Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: dCFR7Ygx4VIbKGxEcL2KzkuVU/3wINc349nsPeZrLIU=
Subject key identifier: 0E:88:2C:C4:2C:22:64:BF:4F:FF:BE:E7:80:49:6D:E3:BA:6E:0D:10
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019D27DFBF8D41895EC8ECA9C60C9C73A476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0F66
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: a5gV2iTHliPR8LhFYU-KK7QJJvE.roa (hash: Wf9B8UaHcibkRfA0zFpN6M9JgI+cnQ8hTvGPe2+Coc4=)
2: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: zASOozcjUxw40I8+noL/hiUKJZ2kAX9Y3WVzU2cTzDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bf:8d:41:89:5e:c8:ec:a9:c6:0c:9c:73:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=0e882cc42c2264bf4fffbee780496de3ba6e0d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:6c:c5:df:4c:ba:e9:e3:77:b7:d8:54:90:
fa:6b:f0:c9:af:19:4f:e1:b5:ba:0f:53:8c:ab:3f:
86:3d:08:fd:fe:7f:4e:8b:2f:06:c4:24:32:55:e6:
3e:49:52:fe:03:dd:a3:dd:22:a1:54:f6:91:98:ee:
ad:fe:85:ca:e6:fa:40:3e:e6:4c:b3:bb:d8:06:35:
4e:5e:00:6b:52:bb:c3:f2:fb:a2:b1:ec:2a:4b:7f:
1e:68:39:bd:0b:67:9c:64:f5:0b:4c:e7:c3:52:21:
93:69:55:32:da:fa:a8:53:8b:81:f2:2b:d1:3b:e4:
a0:12:e9:31:51:f2:e0:4c:8c:79:3a:c7:f6:ce:ac:
f5:ab:3d:9c:d7:ad:a1:01:1f:a3:06:37:7c:f0:aa:
56:80:5e:89:5d:1c:d3:1c:06:a5:ad:b1:64:9a:38:
25:e3:09:d7:83:d2:26:f6:1d:a2:6c:b5:44:80:78:
1f:9b:09:fc:9e:0b:1e:c1:dd:d9:8d:eb:39:76:bf:
6e:b8:b7:9b:84:ad:eb:bf:35:6c:a8:f9:6f:bc:ed:
af:da:6e:ef:87:48:2f:fb:de:fe:3a:01:27:f3:64:
c1:37:67:95:dd:98:9e:9e:9e:de:00:6c:86:8a:5c:
4b:15:b2:9f:45:8b:85:25:f6:2e:cc:39:03:12:3d:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:2C:C4:2C:22:64:BF:4F:FF:BE:E7:80:49:6D:E3:BA:6E:0D:10
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:be:00:00:6b:0e:6e:39:6b:5f:91:98:42:3e:c7:54:4f:
72:95:de:40:66:84:e0:ec:27:61:74:eb:e8:03:48:14:f2:89:
34:6a:d6:3a:1b:90:7d:0d:40:f0:67:10:b4:8f:ec:05:57:c3:
25:86:a4:a9:f6:2f:74:d3:71:77:fc:75:6b:0b:7b:9d:a7:54:
48:ca:4f:c8:c4:a3:c8:45:6b:03:d6:98:20:e6:b7:36:e9:1c:
b4:28:00:71:19:9c:b0:12:c9:df:4f:fe:75:7b:07:a3:99:a2:
8d:4a:31:59:56:a7:65:de:cd:1f:6e:d4:24:c2:ac:73:d6:d4:
39:28:27:00:8d:b9:74:98:ae:e5:5d:57:dd:d2:eb:11:33:60:
66:47:da:ca:45:d7:57:2a:c7:7b:c9:fb:6d:aa:1f:a9:57:5b:
dd:4a:06:8c:34:e8:25:f8:ef:67:66:d9:fd:b4:35:e9:20:63:
69:69:8d:55:46:51:6f:8a:1e:c2:8a:80:5f:d0:3f:87:bb:02:
86:a2:4d:66:47:e6:71:dc:79:0e:9a:63:fe:08:f8:66:7d:14:
4e:54:e2:99:8c:43:fb:fd:54:66:66:89:cd:53:82:0e:85:b0:
58:ef:10:55:c5:fc:cf:a1:74:00:a7:43:a2:5f:3c:4c:4f:11:
62:be:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:55 2026 by rpki-client