Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier: iSoSC3APsdkHckDwx06ZCZC2lWNgdBL6pk2t8fh3ejI=
Subject key identifier: CC:78:1E:1B:37:C5:8D:83:B4:B4:AF:8B:8D:B5:5E:29:95:AC:D4:FC
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial: 019CAA588C032913A5D6D734B29D1D03A3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number: 08BD
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: ICqVIuqnGDQ2U9fP3d1W-e4TDf8.roa (hash: 60NTvkE84gguHU2fFEBFq8qOMCvmzn8pCex8KwPB/e0=)
2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: kg+XjLHBjWDEr1SJh9JUYW5OAjZuZi4F/CuLyiG04Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8c:03:29:13:a5:d6:d7:34:b2:9d:1d:03:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=cc781e1b37c58d83b4b4af8b8db55e2995acd4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:a2:87:9e:d4:91:ca:af:c4:e8:59:f1:99:
34:ce:81:10:e6:12:3b:e0:6a:5d:fd:ca:c9:4e:62:
f7:88:14:9f:52:b0:74:51:83:c1:32:59:73:85:5e:
93:20:40:3b:af:cf:e8:7f:e0:77:81:a0:1b:45:89:
81:81:11:4e:6f:cb:b4:cb:3a:27:bc:66:ef:49:cd:
0a:c8:79:0e:f5:82:94:a5:db:21:d9:77:d6:21:0c:
4c:e1:ef:d1:2a:53:7b:28:4e:62:a4:7a:ed:c1:d3:
24:38:50:4c:86:87:c4:aa:73:1c:b3:2c:15:56:d8:
45:45:b9:db:1e:77:9d:4a:11:23:69:e3:ab:40:94:
9f:72:e8:51:5f:45:bb:78:b7:d7:65:ad:4b:8f:1f:
77:e9:b1:3e:d6:33:40:a7:90:33:0e:37:88:cb:06:
56:1e:1f:80:df:6f:13:8a:d2:05:c0:e2:01:c7:32:
28:c1:73:f0:cf:cf:58:04:ed:c1:8b:e0:7f:c5:14:
79:60:f2:20:c0:e8:89:cd:c5:b0:7c:89:ea:b5:ea:
ee:d6:4c:a1:60:4e:b1:22:40:d7:74:86:91:d9:f9:
ca:6a:16:d6:83:b4:f6:14:d5:39:e8:ab:40:79:e1:
c0:62:79:08:a6:ee:53:71:68:97:91:b5:49:48:10:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:1E:1B:37:C5:8D:83:B4:B4:AF:8B:8D:B5:5E:29:95:AC:D4:FC
X509v3 Authority Key Identifier:
keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6e:44:52:9f:92:2f:62:5b:8c:af:c6:94:55:17:92:cf:38:
55:59:fa:53:82:c8:a7:d4:fe:61:e2:25:b4:c9:d4:82:16:2f:
4c:0f:e8:7b:3e:9d:ab:47:09:55:90:7f:e1:6f:fd:f8:bb:99:
8c:c0:51:ad:a5:c0:22:89:2c:07:a3:81:04:a3:51:d0:8f:25:
a5:02:3c:ba:60:09:3a:1c:36:26:a3:39:e8:a6:ba:9e:0c:3a:
39:1d:91:d5:59:8f:5f:05:07:06:c1:bd:8d:22:6e:64:c3:56:
a6:77:68:96:47:c7:b3:2b:40:aa:20:af:5a:bb:80:cd:30:fb:
f8:9b:88:7b:d5:50:c2:14:e1:aa:91:56:12:fa:d8:09:0c:ae:
22:7f:ea:80:01:44:8f:1f:e7:a5:f0:7b:18:da:00:aa:8a:1d:
fc:15:b8:3e:ef:cf:e6:30:7a:c3:23:ec:3c:eb:7c:41:d6:f1:
67:35:0a:8e:92:7c:a6:5e:5a:cc:bb:7c:bf:b7:fc:90:e5:71:
2e:16:54:bc:06:d3:8b:ac:9a:5f:e6:98:f0:b5:9b:7c:c2:51:
33:ff:0f:de:91:ce:b1:c8:21:3e:c8:1e:e4:67:9c:c3:ad:50:
92:71:31:42:e6:1d:82:00:fa:e2:f7:eb:a7:f7:9e:ae:f1:43:
fb:02:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:30 2026 by rpki-client