Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: /cvRD3MP0+x42a7lIlTBZA0WFJBPcfr0bnnDFOS+RL0=
Subject key identifier: 35:4D:AE:95:42:0A:C7:7F:CD:9F:7F:CA:5A:5D:42:F6:9C:FA:86:4F
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 019D3940AD0CA64ACABA3DE4B2C7F8986173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0CFC
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: HAZA6F3BwOd0IfWybSlNKmtev0c.roa (hash: gALftZc7LvU74tun0cfmm/0H5zwtdsQqdDGCiEp/ba4=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: cRkpnnt+GHifQnU/PE6v25/MjoCU7qkVki3pOelnDoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ad:0c:a6:4a:ca:ba:3d:e4:b2:c7:f8:98:61:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=354dae95420ac77fcd9f7fca5a5d42f69cfa864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:5e:d3:e8:03:d2:6e:b2:6b:f9:cf:09:25:
52:78:47:5f:3f:01:5e:c7:d1:5a:85:c7:39:38:ef:
b8:b4:e2:cc:71:c5:95:aa:f3:bd:a2:f8:4e:6e:69:
ea:42:41:9a:1b:f7:c4:aa:c2:c7:fc:4a:05:07:b4:
f8:56:83:c6:44:6a:a3:2d:3b:e7:23:93:b9:40:05:
3f:87:8d:85:89:7f:81:5e:35:d8:f6:a9:95:1f:04:
58:10:cd:45:d1:65:58:b8:67:ab:f9:08:a6:c9:64:
aa:a7:44:0f:50:ac:9b:ac:e5:b1:6e:bc:a8:1e:be:
7a:55:4a:8b:97:74:c6:83:97:f2:5d:a2:d6:cb:f8:
18:97:1b:c9:f2:b3:f0:58:91:18:5f:ea:d2:1b:47:
65:83:41:66:67:f1:dc:a1:81:78:05:96:73:3f:63:
a4:8d:b2:2a:71:b2:96:9e:80:40:f0:09:14:6c:1e:
ce:37:ba:c5:c0:ed:17:37:90:91:99:a7:95:03:35:
a9:08:44:cd:c7:ea:78:a1:b5:48:6b:3f:0e:4c:63:
3b:2a:09:fd:7a:d2:0d:61:b4:9c:98:a9:25:6a:96:
4a:f4:2e:6f:dc:43:9e:36:cb:74:a8:98:eb:7f:59:
c0:be:34:60:0a:15:93:34:d3:20:06:2c:17:e9:29:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:AE:95:42:0A:C7:7F:CD:9F:7F:CA:5A:5D:42:F6:9C:FA:86:4F
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:24:41:e9:b5:b3:26:ea:be:01:9c:81:2b:23:f8:30:26:d2:
14:1a:1c:52:d9:3c:25:f2:d1:c0:9c:52:2d:3e:6c:41:05:34:
5c:f4:d7:0d:cf:67:8e:8b:b4:31:52:08:42:55:57:16:28:ef:
c8:53:57:c2:43:93:73:ee:f3:56:7f:a6:7f:72:53:32:3f:4e:
4e:89:06:e6:b9:0b:12:94:60:5e:3b:40:9c:5a:8c:aa:cf:96:
92:77:0b:07:45:a6:d4:07:43:1a:d6:78:cf:f1:89:b8:63:c0:
41:1c:2c:91:2f:a4:f3:0e:d0:72:a7:d9:0a:a4:35:bc:82:17:
35:5f:c3:e9:75:8e:dd:62:30:80:6d:b2:78:49:f0:47:68:77:
b4:70:0d:55:64:a1:2d:a7:e9:f1:67:c9:35:05:80:f7:58:94:
54:e0:0d:4e:ee:5d:16:73:6e:30:0d:5d:79:b8:3d:31:0c:36:
3f:d9:60:b0:86:6a:1b:77:bf:32:71:a1:10:d7:5a:35:20:75:
46:b7:0f:ab:65:e4:7a:70:d5:f1:17:58:02:f9:54:54:04:d7:
89:83:80:0e:34:d7:93:7c:d4:6e:dd:7a:b3:d4:a7:b5:38:5a:
85:bf:9b:70:8f:58:9e:b8:7f:49:80:8a:ee:e5:e1:15:76:6e:
ca:55:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:36 2026 by rpki-client