Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: eclQhGJuAcEZJ9z10G+o6E9VErZgtbQADAQqblKH1XA=
Subject key identifier: F0:E9:92:88:FC:A6:82:B3:CD:B3:0B:7B:B4:E3:7E:6C:14:EF:22:84
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 019CABD8E598919E127516A920383A44214A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: 5kd2jgAIKcfM1F/ygqEPFOl13jtjfFBSSeKKdYrDlok=)
2: cO4n71Ca1KW9YOy3Lk5tseYgVLs.roa (hash: mIrTwfJ5XFJdShmQyd6p7zVMdef2lZJKuLHzMy3HxFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e5:98:91:9e:12:75:16:a9:20:38:3a:44:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=f0e99288fca682b3cdb30b7bb4e37e6c14ef2284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:e8:7a:c7:99:51:f1:0a:32:4c:4a:fe:61:
87:fb:e6:d4:4e:d6:12:82:08:25:09:32:a7:d4:f7:
9e:e2:42:1c:90:6e:7d:b1:f8:12:73:bb:a4:7a:bf:
17:8d:25:9d:a5:1f:a6:0c:76:23:06:3e:2a:19:9c:
df:02:22:19:a8:63:fe:a1:7f:3f:12:d5:ce:83:9c:
40:80:6f:0d:56:c3:04:9a:81:23:24:1c:b7:db:e3:
e0:c4:95:ef:f7:b5:f1:46:64:e4:03:a0:59:a4:6a:
3a:33:f1:34:61:6b:89:74:d0:d2:63:96:61:4e:f2:
16:82:23:3f:35:60:8a:83:3e:5b:29:43:e3:8b:3e:
29:8f:ac:55:ce:47:b1:83:a5:16:7c:86:d5:b7:a4:
f3:56:da:a3:b4:e9:6f:f0:6b:70:44:87:97:64:a6:
14:f1:1a:f7:6c:49:03:cf:01:18:fb:8d:b1:94:6b:
e3:95:18:a1:34:cc:25:14:fc:eb:6d:30:9c:11:bf:
2f:f8:b2:e5:fd:76:fd:0c:d2:cd:4e:68:23:8b:dc:
15:00:3c:75:2d:a7:23:17:eb:16:0b:92:44:47:b9:
95:ff:d9:dc:58:ff:ef:6f:00:72:86:76:f9:63:7b:
6f:17:be:29:de:8e:ec:c3:36:d9:44:b6:11:5d:d7:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:92:88:FC:A6:82:B3:CD:B3:0B:7B:B4:E3:7E:6C:14:EF:22:84
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:32:52:1a:03:e3:b1:3d:b0:f8:b5:f8:d1:20:55:ac:3e:fe:
17:0e:bb:72:da:6f:69:c6:de:d1:80:36:ac:b9:62:f1:af:7f:
1d:b7:8e:6f:19:1f:04:32:2c:64:84:ba:d6:a4:bd:f5:b7:e9:
0c:37:e3:38:33:43:60:fd:23:8d:21:7a:e5:e5:e5:6e:03:fb:
e0:3b:de:ba:eb:5e:7b:76:0e:51:44:aa:74:e8:4c:a0:19:97:
24:4a:d4:af:d7:63:be:a6:76:5e:5c:1e:4d:fc:af:fc:fe:49:
b7:cb:2e:fd:2b:24:51:49:92:4c:1c:96:16:62:52:b8:e6:58:
dc:66:5a:53:ac:c0:8b:87:30:9a:79:eb:be:d2:6d:2a:fa:da:
86:cb:7c:b0:21:d2:74:c3:00:b2:89:bd:49:42:29:68:a4:5b:
51:88:29:8d:1a:0d:74:82:c8:ad:8c:df:56:4b:49:b5:9a:90:
a1:9e:17:29:2e:ed:24:5a:30:9e:cc:00:52:1f:42:4a:2c:b5:
4e:ae:ac:29:c5:f1:7e:94:3a:11:87:17:92:95:f6:f3:4e:e7:
c2:39:14:24:d0:d5:da:20:77:6d:f7:97:6f:e2:0a:63:30:43:
2d:68:4b:58:55:62:7d:d8:a2:26:8f:33:9e:c8:b1:03:0b:51:
da:93:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:14 2026 by rpki-client