Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: ylB5dmgejhJl7tpBNRcJmHskBuHikFKaqhtviecEVkE=
Subject key identifier: 53:FD:09:73:A7:1D:B0:9A:E0:61:7C:B9:A6:39:08:BD:52:6E:F9:E5
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019D28F30E6603F3ABA25E0F62BC8488FA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0326
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: h4NNO8u0q7Zsr0wN8W+ThjrtMFAsbhQ3/6v0YW65ixg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0e:66:03:f3:ab:a2:5e:0f:62:bc:84:88:fa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=53fd0973a71db09ae0617cb9a63908bd526ef9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:11:7a:09:09:f9:e4:3d:44:c4:5d:e0:07:
d8:26:71:42:c1:56:39:b1:7e:66:a2:40:f2:6e:d0:
7b:00:b1:1b:0c:c8:a2:b5:f9:a4:22:6b:48:ea:b0:
4f:08:d0:6c:ce:7a:ce:69:0b:49:a6:7c:56:ed:ab:
fa:fd:87:c8:99:82:c8:cb:96:5d:9b:07:1e:57:d9:
a1:e8:4a:90:2c:78:69:71:a4:24:97:0f:6f:99:a4:
89:07:31:83:b7:f1:06:b3:f2:69:17:be:fa:23:23:
47:56:0d:27:b7:73:13:47:7f:36:37:eb:7d:1a:4d:
ba:96:9f:e5:2b:8b:52:58:07:37:b7:7e:75:c3:eb:
65:87:a0:6c:a7:8f:6e:03:94:6e:03:f1:06:9b:bd:
80:9d:9e:45:18:6e:52:61:42:8a:d2:03:c2:6c:cb:
5d:05:23:08:6c:99:f2:fc:4e:43:47:ff:2d:58:f6:
2b:b5:6d:e7:97:34:43:9a:17:4a:8a:ee:5e:51:94:
fa:e9:15:70:d6:a4:29:22:95:65:4d:5c:ab:b3:4b:
96:c0:e7:9a:4d:7a:9f:cf:31:9a:d8:45:96:09:90:
e2:4e:29:e0:55:65:97:22:54:4b:c9:48:55:ff:cd:
20:8b:b3:63:df:a8:c8:98:44:ea:ef:f1:36:6e:cb:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:09:73:A7:1D:B0:9A:E0:61:7C:B9:A6:39:08:BD:52:6E:F9:E5
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d0:df:78:e0:1f:f2:d4:04:6f:32:22:27:71:d5:ab:20:a9:
db:fd:d8:30:97:ad:57:79:6f:08:51:b1:93:84:c5:61:aa:92:
af:ff:d8:54:6b:67:46:7d:97:9d:80:37:d1:c4:d2:81:ee:69:
8d:d7:92:f2:7a:e9:74:e0:86:9d:00:9c:21:1f:31:eb:13:98:
4a:ca:0c:f0:94:ac:e1:87:c7:a9:6b:80:f8:cf:be:7e:47:82:
9d:c8:b4:dc:d5:8c:3b:01:e2:57:dc:a8:af:dc:fb:d8:4d:40:
7f:73:d9:4b:82:72:8f:7c:b7:69:39:60:e1:f6:a4:4a:00:26:
b0:32:e6:ce:91:0f:5d:e4:91:53:c4:9a:d5:ae:ba:64:ee:21:
00:9a:85:e6:da:d9:01:f4:a4:01:ce:57:0b:19:5a:00:23:af:
b7:b0:92:9a:d6:e4:10:ec:59:98:a2:8e:6f:6c:03:21:17:62:
1c:86:7a:1b:4d:05:f2:60:e2:8b:ed:1e:2f:00:b8:4c:c5:f5:
85:ef:c3:5d:85:5b:1e:a8:90:66:ee:73:23:04:cb:42:f3:ac:
ad:a0:64:f1:20:21:7a:99:38:ff:d9:8b:e7:c8:26:df:55:5f:
83:b5:3f:c7:37:0a:90:fc:c2:8a:1f:25:66:fd:52:3b:50:5d:
e9:48:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:05 2026 by rpki-client