Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: kv9o1lweCL5Ij6F+eiyL+3vDC+Yvvb4n1ZTuhhU0fZU=
Subject key identifier: 0D:A8:4D:9A:2F:85:FC:06:D3:14:DF:CB:3C:EB:EA:FD:68:E4:BB:56
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 019CABD96C34187ED1DBEFCA85695792923A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 1801
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: konyG3wRd-9i2JxpDmlDMCcy52k.roa (hash: 86FDIPp0O4UJXQA6vPE/wehrfqe3i/KwXCUD7kRjVEo=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: Y3AF5D+SiZKR7hGQpqyDGx8+fB91pXEzIcVLgdef8vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6c:34:18:7e:d1:db:ef:ca:85:69:57:92:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=0da84d9a2f85fc06d314dfcb3cebeafd68e4bb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:de:93:fa:a7:c9:2c:3e:29:bb:38:60:95:
52:c2:65:fc:90:6e:5c:67:c2:6d:25:2c:30:36:97:
cf:ad:42:d7:fe:c5:aa:53:49:d7:e3:d2:be:71:e5:
b8:46:58:6b:54:ca:d0:f9:48:b8:a2:61:86:95:89:
0b:a6:77:d1:b4:95:90:fe:04:c7:5b:81:59:5f:8a:
eb:0e:f8:54:0c:cd:d3:33:47:ec:3a:90:dc:4a:84:
22:5d:62:f4:a2:29:0d:f0:7a:3f:ba:6d:e0:35:4d:
29:a0:03:13:07:94:90:c4:b0:9a:63:6b:ed:f4:8c:
cb:07:2a:c2:03:5b:ed:51:f1:3b:a3:d2:6f:62:fe:
d5:7f:a5:46:59:89:42:e4:46:58:4e:a0:b6:f8:b4:
42:a4:5e:80:f9:b9:01:de:c1:37:06:3c:8e:31:b3:
e6:80:e0:b8:24:db:b3:4e:12:aa:8d:27:60:50:61:
4e:25:66:00:db:57:0c:c4:4e:ae:69:27:52:b0:00:
b2:b9:30:10:74:1e:a6:ce:f8:c3:92:6c:4d:dc:48:
19:60:69:74:93:02:17:4c:de:fd:61:23:8a:1d:c6:
35:2c:96:1a:ee:22:53:8f:7b:3d:16:0a:b1:c0:ce:
e4:e3:32:19:2a:75:96:dc:d8:a4:a4:81:27:b2:ce:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:4D:9A:2F:85:FC:06:D3:14:DF:CB:3C:EB:EA:FD:68:E4:BB:56
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b7:b6:57:cb:ec:76:e2:10:21:f7:df:1d:f1:cc:e5:3c:d4:
12:20:81:a1:63:ac:95:bd:08:43:8f:f2:43:79:c3:ff:b4:18:
26:c0:35:82:42:3f:41:08:92:29:9b:94:85:fd:21:7f:70:f7:
bc:6a:af:0c:b2:5c:3d:fa:2f:bc:f5:59:bc:3e:11:a6:e4:15:
f4:07:78:54:2d:60:c4:91:57:29:ca:ea:b6:28:9f:e9:bc:fb:
ab:39:6e:d4:d2:3f:16:e5:68:3c:11:db:f1:47:5d:0c:d6:d7:
ab:a2:9e:8d:2c:b0:71:c5:1f:f5:37:04:ad:ed:64:41:27:0b:
0c:b4:27:c5:11:43:44:2b:60:31:aa:0c:5c:40:3d:13:f5:6d:
99:dc:75:ab:62:b5:07:dd:12:6a:fd:b4:75:e7:7d:c4:6e:18:
37:84:79:27:91:c9:96:08:b5:85:1d:a5:90:2d:8b:03:40:c0:
83:44:36:92:20:47:2d:85:43:04:90:e0:33:85:33:72:79:75:
5e:5b:d8:15:ac:a1:63:c5:ff:a0:bd:29:32:68:79:01:ab:3c:
22:a4:37:cb:e7:7d:16:34:3a:a7:51:bf:93:87:b1:76:23:83:
ee:90:03:72:df:67:cc:55:56:d9:3f:c7:2e:8e:33:44:91:a4:
b9:bd:6f:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Ww0GH7R2+/KhWlXkpI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh
NjM0NDIwHhcNMjYwMzAyMDAwMTE4WhcNMjYwMzAzMDAwMTE4WjAzMTEwLwYDVQQD
EygwZGE4NGQ5YTJmODVmYzA2ZDMxNGRmY2IzY2ViZWFmZDY4ZTRiYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojzek/qnySw+Kbs4YJVSwmX8kG5c
Z8JtJSwwNpfPrULX/sWqU0nX49K+ceW4RlhrVMrQ+Ui4omGGlYkLpnfRtJWQ/gTH
W4FZX4rrDvhUDM3TM0fsOpDcSoQiXWL0oikN8Ho/um3gNU0poAMTB5SQxLCaY2vt
9IzLByrCA1vtUfE7o9JvYv7Vf6VGWYlC5EZYTqC2+LRCpF6A+bkB3sE3BjyOMbPm
gOC4JNuzThKqjSdgUGFOJWYA21cMxE6uaSdSsACyuTAQdB6mzvjDkmxN3EgZYGl0
kwIXTN79YSOKHcY1LJYa7iJTj3s9FgqxwM7k4zIZKnWW3NikpIEnss7PuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2oTZovhfwG0xTfyzzr6v1o5LtWMB8GA1UdIwQY
MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt
ZDgxOTc5NGEzMmEzLzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz
LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7e2V8vs
duIQIfffHfHM5TzUEiCBoWOslb0IQ4/yQ3nD/7QYJsA1gkI/QQiSKZuUhf0hf3D3
vGqvDLJcPfovvPVZvD4RpuQV9Ad4VC1gxJFXKcrqtiif6bz7qzlu1NI/FuVoPBHb
8UddDNbXq6KejSywccUf9TcEre1kQScLDLQnxRFDRCtgMaoMXEA9E/Vtmdx1q2K1
B90Sav20ded9xG4YN4R5J5HJlgi1hR2lkC2LA0DAg0Q2kiBHLYVDBJDgM4Uzcnl1
XlvYFayhY8X/oL0pMmh5Aas8IqQ3y+d9FjQ6p1G/k4exdiOD7pADct9nzFVW2T/H
Lo4zRJGkub1vKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:17 2026 by rpki-client