Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: VE4hfM1qBeWV5BMvnxBNTGVIY39VFyOLwD6ohfyA2yk=
Subject key identifier: 22:6A:53:CE:5F:05:36:D1:26:34:35:DE:51:03:73:18:83:3F:08:F6
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019CAA58CFC47F7949CC777D7A22159B051F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 148F
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: d0thYdN8hY/fsAinbTtuAB3i+jER91e0wccEmWCm3z8=)
2: fb3NlfyiI12-2naS91KzEXDuLcM.roa (hash: xFi8qis3wYM7XGFa9w0jwhmsTCg5KkrRoqZqwdJaBxs=)
3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=)
4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cf:c4:7f:79:49:cc:77:7d:7a:22:15:9b:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=226a53ce5f0536d1263435de51037318833f08f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:34:f1:76:f4:df:6b:ea:07:32:bc:a0:a7:
26:06:2c:74:62:ef:e5:e8:1f:d5:d0:f0:14:63:5c:
63:71:5e:ca:ea:bb:4a:ae:42:6e:9d:51:dd:06:41:
9d:1a:a6:18:49:0d:17:c5:03:20:87:ee:d2:8c:78:
e3:de:ee:2f:c3:52:db:d2:2a:d3:e7:ed:ab:2e:6b:
a8:d0:46:28:59:19:da:fa:95:52:7b:6c:7f:3e:23:
51:99:0c:30:96:52:6a:71:2d:e1:4b:17:c6:33:27:
47:4a:2e:7a:67:52:79:67:c3:d5:ad:92:d6:f9:00:
57:04:e4:b7:be:19:ab:fd:c0:74:fd:22:4f:f8:22:
7f:17:1c:1f:2f:c8:fc:97:aa:51:d4:cf:e0:74:ba:
70:54:23:aa:90:01:8e:c6:c5:20:a4:25:b5:b4:85:
f9:25:df:fa:ce:ff:a3:b0:91:85:8a:01:cd:9d:95:
a2:c3:e7:fc:dd:a0:83:4e:91:2b:cf:94:7f:f0:8c:
8d:e1:df:55:ba:52:d7:b5:db:b0:68:b4:8e:1a:e7:
f8:0d:c8:13:75:67:7f:3e:ed:d4:b2:8d:de:9b:45:
f1:e5:90:05:9a:0b:a2:5e:e9:98:d4:ee:92:da:5d:
b2:82:eb:a7:26:68:d3:88:8d:e1:1e:b2:eb:bf:b5:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6A:53:CE:5F:05:36:D1:26:34:35:DE:51:03:73:18:83:3F:08:F6
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3f:00:4b:08:cc:fd:25:aa:78:54:f7:cc:82:54:3c:39:5c:
f4:98:6a:cf:39:3d:a1:c5:16:d1:a8:3b:9d:bd:e2:5a:4a:69:
a9:12:f7:be:ee:ae:07:6f:56:1d:48:d9:35:2c:f5:20:cc:f1:
b2:37:d8:ec:d1:8e:b0:a3:f4:4e:42:1b:f7:03:6e:8b:ae:85:
ed:ca:36:08:fe:10:40:81:57:17:2d:1b:1c:a4:9c:4c:8a:03:
ec:93:af:7e:05:fd:b9:b4:55:e1:77:66:9e:0b:76:ff:a6:a2:
22:99:5e:11:4f:17:4e:7c:2c:bf:00:13:cc:1a:fa:36:ff:9e:
dc:62:d6:ee:f1:1d:bf:90:24:68:f5:b1:b3:49:1e:b4:60:9a:
a6:94:7a:1c:04:23:08:c2:73:41:5b:03:dd:cf:34:ab:cf:15:
5b:7d:7f:d1:df:cf:8a:c2:cb:42:e2:42:28:83:09:b6:79:06:
a9:85:e9:51:2c:8a:54:5d:90:3b:e8:02:20:ce:db:b4:0e:69:
ac:59:3f:f6:b7:87:31:63:f0:ef:e0:bd:6e:c1:c7:77:36:38:
8e:4f:39:a4:87:0a:6d:42:1c:f5:7c:35:3f:80:4f:79:f0:e1:
34:d7:77:f0:09:43:8d:84:81:0c:6f:f2:5f:cf:f8:ad:ba:a3:
11:1d:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:33 2026 by rpki-client