Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: km8LfeBvkGfzBGGIHPmxVw51qF1M2asXkMgKLFHxsfs=
Subject key identifier: 64:68:32:6C:F6:EC:A3:83:7F:7B:AF:92:4F:38:60:5F:A0:F5:B8:DE
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 019D273AD7ECC386EAC637B2DAC2B2DD2A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 1231
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: It7uM3Rh24ZsaT0gP_5DTgns11A.roa (hash: ygKGw/KKIh+Ljlm07a0ZbILTTd125kn6NartFxH8sag=)
2: K4tPBn3mDHxWQQ0mC5UfSt8RbNI.roa (hash: EPXhFOqzbmGAC3xjCqN6fTup4RvNIb3pcFL4UJPyUsU=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: 8GEueXNusQ42yX/vjhYAX9SHzA4D2FFj2IuB2XKenOE=)
4: k_oJvHDBdkcghP_1JMBPzqmqbTk.roa (hash: TNK8uQBOEOR3wyZ9LMW27yN2zoLPzBis8BAPSJ0G5tg=)
5: rFArsoFoYLfY2C4kISkWl1SGheo.roa (hash: eYlc685oKXF5uazF6hY6BaH41ateFLDviGpvTWxuxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d7:ec:c3:86:ea:c6:37:b2:da:c2:b2:dd:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=6468326cf6eca3837f7baf924f38605fa0f5b8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:0e:a2:c4:e2:91:f7:99:64:dd:d6:4e:aa:
dc:2e:af:3f:9f:4d:a5:68:dc:ad:7a:4a:15:02:09:
52:78:db:2e:ec:fe:3d:ef:a8:49:33:c5:aa:41:12:
09:64:dd:0b:58:00:d7:1d:ed:c7:93:dc:99:71:41:
37:01:fe:f0:0d:2a:0a:36:e6:ea:92:b3:25:59:ac:
61:f3:42:d1:4a:1f:64:8d:d2:ca:1f:0d:2a:f1:db:
a2:45:e9:72:13:88:9f:ea:48:57:17:fc:e6:52:7a:
e9:fb:e9:8e:93:5d:d5:4e:c5:79:ed:9f:06:44:d4:
de:56:99:5e:df:0e:b5:31:9a:82:0b:d6:ce:b8:5f:
5b:26:a6:49:d7:89:be:69:26:d1:d8:ca:b6:6b:11:
6c:52:43:34:ea:fa:db:8a:c2:16:cb:a3:b6:33:c5:
87:eb:d7:de:70:0b:2b:2a:c8:c7:fa:68:82:9c:71:
1b:4c:df:0c:e3:af:0d:94:2f:93:41:bf:fc:bd:eb:
43:a2:33:f5:0b:03:64:bf:68:99:b3:01:88:3e:2b:
f1:28:de:47:61:57:53:96:96:8d:16:08:21:a4:9a:
99:4d:f3:90:88:ea:6b:ea:0d:83:69:4e:e4:23:7c:
5e:ae:4c:73:99:1a:60:0b:b0:a2:e2:be:ce:d8:89:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:32:6C:F6:EC:A3:83:7F:7B:AF:92:4F:38:60:5F:A0:F5:B8:DE
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:81:35:88:f4:d5:b1:6a:2d:d5:cd:9e:2d:21:b9:99:b8:
4f:1b:63:a2:47:74:2c:74:b3:b0:b0:af:77:3c:77:0e:2e:75:
46:ed:ad:fa:c0:17:2c:a8:40:63:48:bc:7c:37:ad:3d:11:36:
19:b3:eb:48:ec:2a:7e:10:7a:31:6f:16:7a:48:ac:7c:52:2a:
c6:ea:29:21:6e:b7:f6:b4:02:b3:75:02:25:6b:f6:c9:4a:e3:
32:4d:24:7f:26:ff:dd:43:47:42:df:d9:c7:e0:dd:06:9a:c6:
48:c0:3b:79:cf:ff:b1:e4:f7:e0:97:8e:ee:fb:a5:5b:3c:a7:
9b:84:67:fd:ad:0c:86:ff:e4:4d:b4:77:fd:8d:cd:23:f5:15:
0e:e6:98:13:75:68:50:d7:b3:a8:60:22:a5:d9:d7:59:7d:ba:
5e:fb:02:55:98:2d:69:16:7a:c4:48:68:54:4e:e0:ea:7a:63:
56:1d:c5:a9:17:21:fd:47:c3:08:64:25:9f:99:ca:2b:a8:c1:
55:ce:b8:c1:be:4e:02:09:8b:5f:e7:9b:90:6f:6d:c7:02:3d:
23:dd:99:07:89:82:14:0a:3d:03:3f:34:54:6e:4d:fd:15:cc:
ed:46:6c:5c:dd:fe:3f:e5:a2:a4:67:cd:e6:60:99:13:b4:dc:
a1:da:97:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtfsw4bqxjey2sKy3So9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx
ZDhhYWUwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
Eyg2NDY4MzI2Y2Y2ZWNhMzgzN2Y3YmFmOTI0ZjM4NjA1ZmEwZjViOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1UOosTikfeZZN3WTqrcLq8/n02l
aNytekoVAglSeNsu7P4976hJM8WqQRIJZN0LWADXHe3Hk9yZcUE3Af7wDSoKNubq
krMlWaxh80LRSh9kjdLKHw0q8duiRelyE4if6khXF/zmUnrp++mOk13VTsV57Z8G
RNTeVple3w61MZqCC9bOuF9bJqZJ14m+aSbR2Mq2axFsUkM06vrbisIWy6O2M8WH
69fecAsrKsjH+miCnHEbTN8M468NlC+TQb/8vetDojP1CwNkv2iZswGIPivxKN5H
YVdTlpaNFgghpJqZTfOQiOpr6g2DaU7kI3xerkxzmRpgC7Ci4r7O2IlWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRoMmz27KODf3uvkk84YF+g9bjeMB8GA1UdIwQY
MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt
YTg2YTI0NjU1ODcwLzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw
LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYOBNYj0
1bFqLdXNni0huZm4Txtjokd0LHSzsLCvdzx3Di51Ru2t+sAXLKhAY0i8fDetPRE2
GbPrSOwqfhB6MW8WekisfFIqxuopIW639rQCs3UCJWv2yUrjMk0kfyb/3UNHQt/Z
x+DdBprGSMA7ec//seT34JeO7vulWzynm4Rn/a0Mhv/kTbR3/Y3NI/UVDuaYE3Vo
UNezqGAipdnXWX26XvsCVZgtaRZ6xEhoVE7g6npjVh3FqRch/UfDCGQln5nKK6jB
Vc64wb5OAgmLX+ebkG9txwI9I92ZB4mCFAo9Az80VG5N/RXM7UZsXN3+P+WipGfN
5mCZE7TcodqXVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:56 2026 by rpki-client