Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: E2dSHV57/s0agmb+yGzNQvJaI7v+G5Psd0MUtadxZsk=
Subject key identifier: AD:C6:C2:D9:26:E9:5C:7E:BF:BB:90:88:5A:1D:3E:77:96:BE:59:DD
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019D258365FF38C5C307156639BAB27892C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: 1neQ07OLsJycgVvd9rcjz0XRRqzuoZ98Pptr/JYV1ws=)
3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:65:ff:38:c5:c3:07:15:66:39:ba:b2:78:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=adc6c2d926e95c7ebfbb90885a1d3e7796be59dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:b1:b1:3a:c2:9e:30:13:4f:b4:05:fe:2b:
1a:d4:07:b7:b0:dc:cd:f5:d0:da:71:30:4f:24:72:
47:8b:11:5b:7d:41:78:0c:ff:ff:39:6e:f2:bf:08:
81:de:c7:b3:56:7e:3a:1b:a1:51:67:37:b3:b9:c2:
69:09:4c:0a:29:7e:e6:71:9d:c3:40:5b:9a:bf:52:
b3:26:eb:23:4f:9a:41:ed:cb:3a:79:dc:6c:e6:c5:
84:fd:2c:62:5c:99:53:c3:68:51:a7:0c:ca:a8:1f:
40:e7:c4:c0:ec:7b:78:a1:a2:dc:ee:0c:ad:b6:bb:
7b:55:c7:8e:d8:1c:04:7c:d8:cb:5e:90:1e:8b:da:
29:a3:8a:0d:1f:ba:3c:15:c1:ef:8c:c4:40:18:00:
1e:50:cd:5e:85:07:2d:ed:b4:df:07:03:6b:e2:fe:
8c:40:cb:7f:b3:0b:a8:b4:26:e4:c3:29:a7:00:d4:
36:57:dc:93:35:13:b0:54:6a:91:67:ea:88:e8:71:
11:56:a5:cc:d9:fd:01:05:69:10:c2:ba:77:1a:31:
6d:91:14:a2:4c:3d:f8:40:03:36:4c:8e:ff:61:0b:
14:dd:b0:b6:ad:b0:d6:64:d8:34:e6:28:c7:d8:cd:
00:6f:a9:f8:8f:5f:f5:75:a4:f6:24:e1:13:47:62:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:C2:D9:26:E9:5C:7E:BF:BB:90:88:5A:1D:3E:77:96:BE:59:DD
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c1:7e:34:25:95:c1:8b:67:db:50:69:9e:6f:8c:3d:13:5d:
64:9d:46:18:82:1d:da:3b:a2:c0:f9:17:78:14:3b:81:89:46:
e0:ab:24:b7:57:cc:64:b3:e9:e2:c7:6b:a6:c2:a2:cb:df:58:
f8:74:ff:03:57:9e:ba:a4:00:36:0c:ba:be:5d:66:49:dd:34:
c6:83:31:bb:84:3d:ec:c5:7a:95:e4:1d:74:c4:fc:15:a1:e0:
12:8e:ca:3f:28:c2:88:7b:47:44:84:df:33:df:fa:0e:cf:99:
32:20:d3:96:8a:5c:1b:43:48:85:d8:dc:59:ef:04:e3:2a:e8:
55:22:f5:fd:66:a9:db:72:79:1d:e1:fd:9b:dc:c7:71:5b:28:
17:36:4c:3c:6b:d9:70:65:19:4e:b9:d3:b9:11:6e:de:ca:c7:
37:79:be:36:1a:e8:4e:8f:db:7b:36:64:67:da:f4:bf:6c:f7:
62:06:9a:98:80:e4:a9:df:32:a0:15:d2:ce:e2:25:d0:ce:91:
29:99:d0:86:b0:13:fa:dc:c2:bc:74:3d:5e:87:aa:88:20:da:
19:25:40:58:4f:4e:d7:f8:e6:8e:6c:57:c0:4d:e2:7d:ae:10:
f1:fa:a9:91:49:81:84:b8:70:9f:55:53:2a:f5:79:a9:58:b1:
3a:43:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:26:05 2026 by rpki-client