Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: lf3ixI8IRAoSY+cx3pcQxKKjnu2510/jN/uo5BhvATk=
Subject key identifier: D9:53:F3:F2:E7:BF:DC:6F:0E:6B:17:82:F6:62:7A:9B:74:A1:4F:D7
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019D284DDD4B0DF092102BA62128A4D34C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0D1E
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: zI/URWFzJWKXN38HhjcB202CLBqFFUEKtEIzcRt1fUo=)
4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:dd:4b:0d:f0:92:10:2b:a6:21:28:a4:d3:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=d953f3f2e7bfdc6f0e6b1782f6627a9b74a14fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:e8:b5:f2:77:37:2e:8f:a4:2c:20:b1:48:
f6:9e:50:1c:23:19:9e:b1:60:79:66:52:4d:14:12:
02:0a:03:ec:fe:cb:c0:56:96:37:1e:c1:82:78:f4:
64:72:1f:11:65:93:08:a7:7a:fe:7c:f1:a7:ac:a9:
6c:b0:1d:ff:d9:7f:df:05:7a:73:50:58:be:a0:5b:
4f:d2:11:de:bb:76:16:21:83:5e:aa:11:d7:d0:f7:
77:0f:8b:8e:1c:85:6f:13:04:4d:31:4a:e1:d5:bc:
54:e2:0d:00:f9:f3:b3:63:aa:b2:23:30:c3:43:25:
89:c3:52:99:48:79:fd:ff:9c:7f:8d:47:31:4b:82:
f0:2c:88:58:9e:c0:9e:43:96:71:a0:69:b1:88:30:
13:ca:6c:a8:3f:a5:2f:00:c0:09:70:97:45:08:e5:
76:b4:9d:3f:8b:aa:43:4c:5c:35:b1:93:80:f7:fd:
97:82:4f:95:9d:ed:bf:2d:31:db:ba:28:92:fb:2e:
20:21:6b:a2:bb:e8:54:87:81:b0:f7:22:1d:a5:29:
66:69:06:b7:f7:c5:f3:5a:c8:77:22:9a:01:63:98:
71:f1:51:5f:06:d4:ba:0c:75:41:f8:84:3d:a0:69:
1b:9e:b9:5a:1d:13:79:2d:27:d1:82:56:43:41:0e:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:F3:F2:E7:BF:DC:6F:0E:6B:17:82:F6:62:7A:9B:74:A1:4F:D7
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c8:a9:27:ec:3a:4c:d2:95:53:e8:3e:31:07:43:d6:35:16:
8f:6f:48:e2:8e:d4:2c:a0:bd:03:ae:ca:bf:b8:74:9c:13:96:
2b:8f:2a:22:df:31:b5:ea:93:ea:d2:38:d4:ba:35:7a:ce:f2:
5b:55:b4:fd:ae:18:f8:e1:10:4c:7b:64:71:9f:4b:58:34:17:
86:b8:63:69:ed:cf:7e:19:dc:1c:ff:0b:ee:8b:22:5b:09:03:
9c:7e:ec:ca:73:2b:3d:49:6b:af:4b:79:45:35:0d:f8:93:7f:
2e:51:44:5a:c8:e2:6c:03:f3:c3:90:9e:21:17:0f:37:b6:aa:
97:37:ef:a8:d7:38:3a:25:a0:a6:45:f1:3b:3a:67:37:72:08:
8a:10:f8:65:23:6f:cc:4d:45:e4:06:33:e5:75:9d:78:cc:7d:
7e:de:2a:19:d8:92:43:c4:1d:ce:2d:6a:7d:d3:0c:61:df:66:
77:84:a0:15:76:98:9e:73:6a:c2:de:c4:3a:7c:00:f4:bb:d4:
60:51:fa:02:4e:55:3c:31:d7:e4:05:ff:30:ce:87:ab:70:d1:
68:be:47:70:05:a0:8f:61:3e:38:c5:ea:8d:9a:58:e9:6a:87:
5d:bc:23:bc:6f:b3:a8:fc:2c:b7:6e:69:66:ee:48:31:a0:70:
92:ca:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:47 2026 by rpki-client