Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: uyMzFaVb1HjeOP819hafM6pzc5b092TSs4tCcU1yATE=
Subject key identifier: 03:F5:8F:FA:9D:C9:C0:67:12:BD:F6:81:56:7B:49:C5:3A:6C:9B:78
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019D265F6E6272BF4187FD9C01E9AAC6B0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 077D
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: yvS+4+oCZ/kshGPOzp3HIlopAZCIzD5mKEHnIeCUOw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6e:62:72:bf:41:87:fd:9c:01:e9:aa:c6:b0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=03f58ffa9dc9c06712bdf681567b49c53a6c9b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:ff:bc:ef:36:99:9f:b1:06:22:ef:a5:17:
fb:74:2a:2e:5a:5e:74:b5:20:ee:24:39:e4:67:cb:
33:6d:ae:c2:8c:e2:8c:02:ef:c9:51:f6:13:ad:7b:
49:5d:c2:c2:cd:f4:a5:2e:b0:9f:13:55:92:34:36:
54:6b:8e:3c:38:3d:fd:58:e7:20:2f:c9:c6:51:8f:
40:1f:71:36:d3:1c:5e:f0:f5:8f:33:c3:fa:16:36:
93:3a:7f:b5:8e:7d:a2:da:b1:b6:53:6e:a5:1b:04:
9c:0d:24:38:f4:e9:96:73:b6:f5:20:17:bc:38:c0:
58:57:ac:c9:29:19:de:86:ee:5a:0a:d4:6c:36:78:
89:b1:f4:4d:ea:6e:08:82:f8:c3:4a:ff:1c:d9:5a:
50:14:dd:4a:53:1d:71:75:be:66:cc:5a:d5:f4:1a:
a7:e8:be:7c:38:67:ff:09:38:99:f1:f8:06:74:94:
5e:5c:a7:94:90:53:b5:42:73:42:32:eb:1b:e9:8e:
ad:db:3d:67:44:0b:f3:46:01:96:08:70:63:21:9b:
b0:d9:fa:77:f0:5a:fd:e2:47:9c:4a:a7:c6:a2:57:
90:e3:d1:b2:ae:9e:39:8b:af:29:95:ee:ea:6c:95:
a7:55:6c:d0:4f:49:aa:ab:eb:4f:3d:ce:c4:b4:c1:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F5:8F:FA:9D:C9:C0:67:12:BD:F6:81:56:7B:49:C5:3A:6C:9B:78
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f9:ef:36:88:9f:18:76:b6:bc:f4:80:26:10:28:b0:8c:c3:
04:55:86:4a:74:90:f7:c9:27:6e:f0:1d:df:ba:82:35:eb:74:
23:22:95:3c:36:62:cf:e1:4c:c5:c3:4e:b1:43:c6:11:5f:f5:
c5:07:c9:91:e2:b3:dc:43:31:55:78:36:64:88:b6:8b:6e:14:
4f:9b:f0:89:98:af:dc:0e:0f:95:ab:58:4f:00:3b:d0:61:66:
1c:79:92:84:44:7a:d2:49:71:7b:7c:44:71:34:93:70:c9:f6:
5a:c6:08:7d:76:77:e6:f2:53:81:1f:64:01:2d:94:68:a2:01:
41:8a:57:e1:1a:ce:1b:fb:be:a1:ad:3b:eb:9f:74:e9:c6:cb:
59:14:0d:df:74:87:38:d6:09:05:58:2d:51:41:1a:41:d6:20:
24:79:fe:db:bc:c9:0c:1d:a4:5b:10:04:4a:b9:c8:be:d2:93:
d4:3f:b3:6c:f1:fc:df:70:78:09:94:9b:fb:59:64:f8:64:0c:
eb:8b:f4:97:83:75:e9:79:c2:c5:d1:a6:87:6e:dd:f5:15:dc:
0c:7f:27:b2:e2:0b:63:2e:93:26:d8:cc:f1:05:22:4e:01:29:
3e:f8:d8:c9:f8:8c:c3:de:3b:e0:b6:45:bd:b0:00:7f:d8:88:
d1:39:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:52 2026 by rpki-client