Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: YWUjQb2xQlKRqsUxT9t+UEBWvgJycRzX4NSjdDCzdE4=
Subject key identifier: 33:5C:FA:AA:72:DE:2B:93:14:DA:22:FC:29:96:6F:F1:3A:4D:87:E5
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019D265FA13B3D31EC9BA75B6408C8F1139A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: /AH+isE5BivpK65n1r01zJwiqmwcf74BzwACd5yOLdo=)
2: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (hash: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a1:3b:3d:31:ec:9b:a7:5b:64:08:c8:f1:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=335cfaaa72de2b9314da22fc29966ff13a4d87e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:a9:c9:74:7e:08:64:da:24:73:c9:86:c5:
04:a4:90:91:28:00:6e:75:57:25:da:05:5f:a8:5c:
04:e5:62:2d:b7:b8:3f:ba:ef:c0:89:17:99:de:c5:
2e:1e:18:85:53:b1:1d:3d:53:a9:00:5c:67:86:c1:
be:60:61:7f:af:c7:8c:e6:23:05:6d:4e:cb:cf:f0:
a6:63:88:50:8b:96:d7:e9:15:b5:c3:c9:ea:97:53:
09:2f:8a:e8:60:db:45:fd:60:2b:8f:b2:07:99:c0:
59:9c:18:66:fb:a4:8e:04:a5:b8:d2:b5:c4:a7:21:
b4:80:85:a2:31:24:13:94:d0:0e:e9:8c:63:73:de:
07:9b:b4:dd:1e:f7:9a:e2:46:89:d3:69:59:aa:6c:
a8:1c:1d:02:2a:cd:68:6b:5f:55:29:62:ee:00:57:
aa:bf:3b:2e:40:01:db:fd:4c:81:30:38:e6:b2:e7:
c6:0f:a3:58:f0:54:ee:e4:88:12:32:95:81:a4:ac:
90:92:37:e3:89:e0:35:85:e3:19:43:cc:29:77:fa:
fb:ca:37:ea:df:3b:5d:e2:22:de:37:5d:37:ef:cf:
26:a1:b7:a7:ba:57:91:df:8c:9f:e6:3d:92:41:62:
bc:e2:56:c0:d6:e6:8e:e5:f0:20:71:51:fc:23:bd:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:FA:AA:72:DE:2B:93:14:DA:22:FC:29:96:6F:F1:3A:4D:87:E5
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a4:89:ab:5e:a9:e2:b4:d1:c2:43:56:66:7c:8f:0a:1f:1f:
6d:5e:b6:79:b1:79:31:9e:68:9c:ef:ef:48:f2:c0:80:7f:17:
a5:20:3f:66:cd:88:59:f9:b2:fc:b5:7f:9b:82:56:d2:64:79:
d6:40:32:c8:0f:79:62:6d:f7:66:d1:98:26:4d:0d:6b:b6:9d:
d4:48:37:b9:28:9a:0b:63:9c:89:1e:70:bc:85:2b:c4:7c:9e:
42:15:80:fc:d7:40:db:b3:06:08:42:96:31:6a:99:f5:f9:d6:
f7:d5:3b:07:3c:78:76:06:65:a7:41:8d:b5:29:9b:b0:1a:ae:
f2:dc:72:6b:91:34:91:6d:b6:77:6f:59:2d:b7:15:b8:a7:70:
6c:bc:35:28:b3:bb:06:35:4d:d8:14:fe:93:78:23:f6:b1:b7:
25:63:52:21:72:6c:49:c1:f9:ae:44:7b:83:56:af:6e:57:45:
0b:2f:94:33:22:7c:52:91:6f:89:af:4a:2a:25:6a:13:3c:88:
7e:b7:e5:54:04:c7:34:04:10:74:b5:88:68:35:4a:07:6d:08:
e5:5e:de:77:e9:14:a8:6c:e3:36:a2:6a:c5:66:ce:af:56:ad:
12:6f:a6:0a:57:88:12:a3:20:a1:d8:c8:e3:79:a7:7d:26:4e:
81:76:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:52 2026 by rpki-client