Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: I4xszBPV2Y20sQ+FZ/TydhqxXIuxjsRTA339DhmI7i8=
Subject key identifier: 73:35:84:0E:90:4B:F5:18:41:7B:B7:FF:2E:23:4F:83:93:A7:FF:5F
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019D2A723AA4DB183A7D3FBB92AEA17BE3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:22 +0000
Manifest this update: Thu 26 Mar 2026 14:00:22 +0000
Manifest next update: Fri 27 Mar 2026 14:00:22 +0000
Files and hashes: 1: FZXNAo_-RfWe2H9RHiCZ7xGUnYo.roa (hash: TDYzUGrD9meaYvgjEQfqWP3QZzAK3PuLuA6ZQryLHGU=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: g+wS2nFrJ5wA8r9TlMdju1xx/gbMd/ELWv2jApWk0Zs=)
3: qMQHyQ9qH1ECk7KL-kR203MB75k.roa (hash: vhQOUoORkCKEMjziW3Ye82TVpPsPBlso5nGmSCXjKmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:3a:a4:db:18:3a:7d:3f:bb:92:ae:a1:7b:e3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Mar 26 14:00:22 2026 GMT
Not After : Mar 27 14:00:22 2026 GMT
Subject: CN=7335840e904bf518417bb7ff2e234f8393a7ff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:2f:9d:76:74:4c:72:0f:b8:b8:db:b0:98:
da:b3:87:da:5a:66:ab:1c:33:d9:51:5c:02:6a:11:
32:70:be:3c:62:a0:c0:11:2a:4a:40:17:84:3c:62:
6d:ad:cc:c4:49:59:80:de:c7:66:63:ad:54:8a:43:
d9:aa:84:4f:67:16:42:fc:10:d2:e9:48:7b:75:58:
d6:75:a2:0c:e9:15:b0:a0:9b:3d:00:28:10:89:bb:
5b:b0:8c:f3:39:a2:8f:a1:68:67:35:8c:22:fe:ba:
7d:0d:f3:a5:4f:3a:2e:f9:d7:3f:44:fa:61:52:b2:
10:f8:8d:34:a9:fa:0a:1b:72:20:8e:1d:27:b8:d3:
2b:1d:de:4a:23:f6:e8:c5:35:35:6f:df:08:cd:2f:
7b:f1:a3:ba:c0:df:ae:4c:4f:de:94:c2:84:1f:23:
b3:aa:17:90:b5:d8:d5:c1:84:da:4d:b0:9e:ad:0d:
c7:e0:f9:0a:db:d6:cb:be:84:4d:e0:c8:50:9f:84:
de:71:1b:18:9f:04:67:9c:d4:62:c9:f4:77:e0:32:
b6:f2:a6:c1:b5:19:17:53:85:d0:6f:d4:9f:68:25:
28:7b:74:65:29:af:21:fc:b3:a2:10:2f:c1:3a:6e:
45:dc:81:9d:34:19:1e:cf:dd:1a:5c:41:52:1c:29:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:84:0E:90:4B:F5:18:41:7B:B7:FF:2E:23:4F:83:93:A7:FF:5F
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ab:ec:f3:8b:b8:63:ba:a4:da:3e:11:06:c4:8f:be:8f:7d:
b6:53:e9:30:7b:60:f3:94:17:30:cf:69:d3:3e:4b:56:6c:b2:
df:5b:94:1f:45:dd:1a:67:f0:3a:00:f7:5b:45:ce:41:2f:18:
76:ad:1a:c9:64:00:f9:a4:6b:4f:17:59:2f:0f:1e:89:9f:a9:
f4:67:34:40:cd:4b:c7:af:65:79:7e:fd:0c:ef:63:77:38:6b:
64:14:45:48:81:e5:48:49:d2:4e:c6:89:51:bd:e1:ac:87:f7:
de:19:40:8e:b7:6a:95:e7:cd:e8:9c:c8:7f:b3:65:a3:03:ad:
ea:6a:a7:d1:bc:1e:43:cb:80:30:90:62:79:12:68:42:4b:e5:
05:02:e3:66:4b:96:0a:7b:80:10:e7:b5:9f:e9:32:2f:f8:44:
33:92:67:ca:fe:d9:d7:e7:fc:dc:64:db:17:f7:7c:a1:e1:18:
26:13:dc:14:bc:cc:84:bb:3a:44:08:d0:de:f8:35:af:36:8d:
2d:7c:51:e1:ce:75:7b:ed:1b:c6:1d:be:01:08:09:8c:f7:aa:
b6:61:55:92:bf:f8:42:9b:32:37:63:b9:bd:5d:27:a1:b6:f4:
38:d1:a7:56:7c:72:92:1f:50:3d:68:f0:6f:5c:8e:a7:d5:df:
38:d3:9e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcjqk2xg6fT+7kq6he+PRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTcxYjFmNGVlYTAxNTkyNDYxMjVmYzVhZTlhZDUxYTQ0
NzkyY2UwHhcNMjYwMzI2MTQwMDIyWhcNMjYwMzI3MTQwMDIyWjAzMTEwLwYDVQQD
Eyg3MzM1ODQwZTkwNGJmNTE4NDE3YmI3ZmYyZTIzNGY4MzkzYTdmZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtugvnXZ0THIPuLjbsJjas4faWmar
HDPZUVwCahEycL48YqDAESpKQBeEPGJtrczESVmA3sdmY61UikPZqoRPZxZC/BDS
6Uh7dVjWdaIM6RWwoJs9ACgQibtbsIzzOaKPoWhnNYwi/rp9DfOlTzou+dc/RPph
UrIQ+I00qfoKG3Igjh0nuNMrHd5KI/boxTU1b98IzS978aO6wN+uTE/elMKEHyOz
qheQtdjVwYTaTbCerQ3H4PkK29bLvoRN4MhQn4TecRsYnwRnnNRiyfR34DK28qbB
tRkXU4XQb9SfaCUoe3RlKa8h/LOiEC/BOm5F3IGdNBkez90aXEFSHCkBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM1hA6QS/UYQXu3/y4jT4OTp/9fMB8GA1UdIwQY
MBaAFCznGx9O6gFZJGEl/FrprVGkR5LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt
MDJiMzM1ODJjNzQ3LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3
LzEvTE9jYkgwN3FBVmtrWVNYOFd1bXRVYVJIa3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKvs84u4
Y7qk2j4RBsSPvo99tlPpMHtg85QXMM9p0z5LVmyy31uUH0XdGmfwOgD3W0XOQS8Y
dq0ayWQA+aRrTxdZLw8eiZ+p9Gc0QM1Lx69leX79DO9jdzhrZBRFSIHlSEnSTsaJ
Ub3hrIf33hlAjrdqlefN6JzIf7NlowOt6mqn0bweQ8uAMJBieRJoQkvlBQLjZkuW
CnuAEOe1n+kyL/hEM5Jnyv7Z1+f83GTbF/d8oeEYJhPcFLzMhLs6RAjQ3vg1rzaN
LXxR4c51e+0bxh2+AQgJjPeqtmFVkr/4QpsyN2O5vV0nobb0ONGnVnxykh9QPWjw
b1yOp9XfONOeRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:02 2026 by rpki-client