Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: 0nLAL2T1WSpEdQffdlFgrbMnLS3Rn8orCzijmkajAEY=
Subject key identifier: 4E:45:2E:DA:EE:97:79:BF:AC:30:4E:F5:BE:6C:F1:52:98:41:98:DC
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019CAC472E4E663F47462CBC0672FE8AE446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 1490
Signing time: Mon 02 Mar 2026 02:01:11 +0000
Manifest this update: Mon 02 Mar 2026 02:01:11 +0000
Manifest next update: Tue 03 Mar 2026 02:01:11 +0000
Files and hashes: 1: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: Z38yqfH7R1TyDyaTrA8jvAqAVaxGv1bCikP+dhVIZTc=)
2: fb3NlfyiI12-2naS91KzEXDuLcM.roa (hash: xFi8qis3wYM7XGFa9w0jwhmsTCg5KkrRoqZqwdJaBxs=)
3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=)
4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2e:4e:66:3f:47:46:2c:bc:06:72:fe:8a:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Mar 2 02:01:11 2026 GMT
Not After : Mar 3 02:01:11 2026 GMT
Subject: CN=4e452edaee9779bfac304ef5be6cf152984198dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:b7:80:d8:46:27:3c:94:f9:f0:7f:5f:ed:
d4:c3:68:71:75:cd:27:22:51:ac:59:3e:3e:69:30:
69:2e:cd:3f:7e:c9:d6:64:82:b2:b3:f7:09:c8:8f:
34:c4:da:8d:0b:79:57:cd:41:8d:18:77:2a:fc:89:
68:1f:37:82:e6:e0:41:a4:a7:73:fd:91:b0:07:8b:
65:bb:06:4d:c3:60:75:b4:56:cc:61:a0:fa:d4:ab:
f4:c7:78:89:f9:19:87:70:4a:60:89:23:4a:38:87:
eb:0b:03:31:3f:27:73:33:00:ba:fb:d7:76:5c:d8:
27:15:65:99:bc:04:4c:13:d7:fd:37:8f:2b:62:0d:
82:80:29:c5:95:d2:26:50:d2:e8:85:35:28:f4:70:
58:94:26:fe:9a:9f:62:f1:83:79:92:1d:a4:a3:03:
b1:46:05:7e:a2:fa:30:5d:c5:e8:0d:22:68:6f:fd:
d5:77:a6:11:11:64:19:3c:b9:a0:e9:9a:9a:cd:55:
05:e7:36:ab:35:18:59:28:64:07:d5:d5:97:27:13:
d7:aa:cb:51:ab:bb:32:ee:c2:87:64:cf:c9:51:81:
e3:84:7c:ae:20:2d:f4:8e:d0:13:4a:2f:44:fc:6c:
72:b8:ca:8d:74:84:2a:06:4c:8b:63:11:4e:e4:4f:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:45:2E:DA:EE:97:79:BF:AC:30:4E:F5:BE:6C:F1:52:98:41:98:DC
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:fa:3f:79:27:66:26:1a:df:16:eb:c6:f3:fc:9d:c8:7b:
df:52:b5:c7:c8:f4:ae:46:55:fc:60:c1:c0:d3:00:1a:b8:d0:
d3:70:a2:6e:92:cb:0a:b5:87:90:d8:69:a5:8f:55:46:57:11:
b1:c1:90:b5:b7:ab:a1:7a:62:5b:d3:e5:b9:65:62:e9:b7:6c:
8a:4e:68:a9:67:75:19:1e:53:0d:43:82:80:f9:b8:e4:d2:25:
52:ca:90:e8:64:0e:60:11:61:15:9e:7c:a7:d1:f2:87:08:71:
c8:a6:ef:f6:04:aa:6f:35:b3:8f:13:cc:5e:dc:94:16:7b:52:
db:fa:36:81:25:de:84:db:0c:b9:2c:fd:75:06:4d:b6:49:5e:
46:b5:cd:b4:b6:60:85:78:65:4d:1e:93:a5:c7:ad:2b:62:60:
49:a3:c9:52:18:6c:5d:b0:16:d5:42:84:31:bb:69:1e:e3:e2:
47:67:d2:e5:3f:51:f6:0c:43:16:9f:8f:b7:51:e3:be:21:18:
c4:cc:ec:7b:6a:29:d6:99:31:4f:3a:25:be:c0:7c:4a:b4:e1:
7f:aa:61:7a:47:f9:69:77:36:c7:31:df:15:ba:09:0e:65:11:
cc:00:ca:f0:c4:2a:07:11:94:ce:3f:22:2d:18:00:c8:e6:a6:
b1:d5:25:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRy5OZj9HRiy8BnL+iuRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk
ZWZiNTkwHhcNMjYwMzAyMDIwMTExWhcNMjYwMzAzMDIwMTExWjAzMTEwLwYDVQQD
Eyg0ZTQ1MmVkYWVlOTc3OWJmYWMzMDRlZjViZTZjZjE1Mjk4NDE5OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtu3gNhGJzyU+fB/X+3Uw2hxdc0n
IlGsWT4+aTBpLs0/fsnWZIKys/cJyI80xNqNC3lXzUGNGHcq/IloHzeC5uBBpKdz
/ZGwB4tluwZNw2B1tFbMYaD61Kv0x3iJ+RmHcEpgiSNKOIfrCwMxPydzMwC6+9d2
XNgnFWWZvARME9f9N48rYg2CgCnFldImUNLohTUo9HBYlCb+mp9i8YN5kh2kowOx
RgV+ovowXcXoDSJob/3Vd6YREWQZPLmg6ZqazVUF5zarNRhZKGQH1dWXJxPXqstR
q7sy7sKHZM/JUYHjhHyuIC30jtATSi9E/GxyuMqNdIQqBkyLYxFO5E/0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5FLtrul3m/rDBO9b5s8VKYQZjcMB8GA1UdIwQY
MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt
NDZiZDdkNzk0ZmI2LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2
LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHL6P3kn
ZiYa3xbrxvP8nch731K1x8j0rkZV/GDBwNMAGrjQ03CibpLLCrWHkNhppY9VRlcR
scGQtberoXpiW9PluWVi6bdsik5oqWd1GR5TDUOCgPm45NIlUsqQ6GQOYBFhFZ58
p9HyhwhxyKbv9gSqbzWzjxPMXtyUFntS2/o2gSXehNsMuSz9dQZNtkleRrXNtLZg
hXhlTR6TpcetK2JgSaPJUhhsXbAW1UKEMbtpHuPiR2fS5T9R9gxDFp+Pt1HjviEY
xMzse2op1pkxTzolvsB8SrThf6phekf5aXc2xzHfFboJDmURzADK8MQqBxGUzj8i
LRgAyOamsdUluA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:43 2026 by rpki-client