Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: 6OVi+v2jareQE3S8MRhnh0N1xxlE0N5k42ipBHjOjq0=
Subject key identifier: 9C:9B:AF:A5:00:1E:1A:3E:07:67:17:D4:A3:9B:03:C2:10:9F:4B:D1
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019D2696073F482B11C5D4C2E3060D70F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0537
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: ulVVjWZg/X8NH0N34Kqf9KfX2MuioczoDfNU87T11sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:07:3f:48:2b:11:c5:d4:c2:e3:06:0d:70:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=9c9bafa5001e1a3e076717d4a39b03c2109f4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:92:90:df:a0:9c:ab:ea:99:f2:c2:a7:21:
b3:36:f6:36:ed:8e:ea:28:cd:fb:14:82:c2:22:95:
86:23:12:58:f1:3d:42:31:09:9c:53:6e:fd:a1:5c:
5a:18:32:c2:8a:c5:fd:73:78:8e:10:5f:c0:c6:7b:
67:d5:48:7d:1f:5e:cc:1f:98:e7:0e:30:c2:eb:b9:
00:f5:56:65:0d:3b:55:f8:eb:a3:9d:5d:67:ed:da:
77:c9:bd:42:10:ac:fb:80:85:fc:4d:87:f2:4c:5f:
ca:ea:36:33:79:de:9d:c5:76:2f:35:af:d7:e1:03:
9a:50:64:6c:e0:50:96:69:b5:57:fc:f7:8c:b2:1d:
f1:67:a9:15:f2:36:c8:35:64:02:cf:dd:97:bd:d5:
df:b1:9d:a7:a3:ef:ca:31:c8:dd:ec:e8:27:8b:3a:
02:cc:ac:49:84:8d:96:9c:13:b5:5a:69:33:c2:d2:
5a:e7:5d:67:17:c9:54:25:5c:f9:64:6a:a2:44:1c:
03:c2:8a:50:b3:28:05:ac:45:87:00:cb:3d:a7:20:
cf:e6:e0:9c:5c:65:16:b1:92:58:22:f7:3b:f6:35:
45:65:85:d5:fa:d2:12:ff:12:ba:b0:b6:03:ae:7b:
f3:01:35:fc:3a:c8:c0:79:2c:a5:61:87:dd:cf:6a:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:AF:A5:00:1E:1A:3E:07:67:17:D4:A3:9B:03:C2:10:9F:4B:D1
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e7:ac:b6:e8:fc:8e:9e:b5:66:18:74:eb:b7:10:12:8d:9d:
00:4e:00:c4:85:72:18:76:c6:8c:89:31:d7:97:2b:5c:4b:6c:
8d:05:09:37:f2:75:2f:fd:bd:19:9f:3e:15:08:84:c1:05:d1:
4c:63:6a:dd:8f:c9:19:23:aa:18:25:cd:ce:9f:78:cd:20:17:
19:c9:6d:f9:39:ad:cf:1b:d7:20:fa:a5:37:cb:3d:2b:8f:a9:
b4:db:b9:90:f2:79:42:71:8d:81:ad:eb:99:ac:bc:93:b0:a8:
c5:5e:37:66:16:3a:8c:d1:25:15:bb:5c:fa:e5:d6:fc:3f:cb:
1d:a2:af:c2:60:46:b0:39:17:99:da:6b:02:53:b2:2d:cf:84:
da:1e:96:0b:39:a5:e1:1f:df:ef:6e:52:f9:b1:ef:2d:37:0d:
b1:48:8e:d0:7a:42:80:d9:91:d6:73:a1:b6:a1:61:05:58:56:
52:49:08:fe:fa:31:4c:6e:2b:14:4b:04:42:54:23:82:fb:70:
61:a3:38:4c:4c:9c:69:9e:55:d4:b1:17:84:af:b2:80:d9:40:
78:12:6a:6d:8d:dc:23:94:2f:a5:41:51:cc:fb:a4:b7:56:d2:
5a:86:ff:17:c2:56:3c:8a:4c:db:0a:23:72:e8:f8:7f:41:e7:
d5:a3:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:48 2026 by rpki-client