Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: d81GClVSna/O51va52w8R3GguXX10w1a5nhUm2wnk1E=
Subject key identifier: 94:99:BB:DB:B0:54:8D:AC:00:06:49:52:26:05:17:EC:F9:B3:7C:42
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019CACB531478B784EA64A36090414996BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 073E
Signing time: Mon 02 Mar 2026 04:01:21 +0000
Manifest this update: Mon 02 Mar 2026 04:01:21 +0000
Manifest next update: Tue 03 Mar 2026 04:01:21 +0000
Files and hashes: 1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: UZ6LM9QnekGywPa4ifgpmtw9+Ncb58RNIF4E2VSXiyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:31:47:8b:78:4e:a6:4a:36:09:04:14:99:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Mar 2 04:01:21 2026 GMT
Not After : Mar 3 04:01:21 2026 GMT
Subject: CN=9499bbdbb0548dac00064952260517ecf9b37c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:1e:5d:85:ec:8c:d2:80:ee:ae:89:0e:22:
a5:b6:d9:83:0d:9b:ee:5d:7d:fe:d9:84:ae:c3:1b:
7d:94:7c:78:0a:b8:56:20:aa:e8:e2:58:c0:0a:3f:
c0:f0:bc:97:cc:c0:6d:53:df:00:68:7c:d8:4d:8e:
b3:d6:03:84:7e:27:29:66:a5:6f:f2:01:2e:db:c6:
41:22:eb:87:1a:d5:7a:d2:2e:d9:c8:57:fd:92:e6:
9b:6b:f9:bf:ea:ca:8e:56:50:28:27:98:b8:8a:b6:
51:46:9e:bc:f8:64:44:b0:b3:ca:8e:fc:fd:ed:b1:
71:8c:37:dc:7b:32:67:24:47:40:1b:74:2b:85:23:
55:99:87:8f:75:c3:05:f8:f4:c8:ab:3e:09:6d:9d:
2b:39:58:45:1f:a4:fc:f9:08:0c:2b:21:cc:b7:b9:
e2:9b:91:66:a2:fa:60:9f:93:a2:a9:e4:eb:59:5a:
61:34:62:92:8f:62:a4:7f:a8:fe:d9:1a:08:3c:24:
81:63:b7:69:b2:d5:39:04:c8:d8:2a:b2:6e:cc:2e:
80:05:cf:21:24:bd:16:19:43:d3:d2:c9:5c:2b:c3:
8b:cf:09:bf:11:83:80:65:e5:62:0c:c4:1a:e3:a4:
0f:f4:ea:45:0a:1a:71:53:e5:89:28:d8:a9:7a:15:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:BB:DB:B0:54:8D:AC:00:06:49:52:26:05:17:EC:F9:B3:7C:42
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c3:e3:7e:1b:9b:dc:79:e5:fb:80:93:71:36:d2:4a:7f:e1:
59:99:40:22:f6:85:29:6f:22:fb:57:85:45:ec:98:72:ad:a4:
6b:58:4f:18:95:2c:2e:eb:6c:63:2c:9f:ed:54:d4:30:5c:ae:
4f:38:fd:26:a1:75:45:9e:fb:09:66:28:64:2f:5d:ed:33:a0:
57:65:fd:58:3c:7c:7c:64:4a:42:92:49:c7:58:6b:c6:0f:30:
08:1e:b5:f2:9d:16:23:77:c2:f3:dc:7f:fe:e6:69:03:c8:dd:
39:e8:55:6a:cf:01:d9:c1:48:12:9c:21:a8:55:c1:e3:c8:36:
83:57:8c:15:60:fe:b6:12:b2:5a:d9:f6:bd:65:4e:83:91:bf:
ee:42:fd:6b:ee:ad:30:27:e2:51:58:68:5c:e1:8c:c1:a0:2e:
ef:7b:39:3a:3d:cb:31:0f:2e:4c:32:fa:1b:06:16:dd:0c:3c:
8e:d1:19:d8:46:3a:54:59:ef:fa:d3:d0:12:1d:78:33:e9:4f:
24:ec:50:ef:a7:11:ad:79:cd:f0:ce:ad:0b:68:71:0a:ba:50:
6b:7c:62:5a:0e:81:43:a1:d3:bc:06:fc:5e:70:68:ec:a9:c9:
d8:47:9d:ed:f5:29:a0:95:9b:a2:cd:d6:68:9d:2a:d5:99:b0:
43:b5:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:57 2026 by rpki-client