Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: 4Fz1FUve3RwRPWhk1u6U6TNoK3sKlCs3LvEbJc0ZC7A=
Subject key identifier: 78:76:C1:02:37:27:D7:93:DE:61:FC:5B:98:DB:08:A6:61:72:15:AB
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019CAB6BE4C3722B705006C38B76D120D526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0FCA
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa (hash: KygpTZidDj6IJAoJpYsnybjIOxvZc9DyQui8eumvF1w=)
2: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: BghVVQmQE+0+WTM661OOn9HpdF5wnsOK48EqGbdeZa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:c3:72:2b:70:50:06:c3:8b:76:d1:20:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=7876c1023727d793de61fc5b98db08a6617215ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:46:9d:79:ba:ce:ad:ca:8b:cb:59:57:38:
50:33:7d:88:2d:c4:f8:69:bf:e1:36:93:2e:77:f0:
a5:f0:9e:75:ea:65:11:23:a2:74:32:bc:3e:a7:1a:
38:28:a5:39:00:ef:3a:70:cb:e5:00:20:3b:99:b7:
9f:fd:54:70:b4:2a:f2:32:eb:c3:62:c6:66:e2:9c:
c2:5b:6a:98:c4:be:b7:ca:73:8a:8e:92:e3:64:d6:
bb:0d:f1:d1:9d:7d:82:9b:99:e3:c6:75:48:38:da:
66:25:9b:29:54:b4:cd:e7:c4:e7:34:9c:4f:45:cd:
3c:97:af:f6:ac:c0:e2:df:db:75:d8:e1:f0:8c:4a:
66:97:b3:91:88:fe:79:c9:3d:66:cf:b2:05:ba:20:
4f:73:30:2e:0a:22:1a:14:7f:44:00:93:45:20:a2:
61:c2:ec:44:53:b5:eb:ad:ea:2f:fc:18:44:94:d5:
31:93:d1:c2:62:eb:cd:08:d9:58:8d:98:91:c2:19:
da:f1:fd:01:a3:a6:be:d6:28:f5:7b:4d:cb:70:f2:
d4:c2:c6:f1:2f:a7:7a:9c:e0:7d:f7:9e:ca:b5:f2:
c3:35:bd:36:09:4e:a9:24:2b:6d:0d:e2:f6:9d:7a:
22:b0:a7:6f:28:b0:dc:2c:76:1b:5e:1d:d0:90:e1:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:C1:02:37:27:D7:93:DE:61:FC:5B:98:DB:08:A6:61:72:15:AB
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:9d:70:6f:60:5a:3f:62:f8:79:e1:b5:eb:0b:80:db:06:
a3:fd:18:ae:6f:76:f9:87:e2:01:77:84:69:85:16:4b:54:f8:
5f:1d:c4:cf:e5:ed:a5:95:18:7b:9f:02:2c:3d:0e:a0:9b:6c:
11:93:8d:fb:08:1a:91:16:dc:57:57:4a:80:b3:72:cb:eb:f1:
29:24:9f:ff:fc:0c:3c:3c:82:17:66:16:2c:f4:66:25:d2:7e:
38:0a:0c:f1:b8:a5:7d:d9:55:73:6f:e7:7b:33:59:9d:be:bb:
1e:74:7d:5e:8d:4e:9e:7a:96:c0:77:02:58:22:83:cc:a4:a2:
33:5f:9c:8f:45:d6:64:85:37:20:2d:57:4e:70:3c:e8:9d:68:
d1:8e:8d:84:8e:e2:5c:69:92:09:16:ca:36:97:f0:97:e1:98:
a8:5a:bc:e7:03:2a:25:da:f1:73:54:a6:3d:d4:7b:8c:ff:df:
20:14:15:0f:63:77:b3:8a:86:e6:2e:97:1a:9d:55:45:dd:99:
3f:6c:39:87:31:97:80:6f:ca:1c:3e:48:9b:6c:2f:d6:3e:eb:
b8:c2:f7:9c:7b:de:93:18:10:29:b4:33:5e:1e:54:83:1c:77:
67:0f:ea:53:39:21:ce:7d:9f:ad:b5:26:22:9b:34:bd:9d:bd:
1a:cc:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:28 2026 by rpki-client