Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: mg5A/I56ryjCr/HnWudX5nsdHrp7DkIsg2XL8pfwhaU=
Subject key identifier: 09:6E:0E:FA:8D:31:EA:8F:E2:68:4C:DF:2D:29:82:75:68:CE:94:F7
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 019CAA21A43FC7DDC78E5BD5B4BCF9079791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: NUAzeiweOuAdospdZKprFcrpT_A.roa (hash: 1ElfmDWVh8gEsGgcrn15DX/GYQtHYpQEuEeNVWQ/qKA=)
2: eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa (hash: zDufrnp/lRdYw6z5myv4nDWlvesG8imRXgNlxsEXDkk=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: tsZJhhj+IkyQLEb+fyWzyRO5IH7zwmbEzdixbsAdoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a4:3f:c7:dd:c7:8e:5b:d5:b4:bc:f9:07:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=096e0efa8d31ea8fe2684cdf2d29827568ce94f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:a1:e2:8b:73:b3:72:f8:e3:da:b8:6d:f4:
63:49:6c:c8:1a:56:77:5b:73:2f:29:55:c2:8d:c7:
e8:11:f1:9f:1b:a7:ee:b3:dc:22:db:52:50:d4:5e:
80:5c:e1:ca:68:f5:5e:04:be:29:e7:27:a7:8d:26:
24:0e:4c:4e:51:da:5d:42:14:0b:21:3c:62:12:e5:
c2:70:b0:e9:37:1d:ff:1e:b7:91:3c:5f:41:07:91:
06:3b:cd:3c:36:1d:27:f1:2d:fc:af:cd:1c:eb:0a:
30:52:4c:60:42:c6:9a:2c:c8:15:55:5c:26:da:25:
8e:22:41:b8:e0:b9:44:92:4c:f5:e6:cb:7f:d6:1c:
97:ba:82:23:a4:2c:83:f9:91:59:38:9d:94:3a:58:
20:d7:de:b3:55:aa:3a:7b:8a:01:59:f2:af:bb:47:
69:33:38:c5:a7:71:84:f2:6e:6a:13:77:47:3f:2a:
0a:df:9e:b6:d9:5f:f6:e6:91:4d:f1:a9:c0:4c:bb:
65:ec:b9:02:d1:2b:01:d6:c2:1a:fe:c7:ec:4f:ad:
fe:b4:aa:be:dc:05:bf:e7:23:cb:05:74:55:3f:75:
2a:87:fd:af:3c:f4:6e:17:25:45:69:04:78:7b:35:
9f:d8:c6:d9:fb:f1:8c:f1:3a:fe:93:5e:89:80:73:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:0E:FA:8D:31:EA:8F:E2:68:4C:DF:2D:29:82:75:68:CE:94:F7
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:89:c6:cb:03:96:c9:24:07:ca:60:ba:47:af:c2:37:00:86:
34:05:a7:b4:b9:16:a0:0d:e9:d8:15:fd:e7:eb:5d:b7:f1:69:
fd:27:7b:53:08:7a:fa:46:b4:01:c0:ae:52:1f:b6:da:07:86:
d3:56:9a:a5:83:d3:16:d2:43:54:50:47:61:e4:fc:f4:bc:98:
d2:af:ae:68:58:35:a8:4b:9d:6f:e7:7f:55:ba:42:c7:61:d5:
00:16:f9:47:df:6c:01:b4:70:de:9c:e5:8a:7d:ce:66:22:e6:
0b:7b:c2:da:91:79:5b:b5:4c:76:76:63:c0:36:96:29:3d:47:
e4:b4:34:0a:e8:65:56:96:f5:44:7c:22:c3:4d:3d:a9:61:34:
10:98:27:93:44:0d:0b:a8:aa:09:8b:23:b8:cb:32:9e:78:f4:
e3:5c:2d:94:ba:50:ce:b2:37:23:a5:0a:06:d6:5e:3b:b4:30:
b6:09:1b:d1:ad:00:b3:27:1e:d5:48:95:0f:be:90:29:79:55:
1e:3e:3a:75:4a:4c:1b:a1:ae:18:91:42:df:9a:26:fb:7c:b5:
0b:40:77:3f:e9:09:e8:84:fe:00:68:30:9d:0d:a9:ad:74:88:
05:ae:3f:b3:1a:67:0e:2c:c6:cd:1a:ab:2d:fa:6e:f2:af:a0:
aa:a1:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:45 2026 by rpki-client