Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: 8NMFCekjGxQCF1vmFWTwMBm4Zy9rluMsg295MYL2y9M=
Subject key identifier: 95:3F:D9:FF:CE:9A:C2:7B:C3:2E:5B:4E:B5:58:56:77:13:06:79:F3
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 019D2997262F0E7873029930C863B7BC135A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 0569
Signing time: Thu 26 Mar 2026 10:01:04 +0000
Manifest this update: Thu 26 Mar 2026 10:01:04 +0000
Manifest next update: Fri 27 Mar 2026 10:01:04 +0000
Files and hashes: 1: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: sogV03VyNhAJZu8tM9hyJQz4L5UMHaKK6w9pBCxtezE=)
2: ubtmDBZWL-_XbVApVZixkkSYAus.roa (hash: ur+VLKLd0ko7liueH3AQXPuJrl5bo0viE+tYtSib7Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:26:2f:0e:78:73:02:99:30:c8:63:b7:bc:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Mar 26 10:01:04 2026 GMT
Not After : Mar 27 10:01:04 2026 GMT
Subject: CN=953fd9ffce9ac27bc32e5b4eb5585677130679f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:6e:a4:7e:d4:32:5a:c0:dd:74:b0:bd:a2:
73:56:28:60:49:b4:5e:32:a9:51:3d:8d:2b:31:bc:
a8:8b:42:d8:5c:a2:7c:d3:de:19:d5:2b:ae:25:77:
1c:2f:3a:f1:63:6b:70:53:1a:1b:b2:0f:f9:18:8d:
5e:74:63:58:bd:40:da:24:a8:be:ae:b3:a6:4c:17:
10:e9:a4:e5:a2:eb:65:e9:8a:34:5b:26:83:9e:b2:
fc:41:db:27:4e:8e:c9:bd:ff:22:2c:7f:43:b7:a4:
bf:49:89:5a:36:a0:28:f1:9b:1a:79:94:5d:65:00:
d8:c4:c9:c1:3f:4e:87:fe:3b:24:6c:3a:03:c3:3f:
81:14:4f:7d:eb:1d:de:9d:e6:a5:1a:a1:4b:63:c4:
a0:6d:9c:47:30:e3:1c:6a:7d:5c:b0:7a:e9:0c:bd:
9e:33:e6:e1:15:03:34:be:78:e1:b6:81:c5:fd:ae:
d7:55:e6:7f:1b:56:f0:5c:62:6a:61:e7:85:b0:68:
7e:82:aa:e8:5a:3c:8a:b3:24:d9:f1:08:e1:2f:d4:
a6:eb:25:c6:dd:8a:57:ba:96:f5:43:07:bd:34:c2:
6f:c6:1b:b4:84:54:fc:fb:9b:5d:db:ed:ef:e7:3d:
bb:fd:a9:c4:4f:aa:47:7c:4e:26:aa:c9:88:d8:eb:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:D9:FF:CE:9A:C2:7B:C3:2E:5B:4E:B5:58:56:77:13:06:79:F3
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:14:3a:49:95:ae:60:88:4e:65:9e:e6:bb:7e:e0:23:57:
36:78:3d:57:58:78:88:58:e9:57:03:56:36:b8:9d:86:4f:c8:
67:56:ba:0a:ee:a5:e1:55:2e:be:89:3f:eb:0c:42:83:c5:96:
d5:d8:c3:1b:40:1c:09:d1:f2:60:3f:97:53:83:d7:f7:aa:5a:
6c:7b:bc:1e:e2:b9:4a:0b:65:fe:51:ed:0a:40:73:91:fe:68:
b3:9e:c6:fb:ac:3a:f5:74:2f:63:2a:ab:2b:3b:e9:98:5c:01:
35:91:6a:eb:8b:05:2c:ef:a1:1c:cf:ae:8d:3d:d6:52:ab:b1:
0d:7a:a8:9d:1e:9d:cc:87:d4:68:6f:41:23:86:bc:e2:2a:a9:
f5:c3:b1:01:f5:2f:35:fb:3c:78:9a:a9:b4:fc:48:3a:12:7a:
cd:76:a1:ea:7c:25:a6:7d:72:f5:e1:45:75:9c:83:b1:4c:75:
3a:ff:f6:b3:08:a3:d0:fb:4b:81:71:0e:fa:6e:fa:22:73:8d:
4c:c7:0d:fc:f8:e5:8a:3d:07:ad:c9:fd:81:92:7c:cf:74:72:
82:09:39:34:10:ab:3a:46:66:02:4b:a6:59:20:25:51:ee:86:
d7:86:07:76:ca:23:1c:f0:9b:0e:b3:4a:50:87:ad:13:67:91:
9f:3e:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:17 2026 by rpki-client