Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: bWV5mcqQtf2+I8r+SkwOZ09KUMPSf0HcOSZ0060N5d4=
Subject key identifier: 05:8E:7C:19:81:5A:13:7C:B8:3B:E4:FB:F5:B5:A3:80:60:92:76:BD
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 019D265FAE2A42B06B94701621C3381DDADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 059C
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: VGOvIcifz9f7v/9fySiufSTSYovXIXByPYhFa8wo1So=)
2: mP9cK1RwU1pjVezxiqGqeS_0jfQ.roa (hash: +NdnMWckAu9KkO1maMu0xEAp7z5Y14BHcgqlI8aDarY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ae:2a:42:b0:6b:94:70:16:21:c3:38:1d:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=058e7c19815a137cb83be4fbf5b5a380609276bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:bb:65:77:e7:50:a1:6d:77:3a:d0:15:7d:
ad:a2:62:e5:a6:57:a3:e4:53:db:1b:06:db:8b:5e:
c3:f5:b1:d2:96:c0:d9:a2:62:a7:8f:b5:f7:bd:1e:
c0:a3:3f:0d:a2:42:c8:0a:f7:fa:5f:cd:53:d9:66:
d4:fa:b8:8f:42:ee:45:d9:8b:b5:17:95:40:4f:9f:
32:c4:23:e9:db:ba:8f:96:49:e8:9f:96:cc:b1:8d:
ae:ec:6f:03:cc:6f:46:07:76:ac:ca:42:ea:bf:d9:
93:47:8c:e9:18:d3:be:8b:a9:b6:a1:b5:06:84:6e:
90:75:10:22:12:aa:2d:fc:24:90:56:3d:c4:54:18:
9e:73:4a:11:e1:77:69:2c:0f:55:4b:44:ed:9d:f7:
78:d5:b8:50:b2:1c:5c:4d:72:ec:c1:f0:8a:0d:f1:
1e:44:e7:be:1b:47:2f:bd:38:77:6f:a9:4a:20:e9:
75:11:42:62:44:2c:c2:70:8e:eb:99:b4:96:f5:60:
56:20:af:e0:c6:01:1d:95:3a:a0:4d:76:f5:89:2d:
b7:21:94:62:d5:e4:97:c5:d0:2e:5a:1f:cc:c0:a0:
53:8e:c7:33:5d:44:68:fc:1f:26:de:93:83:d5:58:
16:bd:42:09:02:67:fc:27:5d:c9:11:f3:18:cd:d3:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8E:7C:19:81:5A:13:7C:B8:3B:E4:FB:F5:B5:A3:80:60:92:76:BD
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:b3:d7:40:07:bc:e4:71:3f:73:61:38:1d:0e:ab:e2:04:
f1:d6:f4:44:9a:05:25:ca:63:30:0c:7e:ac:df:22:9d:8f:70:
7b:0c:b8:f2:81:22:61:af:37:ee:d2:44:a4:8e:ea:9f:a2:ad:
40:b3:7e:8b:3e:1e:8b:7a:23:d1:6a:d8:8b:a3:a5:33:23:82:
ae:87:28:43:72:b9:ee:f3:33:26:e2:82:18:67:af:43:f5:0c:
0d:5b:27:59:a8:9b:5a:04:74:4d:fe:97:87:a5:4a:e7:94:aa:
88:fb:e7:50:20:00:17:b5:e0:4d:62:79:2f:11:15:ed:e3:a0:
89:cb:69:e1:aa:94:a7:bf:41:3a:74:18:9c:c5:55:d5:b8:69:
28:e6:88:ff:70:64:e7:48:db:d1:af:76:3c:40:fb:f1:a0:b0:
4d:35:3c:6f:1f:2c:c7:e3:35:8b:7e:22:ee:27:fe:c4:cf:a7:
7f:79:79:86:2b:68:85:a2:82:81:0b:f9:37:9b:77:91:d0:e7:
a5:f1:9c:e5:bb:37:8e:76:17:0d:00:80:fc:b5:d2:1e:9b:9d:
d7:61:90:ce:be:a8:d3:b7:84:5e:78:fe:ec:6c:92:f1:f7:e8:
13:da:a0:29:e0:1e:1b:71:c1:bb:ce:88:ce:82:44:bb:2c:6d:
25:cb:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:32 2026 by rpki-client