Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: aBAM0ww51gD1H+cTIXLWmPCE9TOzuM6wzVNyAWe0jSI=
Subject key identifier: BA:34:9F:26:52:6D:1B:84:6A:95:3E:D3:4B:95:29:5E:70:2C:7B:0C
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019D265FA090948E2B410C90166E23B5D3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 1848
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: WCEfBrDY22Yo+voRxbcA8nbsaR7etxzBpPrjXqjAZCs=)
2: hs1mGbyytLZUcmmoRa1vmUrBtV0.roa (hash: Q7jJNRLIE/XZCLjYqKH3txSs09Wat8XFnoEvxouvOI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a0:90:94:8e:2b:41:0c:90:16:6e:23:b5:d3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=ba349f26526d1b846a953ed34b95295e702c7b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:ab:24:cb:1a:d8:ec:cb:4a:01:a1:77:0a:
f8:9e:18:60:f5:44:b5:89:18:a2:b8:30:03:89:86:
85:2c:54:a3:00:6d:c6:de:ba:2a:8d:98:e1:09:e6:
ee:c3:0c:57:35:a9:24:86:df:83:b8:19:f3:b1:7c:
3a:fa:f2:90:5e:08:07:b6:4a:ba:72:4d:cb:56:04:
f5:91:b7:3d:37:e3:6f:52:56:70:45:80:5a:c6:ed:
66:21:b7:59:78:5a:df:56:4d:f1:fb:ca:8f:9b:f4:
f6:e4:9f:bc:33:3c:03:fb:dc:70:49:88:07:55:39:
3d:13:80:1a:e2:70:ad:ee:f7:65:9f:92:61:0c:4d:
2f:62:f8:08:17:85:3e:ff:4f:fd:2b:b6:d8:f5:1d:
3a:16:71:a4:e1:14:25:ea:a6:90:ef:6e:b0:54:38:
9d:4d:75:6e:18:96:7d:7f:8a:28:9a:7f:fd:52:e0:
9c:a5:58:e7:a1:88:48:23:a0:48:ac:62:5e:94:ba:
54:1f:48:69:7e:84:21:04:00:c3:e3:00:f9:22:f8:
f9:11:ce:83:fe:5c:d7:8a:ca:7f:56:6d:34:a2:6c:
70:3a:ef:be:5f:21:a0:96:2b:94:eb:42:22:45:18:
39:6f:b6:9d:84:f0:00:54:28:38:4e:d5:0d:4d:36:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:9F:26:52:6D:1B:84:6A:95:3E:D3:4B:95:29:5E:70:2C:7B:0C
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:28:5e:87:da:4f:35:94:72:cc:5f:c9:e9:e7:08:1c:83:cc:
d3:e6:08:08:96:af:ff:23:3b:f8:cf:12:53:c0:bc:c1:86:c9:
9b:a2:75:f7:eb:38:10:58:3e:15:d4:a8:ab:ee:22:cb:d6:6e:
91:a2:1e:9d:cb:0f:38:9f:19:6a:71:b5:00:fd:f2:b6:ab:05:
13:bb:63:42:c6:43:79:90:3b:61:44:a5:8c:f7:59:26:c1:2b:
1e:c5:13:1a:fc:03:65:77:9d:0f:4b:b6:05:58:8e:bd:f3:56:
cc:b0:01:34:9f:7f:c2:18:97:b7:9e:1e:23:70:6c:3d:c1:c8:
f3:78:4e:73:d4:71:b9:b6:8e:46:f7:5c:79:c4:cf:1c:e9:53:
3b:88:8b:7e:e8:c8:cb:dd:b9:d5:fc:06:5e:53:e3:63:fa:9b:
da:c6:30:24:21:97:67:bf:bb:35:18:c0:3e:04:5a:4e:2e:37:
4c:12:5f:2c:96:2e:75:bb:b7:a2:c1:7e:80:87:17:68:4a:a8:
ee:74:25:8a:c4:ee:6a:11:97:26:cb:65:a4:fa:fa:fa:2f:7a:
bf:81:e3:ba:9a:47:57:62:15:18:09:f9:24:3b:93:d4:8f:f1:
e6:0d:56:43:52:5e:19:58:eb:cc:a3:72:84:3b:63:c6:08:c6:
f8:55:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:18 2026 by rpki-client