Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: kU4EojsccN5IYLhrncvk8g8/3vgoPv98xZSCH6r77y8=
Subject key identifier: 81:03:C6:12:36:AE:AC:F3:C4:D2:FB:93:72:BF:F1:F6:1B:A7:E3:98
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 019CA97D0ED43627E5CCDF1FB986BBC7AF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 1602
Signing time: Sun 01 Mar 2026 13:01:11 +0000
Manifest this update: Sun 01 Mar 2026 13:01:11 +0000
Manifest next update: Mon 02 Mar 2026 13:01:11 +0000
Files and hashes: 1: ME-WSg_qDtNY1enNt8ZxubiSk_k.roa (hash: FTTWPKUGtwY38rjYU+89HgDF4DYinIX0Sq5ZBNPIMPU=)
2: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: eCUHwJCNMnoUHq9fiQeGk8zxd6I6Rjml4iaOqK91odg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:0e:d4:36:27:e5:cc:df:1f:b9:86:bb:c7:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Mar 1 13:01:11 2026 GMT
Not After : Mar 2 13:01:11 2026 GMT
Subject: CN=8103c61236aeacf3c4d2fb9372bff1f61ba7e398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:8d:b1:eb:38:46:7c:f8:aa:87:55:3c:06:
24:73:88:b7:38:67:20:95:d9:52:94:ea:ed:ad:0b:
59:8c:88:e0:bb:ad:4c:45:60:52:83:8d:bc:e0:40:
c7:1a:78:ed:eb:35:6e:d0:fd:34:8c:aa:d2:9f:64:
21:67:b6:59:d0:70:5a:85:b3:24:ef:66:78:67:39:
ba:5a:d4:9a:2d:c1:92:9e:9c:aa:71:2a:f0:fe:8c:
1c:f5:c9:2b:4d:78:79:68:ac:20:22:07:01:88:da:
3d:45:e7:c5:c2:5c:51:ba:75:a6:3c:f7:04:f4:13:
74:75:56:56:6e:4e:a2:ef:82:60:de:99:69:ca:8d:
d1:58:c7:7c:19:5f:ea:de:13:bf:a6:36:e6:b1:52:
c7:90:2a:d0:8d:a8:0e:4b:a0:8c:bd:87:4b:1d:49:
49:5e:80:c8:45:f6:04:09:01:fd:9f:90:a6:ce:ed:
42:4e:cd:23:b0:b3:a0:f9:c8:b2:ec:f7:d7:59:02:
5f:08:1b:4f:bb:ae:34:ea:45:ff:ce:b6:73:ce:12:
67:a2:19:0a:53:39:a9:15:82:d3:de:66:0c:df:6d:
74:4a:22:35:51:50:be:fd:de:20:17:f5:7e:3e:f1:
4a:e8:3c:0c:1b:df:aa:34:e2:bc:c2:5c:e7:73:9d:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:C6:12:36:AE:AC:F3:C4:D2:FB:93:72:BF:F1:F6:1B:A7:E3:98
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:17:0c:49:21:ed:21:c1:a4:7b:79:9a:06:74:b7:82:38:43:
e4:87:7a:76:c1:e4:6f:01:c2:d0:de:1c:d0:e2:b8:db:66:e0:
8e:da:ce:90:27:1d:e5:52:23:3d:90:c3:51:ca:28:20:b7:93:
6e:47:7f:ee:87:f2:68:17:f1:7e:b0:5b:ee:8d:ff:ab:e1:68:
2b:ac:08:6b:cc:3d:ec:44:41:f6:60:09:e7:7b:9f:81:bf:ce:
0e:95:b1:c8:8e:79:aa:e2:55:09:a2:52:be:b6:f6:85:6c:96:
fa:11:c8:8a:eb:76:4b:c2:1a:cb:c0:b3:33:52:4c:dc:5c:c2:
ef:ab:c2:f7:ae:ab:48:2a:39:bd:1c:98:50:d3:bc:d5:94:02:
ef:c4:7e:a9:68:84:6b:6a:fe:b4:f2:79:c4:2d:72:a2:e3:9b:
99:cf:03:e1:6c:d2:9f:2b:42:36:9f:40:fc:de:33:cc:9c:43:
8c:36:7a:31:8e:1c:05:f2:43:ed:af:6f:a4:07:54:72:e2:51:
8a:7b:ad:ce:a7:c3:b1:df:b6:f1:bd:66:2b:89:9a:c7:cb:51:
c2:ee:96:5c:ae:ae:40:8c:bc:66:e2:c3:ae:2a:c6:bd:c3:58:
31:14:e5:dc:c9:9d:26:84:5c:ab:31:b0:79:ef:52:a0:22:f4:
83:a3:3b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfQ7UNiflzN8fuYa7x6+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjYwMzAxMTMwMTExWhcNMjYwMzAyMTMwMTExWjAzMTEwLwYDVQQD
Eyg4MTAzYzYxMjM2YWVhY2YzYzRkMmZiOTM3MmJmZjFmNjFiYTdlMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvCNses4Rnz4qodVPAYkc4i3OGcg
ldlSlOrtrQtZjIjgu61MRWBSg4284EDHGnjt6zVu0P00jKrSn2QhZ7ZZ0HBahbMk
72Z4Zzm6WtSaLcGSnpyqcSrw/owc9ckrTXh5aKwgIgcBiNo9RefFwlxRunWmPPcE
9BN0dVZWbk6i74Jg3plpyo3RWMd8GV/q3hO/pjbmsVLHkCrQjagOS6CMvYdLHUlJ
XoDIRfYECQH9n5Cmzu1CTs0jsLOg+ciy7PfXWQJfCBtPu6406kX/zrZzzhJnohkK
UzmpFYLT3mYM3210SiI1UVC+/d4gF/V+PvFK6DwMG9+qNOK8wlznc534PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEDxhI2rqzzxNL7k3K/8fYbp+OYMB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchcMSSHt
IcGke3maBnS3gjhD5Id6dsHkbwHC0N4c0OK422bgjtrOkCcd5VIjPZDDUcooILeT
bkd/7ofyaBfxfrBb7o3/q+FoK6wIa8w97ERB9mAJ53ufgb/ODpWxyI55quJVCaJS
vrb2hWyW+hHIiut2S8Iay8CzM1JM3FzC76vC966rSCo5vRyYUNO81ZQC78R+qWiE
a2r+tPJ5xC1youObmc8D4WzSnytCNp9A/N4zzJxDjDZ6MY4cBfJD7a9vpAdUcuJR
inutzqfDsd+28b1mK4max8tRwu6WXK6uQIy8ZuLDrirGvcNYMRTl3MmdJoRcqzGw
ee9SoCL0g6M7Rw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:02 2026 by rpki-client