Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: JDQuU/RhlPBTuA+htdzCgHIqueelfRbk/SCbzficnJk=
Subject key identifier: 25:5A:26:87:0E:89:BB:EE:B3:61:E5:4B:9B:D0:6A:6B:9C:01:91:E3
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019CAC47382E9D91CF732CDCB8CC5C604EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 03E1
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: c1lFXMib8UwzGfwM0/WBgKgguwn7c0+csWdGo5jICmw=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:38:2e:9d:91:cf:73:2c:dc:b8:cc:5c:60:4e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=255a26870e89bbeeb361e54b9bd06a6b9c0191e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:32:91:9e:cb:b8:04:1a:e3:40:ac:3f:78:
cd:3c:dd:40:a6:82:34:27:ae:20:4a:a0:6b:93:a8:
6e:be:12:52:08:5f:18:1f:ef:13:29:ff:5c:84:d9:
02:ef:d8:de:b6:48:e6:46:8b:63:10:4b:fc:64:3a:
e4:15:c4:6b:4f:fc:58:a4:b2:20:b8:c5:ce:2e:ed:
4b:b2:b5:6b:1b:11:c8:39:2d:d9:40:0e:d2:44:85:
3b:a5:03:98:d1:a0:81:f7:56:1c:30:f3:3a:6a:9e:
cd:3c:9a:26:22:f0:f2:d2:8e:ea:8b:a2:31:dd:da:
e5:86:02:58:e3:9e:8e:2a:a7:f5:fe:e6:9b:38:ec:
bb:02:48:5a:64:da:d4:35:2b:9f:06:e1:5e:77:32:
a6:a1:b5:26:59:8f:96:d7:44:49:b9:b2:37:eb:81:
49:60:a0:0a:26:2f:fa:f7:ff:5f:35:46:cf:40:43:
41:09:9b:94:f8:fd:7c:70:8b:9f:a6:17:5a:f2:a4:
f4:e8:a9:5f:8c:84:b2:62:52:22:29:bd:dd:88:92:
78:9c:2a:7a:54:88:f0:8e:13:2d:3e:a1:45:a5:ed:
90:cc:98:f9:1f:9e:5b:f1:65:e8:35:b3:03:ba:0c:
ea:b0:30:19:ab:f1:37:bd:a0:92:68:8c:1a:fb:f4:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5A:26:87:0E:89:BB:EE:B3:61:E5:4B:9B:D0:6A:6B:9C:01:91:E3
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:9c:21:4c:1e:e6:b6:d6:09:8e:55:f1:cc:29:37:ea:c9:
2c:9c:03:59:f0:2f:8a:e2:da:2b:e3:e5:7c:e3:e8:27:7b:c8:
72:ad:fd:a8:af:aa:38:79:22:72:96:5b:fa:4c:1c:c1:49:02:
d8:68:8c:e1:80:5f:9d:1d:98:9a:c3:62:01:52:03:43:2c:ca:
d3:ac:78:15:50:3b:8a:78:19:35:9d:18:d1:6e:60:be:b9:a2:
6c:fa:4d:d7:24:ed:63:52:a5:1b:a6:43:21:17:bd:46:9f:bc:
d3:1c:c4:c9:84:15:e3:c9:3c:cd:08:ca:9f:66:76:24:ab:b3:
8b:ff:42:ec:2b:ef:13:8b:72:f6:51:bd:50:e5:98:05:12:8b:
07:0a:38:d2:0a:55:18:5e:f4:60:3d:15:89:8a:0c:2e:2e:8a:
e5:52:6f:f8:2a:e2:db:dd:c0:20:69:28:09:69:6f:00:59:04:
10:54:1e:eb:b7:45:e6:c1:54:60:5d:d4:75:a4:e3:f6:df:7c:
9f:ef:61:14:14:07:ec:a4:90:4a:08:6a:a9:32:5d:c3:e3:23:
5b:df:d4:b6:92:9d:90:5e:77:c7:cf:2e:7a:55:51:0c:3d:ab:
a3:de:47:80:99:93:57:cd:dc:16:ef:7e:7e:33:0a:0c:fd:ba:
78:97:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:51 2026 by rpki-client