Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier: nJu/4hQSv3dWN1stgHAi7I2PwM8HvtycBl2aI9Aj4IA=
Subject key identifier: 40:47:3D:1B:18:07:FB:2F:A5:A5:55:82:BB:A2:B6:50:73:C9:6E:47
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial: 019CB0922E15E0B8F6ED3FD16D9BD4DD8D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number: 0252
Signing time: Mon 02 Mar 2026 22:01:35 +0000
Manifest this update: Mon 02 Mar 2026 22:01:35 +0000
Manifest next update: Tue 03 Mar 2026 22:01:35 +0000
Files and hashes: 1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: x3aEDgl+uzvUHOsEh9I0wSMAYPZODT3WOqRN3WOjVQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:2e:15:e0:b8:f6:ed:3f:d1:6d:9b:d4:dd:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Validity
Not Before: Mar 2 22:01:35 2026 GMT
Not After : Mar 3 22:01:35 2026 GMT
Subject: CN=40473d1b1807fb2fa5a55582bba2b65073c96e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:fb:b3:15:13:95:49:55:51:fa:e8:1b:92:
65:fd:37:33:50:fe:ec:e9:ec:89:de:9f:bb:7d:26:
53:5d:26:92:cb:f8:0b:66:ba:06:f0:b4:d9:9c:84:
f7:d1:ec:11:bb:8e:37:25:ab:62:03:b9:57:f0:00:
a3:44:ff:5c:0b:60:e8:2e:6d:93:59:b7:96:43:d7:
ff:7c:fc:21:f6:0c:77:86:54:95:ac:c7:b0:07:18:
3a:60:09:51:19:ed:51:f1:88:f2:46:a9:33:b8:f0:
35:7e:19:ce:01:54:d6:e3:8d:d4:3b:5d:dc:61:79:
9c:89:13:c8:5f:42:d1:26:af:c3:a7:92:db:2c:de:
91:1c:c2:8d:f3:11:81:5d:d3:3b:93:57:42:19:02:
b0:54:8e:ee:f0:44:f9:30:1b:ad:b8:63:2c:13:17:
0e:14:18:a1:2d:67:97:51:e0:70:84:9e:56:1b:8b:
97:a9:fc:4b:8a:db:4e:c3:25:f0:80:54:eb:65:13:
66:da:4a:59:0e:1a:3a:93:9f:ea:d3:d9:82:71:88:
82:56:8f:e9:2f:41:e3:1e:5f:f8:88:68:9c:0f:34:
70:7b:2f:47:b8:4b:7c:4b:c2:38:0b:9e:a6:e2:bb:
72:9b:c7:23:bb:b2:10:1f:41:79:c9:f0:b0:22:20:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:3D:1B:18:07:FB:2F:A5:A5:55:82:BB:A2:B6:50:73:C9:6E:47
X509v3 Authority Key Identifier:
keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:14:29:eb:fa:ae:16:19:28:7f:4c:19:e5:47:58:1f:c8:4a:
61:22:1e:61:25:a5:cc:94:f9:7e:8f:dd:de:01:dc:54:1d:fe:
aa:27:de:f8:bd:ae:99:5e:cf:b7:e4:a8:a8:06:51:fc:fd:1b:
65:3f:a8:cb:ec:dc:a5:69:e8:d5:f1:f1:a9:59:b5:4b:05:15:
d4:ef:3d:05:07:8f:2e:59:39:38:e3:96:92:bf:00:52:19:a0:
ba:93:9a:af:38:7d:34:1e:fc:cb:05:7f:3b:c7:bc:dd:52:e9:
76:99:7a:75:45:ca:64:18:df:f7:26:a3:69:18:3a:ab:83:f0:
52:61:1b:38:0e:0a:8f:e5:7f:37:a0:38:c5:47:a6:e8:20:37:
80:aa:8f:0c:5a:7b:03:f7:5c:0c:35:40:36:d4:f9:61:c6:e0:
87:11:23:cc:e0:32:73:27:8b:0c:65:48:0c:a0:fe:3a:af:1e:
03:ce:cb:84:4b:63:92:0c:d1:7c:c5:98:3c:5b:88:44:7d:80:
44:a0:f6:98:2e:33:ef:12:1b:52:1f:1d:c4:33:d0:0b:43:14:
16:b4:25:5b:81:8e:df:48:c6:21:6d:73:e7:57:8d:1c:a9:80:
ac:8f:1a:43:d9:1c:5d:89:bc:51:b8:12:42:aa:77:5f:56:43:
50:97:7d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywki4V4Lj27T/RbZvU3Y2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz
YTI5NjYwHhcNMjYwMzAyMjIwMTM1WhcNMjYwMzAzMjIwMTM1WjAzMTEwLwYDVQQD
Eyg0MDQ3M2QxYjE4MDdmYjJmYTVhNTU1ODJiYmEyYjY1MDczYzk2ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqv7sxUTlUlVUfroG5Jl/TczUP7s
6eyJ3p+7fSZTXSaSy/gLZroG8LTZnIT30ewRu443JatiA7lX8ACjRP9cC2DoLm2T
WbeWQ9f/fPwh9gx3hlSVrMewBxg6YAlRGe1R8YjyRqkzuPA1fhnOAVTW443UO13c
YXmciRPIX0LRJq/Dp5LbLN6RHMKN8xGBXdM7k1dCGQKwVI7u8ET5MButuGMsExcO
FBihLWeXUeBwhJ5WG4uXqfxLittOwyXwgFTrZRNm2kpZDho6k5/q09mCcYiCVo/p
L0HjHl/4iGicDzRwey9HuEt8S8I4C56m4rtym8cju7IQH0F5yfCwIiCK5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBHPRsYB/svpaVVgruitlBzyW5HMB8GA1UdIwQY
MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt
YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm
LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRQp6/qu
Fhkof0wZ5UdYH8hKYSIeYSWlzJT5fo/d3gHcVB3+qife+L2umV7Pt+SoqAZR/P0b
ZT+oy+zcpWno1fHxqVm1SwUV1O89BQePLlk5OOOWkr8AUhmgupOarzh9NB78ywV/
O8e83VLpdpl6dUXKZBjf9yajaRg6q4PwUmEbOA4Kj+V/N6A4xUem6CA3gKqPDFp7
A/dcDDVANtT5YcbghxEjzOAycyeLDGVIDKD+Oq8eA87LhEtjkgzRfMWYPFuIRH2A
RKD2mC4z7xIbUh8dxDPQC0MUFrQlW4GO30jGIW1z51eNHKmArI8aQ9kcXYm8UbgS
Qqp3X1ZDUJd9qA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:12 2026 by rpki-client