Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: jebMaGg7Y3b3bfXYVT+1Q/bWcGn+brZBdFnlCBWZql4=
Subject key identifier: 0A:04:41:3C:01:A4:B7:75:94:A4:60:5B:6F:2C:F7:07:C1:C9:47:70
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 019D2771D2CB9F317AD7CF762C8AB7D8A770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: Je1LIj3SOYVt7NB7M+ULpiG0w9GLXKotp4TCGZaLiYc=)
2: cO4n71Ca1KW9YOy3Lk5tseYgVLs.roa (hash: mIrTwfJ5XFJdShmQyd6p7zVMdef2lZJKuLHzMy3HxFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d2:cb:9f:31:7a:d7:cf:76:2c:8a:b7:d8:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=0a04413c01a4b77594a4605b6f2cf707c1c94770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:d8:8a:98:7a:55:e5:de:4c:4a:0a:aa:9f:
6c:f7:3b:05:83:49:d1:42:2a:5b:e8:a2:5f:87:f9:
b1:75:12:5f:d1:29:45:0b:69:0e:56:d4:77:c8:85:
72:c0:70:1c:7e:92:8f:85:86:a0:99:cd:50:c2:5a:
bf:35:54:b9:80:21:89:d0:f0:51:78:9f:ef:45:b8:
a7:ae:d6:21:a8:58:02:13:25:70:97:6d:b8:6f:26:
0d:8c:70:08:09:e9:f4:35:c4:4c:01:47:e8:b1:c1:
6c:8a:35:dd:7b:08:eb:15:0d:0a:a4:a7:b7:b0:2c:
1f:20:09:22:56:53:3d:d3:8a:65:e4:6b:07:19:8f:
0e:0c:84:ab:16:ae:2f:7c:48:88:f4:ed:d7:73:68:
a9:67:e3:f4:62:1c:20:fd:cf:af:49:a5:bc:bc:29:
34:cf:64:50:eb:b3:56:f1:ef:2e:51:37:cf:5f:80:
79:bb:d1:24:19:4b:b9:24:94:51:a7:ab:1c:69:be:
45:e3:37:05:98:25:45:b4:76:fe:7b:da:97:f8:6d:
e5:96:d6:25:dc:43:0c:fe:2b:1e:cf:5d:dd:c6:41:
98:56:ad:dd:93:ad:98:02:8b:05:c9:5a:f7:0e:86:
df:e7:56:b8:58:af:aa:ac:6e:e8:46:94:e9:f7:5e:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:41:3C:01:A4:B7:75:94:A4:60:5B:6F:2C:F7:07:C1:C9:47:70
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:04:53:52:98:60:ba:d6:c6:9a:1f:88:63:ec:4c:bc:bf:2b:
f7:f6:8c:16:14:59:d5:1f:50:ac:aa:d2:17:fd:85:fc:bc:78:
03:a3:c6:03:90:81:b4:6d:47:a0:31:eb:d1:d7:e2:13:b3:9a:
10:e5:72:2d:9a:d7:a4:66:dc:a8:4d:91:f9:bd:d1:16:fa:fc:
11:18:4d:ef:30:05:75:1a:76:d4:f8:74:3c:14:aa:86:2c:c1:
36:f8:86:83:c4:35:64:68:6a:6f:5b:3e:6d:ca:9e:68:c4:72:
65:f0:5b:51:4d:12:2f:84:2d:f5:32:dd:88:c0:82:7d:82:a3:
87:30:b4:48:2d:e3:f9:cc:ad:e3:55:69:d6:73:ed:d9:8d:00:
a9:f7:1a:ce:ec:cf:e3:b8:df:02:6d:4f:3d:48:79:94:e2:c1:
1f:7f:2e:84:ff:75:cf:31:12:1e:87:2f:fd:5c:21:da:c2:e9:
d8:44:c9:fd:4e:54:f7:c4:2e:a4:14:33:9d:df:f3:af:3a:26:
72:8d:2c:2f:a6:ea:4c:5f:fb:89:83:e3:fe:a0:99:08:b0:7f:
d3:d3:2d:77:74:0b:f2:57:3c:2f:c3:3e:c8:cb:2d:39:bf:0b:
fd:2d:b2:1d:ad:38:e1:2e:7f:e0:86:89:46:32:3d:d1:bd:db:
69:19:7e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:53 2026 by rpki-client