Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: w2Ril05jodEbOdZAlq4TrVle5bEo4zpKz/Xl7hhW6Sg=
Subject key identifier: C3:41:DB:4A:74:98:D5:D2:46:67:05:F7:95:33:DD:7D:E7:B8:61:50
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 019CAAC6C24BBA6E38F001AACB29CA9A13DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 0586
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: Hta8j7g7G7s7eVG9Xtl7ZmVGmVIcB1teAMwDIDtbQw8=)
2: nbxib9e8VbJ8d-n9VXgUOSoB7ew.roa (hash: BSCbUo+BwOOhYIZHjykMAuVC2rv0/uSGrGXGa+iP2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c2:4b:ba:6e:38:f0:01:aa:cb:29:ca:9a:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=c341db4a7498d5d2466705f79533dd7de7b86150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:8b:43:4d:47:be:67:e9:d0:14:99:2e:20:
6e:75:16:20:56:b6:dc:6f:9c:8a:a4:8a:aa:f4:0a:
84:85:32:71:4d:18:fb:f6:71:2b:a9:e7:85:a5:b8:
e9:e9:29:d1:98:75:2f:a1:2f:41:3b:ca:1e:d2:87:
87:16:81:4d:0e:c8:ab:8a:f7:03:ae:a6:8e:4d:d2:
58:90:4d:73:8f:9e:9d:0e:bc:26:7d:c7:8b:c7:fb:
f5:04:a5:18:d4:ea:ab:36:ea:97:e4:c3:b2:73:d2:
41:7d:b4:6d:77:bd:72:32:8e:d4:6a:dc:96:89:60:
85:b3:01:49:3d:44:5e:64:5b:b1:dc:ab:8e:61:d9:
1d:24:40:00:8b:8c:bd:d3:aa:dc:f2:cb:66:d7:bf:
51:7b:4e:aa:63:2b:1b:2a:6b:86:2b:f7:48:28:2d:
55:56:cc:47:13:2b:4f:c1:a3:5c:b2:1f:84:17:3f:
cb:d5:2e:78:ca:23:5d:fc:8b:e2:63:30:c9:0a:2b:
93:05:30:7c:c4:fc:42:62:6b:ec:42:b8:de:0f:99:
4f:a2:82:dc:0c:6f:f0:2d:ec:22:01:d3:0a:3d:44:
fc:9f:c0:33:13:1c:38:25:f7:b3:27:2a:a1:4c:f6:
93:34:ae:4e:c0:ca:d6:e3:8f:d7:db:72:57:15:ce:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:DB:4A:74:98:D5:D2:46:67:05:F7:95:33:DD:7D:E7:B8:61:50
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4d:77:1b:c3:01:8e:b1:0d:8e:d2:64:e3:d9:a7:b0:76:95:
37:21:09:11:4f:83:82:7d:db:cb:0f:15:b2:2b:64:99:09:3f:
b4:3b:3f:12:59:22:15:d7:cc:22:22:af:d8:e4:95:98:00:74:
67:94:1b:9e:29:a4:49:4b:8b:9c:64:d6:f1:40:b3:4b:0c:d7:
26:62:0d:6e:bf:94:70:7e:ef:fc:4c:87:53:80:7d:55:9d:0e:
49:d8:ad:4b:7b:2c:21:77:71:72:56:48:e6:4a:d3:e3:f6:b7:
58:65:dc:a7:c7:56:57:93:07:a7:7a:6f:b2:6d:00:e9:d6:83:
55:55:3c:b5:61:14:ed:ff:5a:f4:90:a9:6e:7c:43:1a:4b:2d:
63:05:65:e5:ac:60:ef:56:97:37:d1:05:30:a8:b5:be:ec:7d:
a7:c0:34:b4:9c:76:23:3d:7f:c1:bc:59:41:17:8b:13:b5:37:
4b:60:ef:20:7a:9a:8d:3f:13:e0:b4:7e:0d:07:15:16:f0:f3:
af:34:22:77:cd:cb:25:34:54:a3:08:cb:00:1f:c7:c6:d9:f2:
f6:03:e7:69:e0:2d:56:49:a6:19:28:aa:8d:7c:b9:ca:39:e7:
16:54:1f:d8:6f:31:da:23:44:a1:6c:90:db:45:bd:01:ac:11:
15:79:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:55 2026 by rpki-client