Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: YSECIyj/8PljQkeH0JaaeEJUB0DRNzOsNnPbVJsS9Wk=
Subject key identifier: 5A:4F:3A:15:5E:27:B1:78:40:74:7D:AA:9C:F3:0C:3F:58:79:1C:B0
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019CADC84170A62DB5F65A154CD2752FEFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 0801
Signing time: Mon 02 Mar 2026 09:01:48 +0000
Manifest this update: Mon 02 Mar 2026 09:01:48 +0000
Manifest next update: Tue 03 Mar 2026 09:01:48 +0000
Files and hashes: 1: 1ygXWl56xqWdwn4TflC3PtLjSqY.roa (hash: wDz5snBxEXcvrvGiZ9XQ0363TdLN4FN6tQlUAGosd4Y=)
2: kMPviltRtqxAKO4xs3FL286WfMI.roa (hash: b2KX7/1WNd0ZVOSNk+xrifaPOCqz2zXGvf6d4rAcmDs=)
3: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: wP+ofOzsHpoTcgR8RvO2jU3NK0roEVIZZsYjaKggGyE=)
4: xPQBc7eZ2R1OmzVk_QznLDcH24Y.roa (hash: EfDW7rBbqgixbRFm/O3kOxDuO6fhmyskTYvpF7yhzcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:41:70:a6:2d:b5:f6:5a:15:4c:d2:75:2f:ef:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Mar 2 09:01:48 2026 GMT
Not After : Mar 3 09:01:48 2026 GMT
Subject: CN=5a4f3a155e27b17840747daa9cf30c3f58791cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:60:4b:57:34:5b:3c:44:ab:c4:46:bc:1e:
6a:95:c9:6d:bb:e1:6d:23:cf:fe:d1:f9:3a:48:76:
56:53:fa:5e:8d:cc:07:f1:20:19:12:22:01:88:81:
f7:2b:99:08:c0:18:5c:aa:0f:19:fd:dc:af:af:ca:
48:e3:7b:ed:bd:36:83:80:b7:1f:5b:61:67:94:d3:
c8:24:76:3d:e7:d2:c2:89:be:b6:d9:02:23:37:f1:
b0:63:5b:a2:19:fc:2a:6c:93:59:2b:76:d6:1d:16:
84:a4:af:62:43:73:fa:c0:27:27:c1:04:50:ff:17:
b6:00:10:83:f1:11:34:40:8e:b4:65:a6:24:ce:f5:
ea:9b:b6:da:3f:d5:1e:15:91:de:cf:51:dc:62:88:
bc:59:e0:26:75:7a:22:14:4d:fa:9d:29:8e:cf:9e:
87:32:1b:b4:85:78:aa:a4:c7:98:b9:59:92:f4:c6:
d9:5f:2d:be:4b:24:9b:32:42:88:cc:05:21:d8:6f:
63:af:93:e0:a4:d9:63:84:da:e8:b4:c1:97:83:14:
0d:c2:cb:13:fc:8c:c7:14:0a:95:8d:76:a0:a4:d7:
e8:2d:36:5f:39:1f:a8:19:6c:ff:b4:0c:14:33:6b:
5f:90:a4:6c:d5:c8:fc:d6:ba:60:99:e5:3c:9d:fc:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:3A:15:5E:27:B1:78:40:74:7D:AA:9C:F3:0C:3F:58:79:1C:B0
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a2:88:25:a2:eb:97:c1:87:d0:58:74:d0:a4:a3:10:ce:38:
20:6b:2e:c7:f1:17:e8:3c:f1:b3:99:bc:bd:7b:a3:55:c8:f4:
33:13:43:0b:51:50:e8:9e:bc:5f:77:c9:ed:4e:5a:e4:04:0b:
7c:86:7f:f0:85:00:bc:26:76:62:69:88:a1:8a:94:5c:5a:ec:
ae:07:c2:4e:a7:da:96:87:5a:5f:c2:eb:92:26:4a:f7:21:90:
77:c1:72:61:03:34:06:88:c6:90:d5:83:18:3a:32:e2:d2:1c:
28:1b:04:f7:72:67:4e:b7:94:61:2b:ea:e8:17:33:40:78:4e:
a7:2d:40:a0:50:92:29:eb:19:62:8f:f8:0b:22:ca:8e:fc:c4:
87:60:5c:3a:19:18:69:e7:93:93:a7:de:39:0e:10:ec:3a:aa:
5b:f7:67:d0:63:21:b1:18:83:13:10:ea:63:f7:e9:fc:85:cf:
1b:d1:7c:c8:9b:05:23:f5:91:67:e8:bb:f0:4e:66:40:1f:ec:
e4:2e:71:fe:2e:70:a5:59:74:8f:03:92:ad:a9:51:93:eb:9a:
e4:d0:e1:0d:b8:1e:8e:9a:4e:d6:d1:8c:1a:cb:f1:17:10:ce:
9f:3d:af:2a:4b:30:0f:f3:e5:8c:61:bf:7d:f8:88:b3:7e:c0:
1e:6d:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:51:35 2026 by rpki-client