Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier: 3nkCFAgZ1e2a+ZclCzZNDEqzJopLLAa7rz++rtcaK8k=
Subject key identifier: E0:1F:22:AD:B3:4B:6B:1E:BB:01:58:A1:B9:98:BC:C5:E5:AD:AA:44
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial: 019CAC4771B1AC161EC7DFCBC34F688C7E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number: 08BE
Signing time: Mon 02 Mar 2026 02:01:29 +0000
Manifest this update: Mon 02 Mar 2026 02:01:29 +0000
Manifest next update: Tue 03 Mar 2026 02:01:29 +0000
Files and hashes: 1: ICqVIuqnGDQ2U9fP3d1W-e4TDf8.roa (hash: 60NTvkE84gguHU2fFEBFq8qOMCvmzn8pCex8KwPB/e0=)
2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: N224t2fvF3whoXs0F4cE0HzAUWGY2Cf9ytJI19KQOH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:71:b1:ac:16:1e:c7:df:cb:c3:4f:68:8c:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
Validity
Not Before: Mar 2 02:01:29 2026 GMT
Not After : Mar 3 02:01:29 2026 GMT
Subject: CN=e01f22adb34b6b1ebb0158a1b998bcc5e5adaa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:e5:20:70:43:f3:a5:f1:8a:74:3a:27:e4:
fa:34:3c:f5:ee:65:52:f7:53:d6:5b:1b:95:44:d6:
7b:9a:56:91:b0:e9:e0:75:b0:55:64:15:00:1d:9d:
1e:31:9e:87:09:9d:1a:8f:86:55:09:00:58:77:45:
b1:bc:16:fe:dd:96:28:b1:29:58:77:3e:da:9f:ac:
25:46:cf:06:c9:b4:1a:93:62:52:83:e2:1d:90:71:
bc:17:ec:d9:e5:3b:6c:a8:fe:23:ee:03:49:7d:f7:
c0:56:e3:76:9b:69:2f:b5:f6:f0:36:cf:a2:88:f1:
bd:29:c9:2a:be:79:45:3f:08:7e:00:9a:66:aa:b4:
6b:29:c3:91:c0:98:5e:89:aa:90:84:81:a1:c8:ba:
4d:8f:dc:e4:4b:89:1a:7c:5a:4f:61:e6:60:fb:1a:
f0:80:9f:1b:c0:70:93:ef:00:68:49:b2:92:45:a9:
c6:3e:0a:0a:59:b5:46:67:9d:a7:9f:33:e7:1e:33:
d9:db:f4:29:56:ea:9b:a2:57:24:80:04:66:7e:3e:
43:a6:6d:08:30:8d:82:91:3d:60:b8:61:7a:55:6b:
a1:7c:24:ef:16:ac:39:01:81:27:b3:b5:59:1b:c6:
05:57:ba:2e:ac:95:7d:97:f5:e2:a8:bc:9a:f1:f2:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:22:AD:B3:4B:6B:1E:BB:01:58:A1:B9:98:BC:C5:E5:AD:AA:44
X509v3 Authority Key Identifier:
keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:92:d7:ad:9f:1b:87:19:ef:3f:23:58:fe:4d:65:fb:e1:bb:
34:79:2d:19:00:ac:42:1a:41:3c:80:37:45:80:d7:2d:70:28:
60:48:bc:18:00:11:46:4e:5e:9c:cb:25:aa:d3:64:17:c9:63:
e4:c5:53:69:cd:a2:f0:9a:3e:fd:d2:ce:22:c1:c0:75:92:29:
7d:ac:48:c6:00:13:cf:77:e2:3e:9c:77:57:b6:a6:04:26:2f:
ae:47:d0:e0:83:1b:f5:71:69:89:bd:25:3b:28:56:ed:b6:58:
35:b0:f4:17:c5:c0:87:08:45:fc:b3:27:03:b8:90:9d:2f:de:
7b:9e:2e:95:0c:ec:48:f9:24:19:21:d8:b7:7e:5b:2b:74:03:
1f:27:06:91:4d:da:bc:8b:6b:1d:15:96:5e:30:7b:ad:1c:6b:
4e:68:7a:bf:f9:f5:c9:92:81:f8:53:7e:d8:f4:24:4e:91:08:
5b:ca:7c:a3:79:5b:fe:9a:90:31:ef:da:ac:b1:db:f5:79:c0:
a7:d8:25:5f:5b:cb:57:62:ea:ea:1d:7a:8f:cc:7e:3b:fd:e9:
0c:97:0b:80:b7:a2:a0:cc:7d:43:11:12:81:05:11:f8:e3:33:
cd:ef:98:d5:ca:05:7b:ca:9f:16:57:1a:60:6d:b4:33:72:8c:
c2:93:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:58 2026 by rpki-client