Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: UpIDK0sV5Y7DKhE79oy1lj6josqXtFFSfqfhazdLb0E=
Subject key identifier: E9:24:B1:95:0C:0C:9A:98:98:B0:A4:E7:ED:21:96:23:E2:AD:4F:4F
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019CAAC712749733A4060C32EB530B88F3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 1808
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: /ppYnrncqGCYcui1p26NL+rr2bMiJfz8H+0bt6c1xbo=)
2: hs1mGbyytLZUcmmoRa1vmUrBtV0.roa (hash: Q7jJNRLIE/XZCLjYqKH3txSs09Wat8XFnoEvxouvOI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:12:74:97:33:a4:06:0c:32:eb:53:0b:88:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=e924b1950c0c9a9898b0a4e7ed219623e2ad4f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:3f:fb:76:e5:17:68:02:1b:e6:46:c6:66:
3b:d1:8d:45:f0:ca:fe:cc:8f:23:47:47:61:c9:4e:
f0:09:85:a7:f1:54:6b:e6:96:d7:40:2b:79:b2:d0:
7f:20:a3:a3:1c:a4:d2:bc:11:06:52:0a:2c:84:c9:
ae:33:c4:b5:9e:2a:f8:6f:71:62:35:0d:7d:b0:d0:
41:46:3b:0b:9e:f3:f4:91:f5:22:32:29:e6:75:87:
3d:e6:f0:1d:8c:3a:51:7f:53:4f:e2:ae:cf:08:85:
45:c7:8f:e3:0e:8e:78:c8:0c:a4:7b:31:18:28:41:
87:50:c5:be:2e:18:26:cf:e2:7a:73:9c:5a:43:2c:
db:ea:5c:8f:f6:a0:b5:75:40:d1:80:a0:3b:55:c6:
47:cb:29:cc:d5:8e:77:b6:8a:76:18:6f:83:5e:da:
d1:f3:76:1a:1d:6b:be:be:68:6d:63:4d:70:29:e3:
03:92:34:44:12:c9:1f:ed:6a:b9:c3:f0:5e:65:3b:
7e:5b:51:d8:61:09:ad:c6:b1:65:7e:9c:84:ce:8e:
c4:93:e4:0a:3a:0e:c6:5e:25:23:39:09:49:76:ac:
84:59:74:21:71:35:e2:cb:00:88:cb:b4:2e:15:af:
9b:86:ad:b4:4b:4c:50:96:a1:1a:e1:da:49:22:33:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:B1:95:0C:0C:9A:98:98:B0:A4:E7:ED:21:96:23:E2:AD:4F:4F
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:0d:43:29:5a:a0:90:75:e1:6f:f7:3f:5d:f9:0f:b2:0c:
8c:a0:57:b9:23:60:ed:52:9c:2d:f9:ef:7d:7d:25:7f:40:13:
59:84:96:f2:51:3d:b7:78:f5:27:01:3d:ae:eb:62:b4:aa:24:
50:3b:32:cd:ad:cf:7c:1d:61:f7:b2:47:8b:43:74:3e:55:91:
1f:c6:7c:5d:f6:18:58:cc:15:f2:e9:ab:59:0e:cf:f0:bb:89:
03:f6:03:91:a7:e2:61:0f:a0:39:95:23:c3:b5:52:2d:7a:a3:
a9:24:42:03:db:54:0d:51:0b:63:b5:81:95:ff:ae:50:58:37:
66:2a:10:cd:76:10:1f:82:4c:d0:4a:a9:42:cf:74:dc:90:16:
6a:23:96:19:7b:91:47:eb:92:10:3a:7c:b8:2f:c3:2c:22:52:
06:bc:72:5e:c8:d3:2c:81:a7:c4:06:10:3f:fb:4c:96:43:8e:
ab:43:38:b7:54:7d:23:09:5a:77:27:13:39:87:24:ab:cc:81:
f1:f9:12:7b:7a:61:40:0c:e2:03:f3:b2:ff:72:e9:9c:3b:5e:
78:69:df:cd:ec:12:f7:d2:6d:bd:8a:34:59:6d:32:a3:19:74:
3e:57:64:aa:83:de:be:5e:84:b2:6f:8c:b4:06:01:18:51:b8:
3e:41:a0:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxJ0lzOkBgwy61MLiPO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGUzMzhkNzNlNzU4NDY4NDU2NjMyZjViY2FhZTA3YWYw
ZDg3MzEwHhcNMjYwMzAxMTkwMTM4WhcNMjYwMzAyMTkwMTM4WjAzMTEwLwYDVQQD
EyhlOTI0YjE5NTBjMGM5YTk4OThiMGE0ZTdlZDIxOTYyM2UyYWQ0ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39U/+3blF2gCG+ZGxmY70Y1F8Mr+
zI8jR0dhyU7wCYWn8VRr5pbXQCt5stB/IKOjHKTSvBEGUgoshMmuM8S1nir4b3Fi
NQ19sNBBRjsLnvP0kfUiMinmdYc95vAdjDpRf1NP4q7PCIVFx4/jDo54yAykezEY
KEGHUMW+Lhgmz+J6c5xaQyzb6lyP9qC1dUDRgKA7VcZHyynM1Y53top2GG+DXtrR
83YaHWu+vmhtY01wKeMDkjREEskf7Wq5w/BeZTt+W1HYYQmtxrFlfpyEzo7Ek+QK
Og7GXiUjOQlJdqyEWXQhcTXiywCIy7QuFa+bhq20S0xQlqEa4dpJIjMpIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkksZUMDJqYmLCk5+0hliPirU9PMB8GA1UdIwQY
MBaAFC4OM41z51hGhFZjL1vKrgevDYcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGIt
YTViNzgzMWE4Y2UxLzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy84MTExMDgtZThmNy00N2FmLWJjOGItYTViNzgzMWE4Y2Ux
LzEvTGc0empYUG5XRWFFVm1Ndlc4cXVCNjhOaHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqQNQyla
oJB14W/3P135D7IMjKBXuSNg7VKcLfnvfX0lf0ATWYSW8lE9t3j1JwE9rutitKok
UDsyza3PfB1h97JHi0N0PlWRH8Z8XfYYWMwV8umrWQ7P8LuJA/YDkafiYQ+gOZUj
w7VSLXqjqSRCA9tUDVELY7WBlf+uUFg3ZioQzXYQH4JM0EqpQs903JAWaiOWGXuR
R+uSEDp8uC/DLCJSBrxyXsjTLIGnxAYQP/tMlkOOq0M4t1R9IwladycTOYckq8yB
8fkSe3phQAziA/Oy/3LpnDteeGnfzewS99JtvYo0WW0yoxl0PldkqoPevl6Esm+M
tAYBGFG4PkGgqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:13 2026 by rpki-client