Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
File: lWmTFkJJYHEcLo7LU2vdArxyT60.mft (raw, json)
Hash identifier: jvOUKaMUaXOZX6/Plrc6/uYgf3cr0cx+27VXJ7+mcXQ=
Subject key identifier: A9:C3:B9:2A:D6:52:DF:37:B8:4A:3A:C1:01:C6:F0:4A:93:83:45:D0
Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad
Certificate serial: 019CAC7DE8CFE48F8342DDABA30EE65C8990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
Manifest number: 06C0
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: lWmTFkJJYHEcLo7LU2vdArxyT60.crl (hash: 97AQash/rQeoUjJQ8yvFwW89B6Urrzd4Y6QYOhDm7Fc=)
2: t8SQMGrl26r1gRo4N2MntzBn8Fo.roa (hash: KLhgVuuIFKpUzDmtTgaR/z7BuurCfK28TIL8+NxxxH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e8:cf:e4:8f:83:42:dd:ab:a3:0e:e6:5c:89:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=a9c3b92ad652df37b84a3ac101c6f04a938345d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:94:e7:1e:2e:27:28:57:87:20:a7:41:56:
4d:95:a7:c5:0e:2f:54:74:06:2b:a8:99:91:1f:9f:
e1:e5:e9:57:33:c1:28:66:a9:e3:56:f8:95:6d:39:
23:b2:76:31:55:1f:3f:19:ff:81:4f:1d:57:51:69:
74:82:9c:13:0e:8e:83:97:30:ed:aa:33:f1:47:78:
a8:a1:4d:9c:d0:2b:2d:61:19:35:ae:26:c7:0e:82:
b2:b4:46:48:e7:e4:be:f2:90:39:74:92:f4:62:1a:
48:1e:76:6c:a8:e8:89:bf:e3:1c:bc:4f:58:a3:a7:
ce:24:6b:33:7a:0f:b0:04:7f:95:24:a5:e7:7f:88:
72:3e:5c:87:b9:ee:43:1c:95:5a:a8:cd:70:39:e6:
fc:8e:1d:5a:71:51:ec:44:bc:6d:e9:80:77:28:e4:
8b:49:ce:53:de:92:8a:6c:88:21:65:c8:ca:45:1e:
25:f9:18:2a:6a:01:74:89:9a:aa:a7:ec:41:ba:92:
ba:47:5e:c3:92:24:39:61:87:7f:47:d6:2b:bb:67:
c4:8b:50:7e:5d:75:db:8a:af:0c:b6:40:53:a7:4b:
e4:fa:83:f1:27:0e:00:4c:1e:c2:cb:6d:4a:33:0b:
30:58:f1:96:d6:21:ee:df:ea:82:89:6f:e1:40:37:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:B9:2A:D6:52:DF:37:B8:4A:3A:C1:01:C6:F0:4A:93:83:45:D0
X509v3 Authority Key Identifier:
keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:90:62:af:d0:18:f8:44:95:0e:1f:10:dd:d7:54:85:82:
8d:71:f8:eb:88:5c:f5:c1:47:9f:38:29:3c:f5:91:33:c7:65:
c6:46:a4:01:a4:a4:46:dc:0a:ed:0f:aa:96:d0:0e:6a:d2:90:
9d:6f:b6:d0:24:7d:15:c7:ed:0b:6b:80:20:0b:75:f7:d2:82:
d9:0a:b7:56:61:fd:c8:bd:77:11:f9:f1:de:35:69:eb:59:d8:
69:2a:cc:60:26:c8:51:ed:4f:3f:5c:ad:c6:9e:83:9a:29:c8:
18:eb:39:54:89:32:d2:1d:a8:89:59:77:6b:09:f4:f3:68:1b:
55:98:d0:a8:4c:33:f7:d8:d0:90:e5:4c:ff:b6:19:55:ff:e1:
03:34:27:be:08:01:3b:8b:d5:b2:c5:9e:3e:95:11:53:94:d4:
74:46:e9:82:75:59:b9:93:5f:bc:3c:8d:6d:32:57:71:92:89:
da:1c:74:81:ef:41:99:50:e7:83:70:4e:14:e9:7b:70:2e:5e:
ac:9b:aa:85:2f:86:36:09:58:ec:21:f5:10:04:1a:86:31:fe:
b3:da:43:ae:93:01:7d:72:f8:97:5c:0f:0e:59:3e:fd:21:c7:
f3:15:1d:c8:73:23:a8:11:84:41:71:91:6a:2b:2c:d5:00:49:
50:6f:fe:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfejP5I+DQt2row7mXImQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njk5MzE2NDI0OTYwNzExYzJlOGVjYjUzNmJkZDAyYmM3
MjRmYWQwHhcNMjYwMzAyMDMwMDU4WhcNMjYwMzAzMDMwMDU4WjAzMTEwLwYDVQQD
EyhhOWMzYjkyYWQ2NTJkZjM3Yjg0YTNhYzEwMWM2ZjA0YTkzODM0NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n+U5x4uJyhXhyCnQVZNlafFDi9U
dAYrqJmRH5/h5elXM8EoZqnjVviVbTkjsnYxVR8/Gf+BTx1XUWl0gpwTDo6DlzDt
qjPxR3iooU2c0CstYRk1ribHDoKytEZI5+S+8pA5dJL0YhpIHnZsqOiJv+McvE9Y
o6fOJGszeg+wBH+VJKXnf4hyPlyHue5DHJVaqM1wOeb8jh1acVHsRLxt6YB3KOSL
Sc5T3pKKbIghZcjKRR4l+RgqagF0iZqqp+xBupK6R17DkiQ5YYd/R9Yru2fEi1B+
XXXbiq8MtkBTp0vk+oPxJw4ATB7Cy21KMwswWPGW1iHu3+qCiW/hQDfd+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnDuSrWUt83uEo6wQHG8EqTg0XQMB8GA1UdIwQY
MBaAFJVpkxZCSWBxHC6Oy1Nr3QK8ck+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMjBlZjktMzU0MS00MzIxLTgwZmYt
Zjg1YzYwYmUzNDBkLzEvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMjBlZjktMzU0MS00MzIxLTgwZmYtZjg1YzYwYmUzNDBk
LzEvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEz6QYq/Q
GPhElQ4fEN3XVIWCjXH464hc9cFHnzgpPPWRM8dlxkakAaSkRtwK7Q+qltAOatKQ
nW+20CR9FcftC2uAIAt199KC2Qq3VmH9yL13Efnx3jVp61nYaSrMYCbIUe1PP1yt
xp6DminIGOs5VIky0h2oiVl3awn082gbVZjQqEwz99jQkOVM/7YZVf/hAzQnvggB
O4vVssWePpURU5TUdEbpgnVZuZNfvDyNbTJXcZKJ2hx0ge9BmVDng3BOFOl7cC5e
rJuqhS+GNglY7CH1EAQahjH+s9pDrpMBfXL4l1wPDlk+/SHH8xUdyHMjqBGEQXGR
aiss1QBJUG/+jQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:34 2026 by rpki-client