Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: nf8q4AM7fT0fzQ9LttlPdbcUzv1prezTrB/xnd8SQUk=
Subject key identifier: E8:63:38:29:94:7D:7E:42:77:C3:07:06:AC:B1:86:FA:EA:41:44:1E
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 019CAA8F86431A923156645415E435EC115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 16ED
Signing time: Sun 01 Mar 2026 18:00:58 +0000
Manifest this update: Sun 01 Mar 2026 18:00:58 +0000
Manifest next update: Mon 02 Mar 2026 18:00:58 +0000
Files and hashes: 1: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: nyBts+KpXnG2S8aWbS3EUfHoYC/LD/hTOzsNBxySgVk=)
2: mc0V-dqblb2LS7X-Me9ToDZupDo.roa (hash: TgiXuLIZXRQWoQtj5JAJxLB0Ph8I4D6iEUTij0gXzCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:86:43:1a:92:31:56:64:54:15:e4:35:ec:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Mar 1 18:00:58 2026 GMT
Not After : Mar 2 18:00:58 2026 GMT
Subject: CN=e8633829947d7e4277c30706acb186faea41441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:f5:88:1c:5f:9c:f9:b2:6a:5c:4f:84:b1:
15:28:24:6c:e7:c8:96:b5:19:bf:6b:07:8b:d8:5b:
0f:59:57:12:a6:a4:da:9e:fc:8b:55:30:88:28:f2:
e5:da:ac:16:27:3a:a5:fd:8e:38:7c:76:0c:c4:0c:
d0:66:27:b4:aa:4d:19:46:95:50:49:d3:8e:d5:02:
81:5d:e0:cb:9d:d3:51:a6:f0:23:df:16:cc:0d:c3:
4d:4f:f1:5e:ad:6b:7d:8c:c5:84:8b:a4:82:d9:e2:
36:47:67:c6:58:37:d1:26:5e:4a:44:4d:59:e0:67:
fa:2a:ef:2f:4d:80:b2:a2:6b:5c:3b:08:8a:d8:66:
ac:8b:59:61:b4:93:19:f7:8e:4b:f5:1a:4c:15:5f:
75:3a:8a:3e:49:4f:02:65:f4:d3:61:14:7c:ea:78:
21:64:36:04:a6:d7:21:88:e1:0e:90:61:a3:27:39:
89:b3:8c:8a:80:b4:a5:81:a3:09:47:ce:2a:88:f0:
31:2a:49:b6:6b:a1:89:55:89:99:3e:7c:0f:4b:67:
a4:3e:93:9c:46:5f:1c:52:3d:d9:ce:77:eb:29:41:
31:af:1c:e8:96:e3:55:e2:8c:54:f2:76:8e:26:33:
72:dc:0b:1a:82:43:ab:82:84:49:e8:91:a2:29:85:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:38:29:94:7D:7E:42:77:C3:07:06:AC:B1:86:FA:EA:41:44:1E
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2e:95:94:0d:16:1a:a3:82:8e:2a:22:d6:aa:87:c0:32:94:
54:a3:77:e0:61:9c:bd:89:4f:df:b1:9d:8b:c8:ae:f3:4f:5b:
a3:44:ee:b1:45:b8:4a:84:2b:5e:5e:12:bf:b5:1d:b1:0c:f4:
29:91:9f:a0:f1:67:8f:6b:13:04:a7:39:6b:6d:6f:ff:31:5f:
e2:a0:67:40:97:64:47:3f:97:aa:b4:78:b4:8a:68:42:a1:69:
32:7b:de:22:ef:f5:39:f9:e3:41:54:ae:e3:21:99:b5:56:8d:
a3:50:26:56:67:ab:b1:aa:12:32:4c:92:35:8e:d1:48:d9:c1:
1b:29:bc:a4:e3:b6:91:7d:0b:fd:e5:9a:24:39:72:13:fa:91:
98:9b:a0:f2:5a:28:de:fd:49:c7:a3:e0:a6:98:33:24:c7:3a:
c3:5c:30:0e:15:be:af:76:57:d7:75:8a:bd:b4:0a:06:36:2c:
fd:76:f4:6c:f5:42:31:10:e9:d8:1f:53:c4:96:ea:b6:06:14:
16:5b:5d:60:86:c4:ae:30:39:af:85:15:bd:b9:a9:01:31:c6:
0d:26:8d:f7:70:60:b4:54:fa:a6:a5:23:b7:d8:ef:af:39:96:
87:95:cf:b7:26:95:f2:f4:a0:83:4e:9f:82:e8:a6:89:d2:cc:
b0:cd:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:47 2026 by rpki-client