:16:77:20:de:81:ca:ef:e1:6d:0c:16:54:e4:5a:28:ca:
d5:52:bd:39:82:f2:be:36:0f:d2:25:2a:13:80:5d:d2:fc:91:
f9:74:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:17 2026 by rpki-client