Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: /oZA7KQKZ8LvHrpd308tOSy2AXClcDmY4ugiL8O3qIo=
Subject key identifier: D8:48:63:5F:F0:C3:38:30:5F:AF:B2:B7:29:51:8F:72:31:33:A8:F2
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 019CAB347260736824BAF8F0C0196CC68AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0CC8
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: mN0p3WWWymDaGQH+Np9J/HesspEpwgvPRv4iwrxj40g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:72:60:73:68:24:ba:f8:f0:c0:19:6c:c6:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=d848635ff0c338305fafb2b729518f723133a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:8f:30:3f:35:ec:61:13:34:66:49:fc:0f:
b7:43:6d:c8:b1:15:c3:6f:5f:a6:a3:d7:94:2c:b5:
6f:6f:2f:c7:8e:f3:24:a0:3c:4b:c5:2b:d4:6b:06:
db:9e:d6:e6:21:c3:b9:c6:2b:20:ce:1d:29:57:e3:
b2:69:1e:db:6f:b0:ad:8d:e9:0e:5e:30:43:57:dd:
10:74:08:8c:4a:70:12:45:17:07:42:1b:d4:02:89:
b7:9b:12:33:16:85:98:4b:bf:71:23:86:30:b7:ac:
6d:74:f7:4f:5d:f4:6e:38:8f:ac:cd:eb:99:58:cb:
15:27:3c:50:c5:85:df:d5:82:54:32:59:b0:c9:b6:
53:2a:2a:29:d6:73:b5:57:86:7d:77:28:5d:ed:fd:
46:53:97:8e:d3:89:68:55:27:9e:2f:4c:22:4c:5a:
97:f5:41:8b:62:85:20:d7:fd:14:a7:10:40:7a:d3:
e3:47:2d:ed:1e:69:df:13:c6:61:bb:22:0f:68:34:
4a:3b:d1:46:44:c0:6b:cf:7e:c7:44:e2:26:5b:6c:
94:a6:4e:6d:2b:fe:6d:04:24:71:99:ea:e7:9f:1e:
ee:5e:17:cd:d5:96:44:77:62:d8:a4:ad:0e:4a:33:
4c:bb:ec:23:0b:0a:db:f8:1a:95:bb:ed:23:30:8f:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:63:5F:F0:C3:38:30:5F:AF:B2:B7:29:51:8F:72:31:33:A8:F2
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:37:2a:4c:e3:60:51:c0:39:b5:31:96:00:b3:6d:b6:fb:16:
9a:20:25:14:52:dd:4a:ec:fd:2b:ec:08:9d:ef:35:12:ab:ba:
1a:5c:b8:d9:85:dc:53:e4:c3:ec:a5:89:c7:84:4f:bd:e6:87:
9d:88:06:f5:33:c0:85:d3:34:97:2c:35:36:5c:41:03:40:09:
b7:1b:0c:de:01:2a:4d:70:14:09:50:e9:b2:2c:ed:03:81:39:
f9:b1:36:67:28:13:69:b3:dc:20:28:54:ba:8e:88:bc:37:17:
ff:42:e6:b2:33:c3:f5:99:27:fc:27:84:ce:36:28:e9:86:70:
01:0a:d0:3f:b1:72:6a:9f:cb:64:95:88:53:f2:97:4d:15:18:
61:5d:ca:81:a2:31:d0:43:e7:cd:64:5f:d4:9f:12:b0:f6:81:
eb:39:73:f4:b6:38:3d:a0:e7:66:17:9f:a7:36:f5:05:61:33:
9e:23:eb:0d:98:02:a5:5b:44:c6:ed:7e:77:51:50:0f:98:80:
0a:ed:21:6a:a2:b9:dc:74:fa:79:9d:1b:a6:11:49:83:1b:28:
b4:42:84:04:02:2e:79:84:38:25:b1:10:aa:38:f8:cb:d3:0d:
fa:fc:02:36:d7:20:b7:13:fb:83:0c:45:05:d0:7c:1a:17:4f:
9b:8e:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:51 2026 by rpki-client