Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: 9xXqT/RJsKEBj5eTe6R+36AXYrxfRT2Y8nTUYRlVbKs=
Subject key identifier: 7A:0B:F3:C4:83:31:D4:27:1D:77:62:4F:BC:D5:99:40:1F:03:FD:19
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019D25F1F47F53F88B811484F13159AC78E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 04F9
Signing time: Wed 25 Mar 2026 17:01:46 +0000
Manifest this update: Wed 25 Mar 2026 17:01:46 +0000
Manifest next update: Thu 26 Mar 2026 17:01:46 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: HhrCe7tPsANFfjW7I8Yq1jA+Usb22vQV8ejMn/uygsE=)
2: Oz8EKSEHcWY_e4izVRb6ZqBpY-g.roa (hash: WQ/GzCseC8Ss8NihAisrEJ049anzZmJVy7FC4nNnwTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f4:7f:53:f8:8b:81:14:84:f1:31:59:ac:78:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Mar 25 17:01:46 2026 GMT
Not After : Mar 26 17:01:46 2026 GMT
Subject: CN=7a0bf3c48331d4271d77624fbcd599401f03fd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:11:a3:27:35:12:23:92:04:30:58:73:1d:
b8:41:15:d8:45:cf:8a:c7:f8:2d:5d:b6:20:bb:4f:
06:68:8a:49:51:3c:f0:f7:47:1f:f3:90:9d:78:a8:
74:9b:33:9a:ee:36:eb:d9:40:5f:34:2d:5e:f3:bb:
2b:6e:0b:03:01:8c:4e:35:8e:86:69:9a:75:ac:17:
d2:4e:f2:a1:0f:24:2b:7c:fc:bb:b3:18:88:23:6a:
70:d5:2a:65:bb:94:d6:8f:60:4a:68:96:5a:4f:cb:
6a:49:c1:f5:ea:c0:7f:68:5e:7f:88:e0:27:8d:44:
dc:80:f1:23:65:af:f3:0d:00:98:62:a1:66:95:bf:
45:c1:92:ba:1e:41:23:20:83:42:a8:6a:f1:53:75:
21:5c:81:45:ee:58:bc:24:f4:a9:9c:9e:89:57:d4:
c8:96:cb:21:44:89:62:6a:46:2b:06:9a:7f:d5:4f:
4b:0c:ae:1e:4a:a7:ee:91:29:bf:19:e4:5b:ff:77:
5c:de:65:e7:f6:31:95:46:6e:59:b4:64:9e:2d:87:
3a:63:d5:91:e1:cf:2f:73:95:4b:fb:d6:a4:48:99:
2b:e0:b9:e2:94:18:33:de:5c:d5:4a:58:f9:a9:b3:
f4:b5:51:a4:7f:fc:21:7b:ba:50:71:44:71:38:8f:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:F3:C4:83:31:D4:27:1D:77:62:4F:BC:D5:99:40:1F:03:FD:19
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cc:ae:0f:5c:63:4b:0a:80:b3:66:ed:61:d2:67:d6:15:3e:
e7:8a:0a:96:b3:55:91:83:78:2d:21:60:fd:6b:02:a9:69:d5:
39:de:d5:34:49:e5:6d:46:1d:9b:a9:a1:f6:fe:fb:04:8b:4e:
b6:d0:2d:0e:67:40:6c:06:87:4a:4d:49:da:83:a9:49:57:6f:
60:a0:1f:53:47:60:57:d7:9f:fe:00:e6:26:15:08:5f:30:af:
9e:7b:eb:3b:92:ec:01:69:4c:b8:88:55:b5:9b:c6:13:c1:6f:
8f:ed:fc:fb:ea:ef:4b:72:5c:03:b9:9a:c2:01:31:86:e1:98:
ce:16:8a:25:7b:4d:ee:36:e6:48:a4:29:3b:06:e4:d3:3b:13:
c9:f5:38:06:5f:de:0c:84:43:e2:6e:07:db:57:a0:33:8c:e4:
66:30:ea:c1:5f:be:e0:e1:20:8c:60:69:46:94:06:0a:45:09:
cf:22:d2:1b:dd:e1:38:a7:a9:b7:b6:25:70:71:29:d9:0b:e8:
af:6c:35:3d:72:1f:89:74:12:9a:c5:67:22:41:97:71:3b:38:
f8:34:78:65:97:da:23:38:39:c9:ec:f1:2b:d4:a7:72:b8:54:
3d:a5:ca:61:89:fa:df:e3:6e:98:0a:ed:95:c2:55:d0:43:46:
33:0a:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:47 2026 by rpki-client