Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: 2D4tp8qvPhg+ElLc6i3F7FVVrRu9DdFFTmuBOrfW/sw=
Subject key identifier: B2:F2:AF:43:8D:10:8A:8E:47:52:BA:63:A0:DD:ED:24:A3:80:82:8B
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019CAB34AF1A3C47D2F96FF5746B131D548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1401
Signing time: Sun 01 Mar 2026 21:01:22 +0000
Manifest this update: Sun 01 Mar 2026 21:01:22 +0000
Manifest next update: Mon 02 Mar 2026 21:01:22 +0000
Files and hashes: 1: 1zl8hvX3_gPGXE5X8R_qEDtuWNE.roa (hash: fVmkH8rl9RfajUFgYehLLo2+tJYzAA36TeZ8+xZ0XpI=)
2: Da5LxG19Yw6xhI6ZJi1ReVDgTQY.roa (hash: eUEOcJxF25gsT7/MsFXHCve7nn05zSmOBLGby7gQmpo=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: nXTq7iV5uhYsnm9TkCjpwderTX/s0TVzU3ItGWA4aOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:af:1a:3c:47:d2:f9:6f:f5:74:6b:13:1d:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Mar 1 21:01:22 2026 GMT
Not After : Mar 2 21:01:22 2026 GMT
Subject: CN=b2f2af438d108a8e4752ba63a0dded24a380828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:9c:ec:31:ac:bb:21:1b:c7:b2:fe:7e:9c:
87:ac:8b:dd:9c:30:bc:8a:31:b9:d9:c6:34:2f:f3:
a2:55:06:a8:e6:41:5a:b2:d7:3c:ae:58:6d:26:8c:
b6:b8:10:4c:87:72:fd:32:29:5f:b1:1b:f4:e7:3c:
63:4f:ba:f8:2e:45:b2:cd:f5:44:7a:db:08:83:ee:
92:21:8b:18:73:de:cd:2e:c8:13:94:07:ba:4a:e6:
2e:d3:9a:ea:fc:93:19:b6:e5:5e:d2:5a:a9:3d:7a:
00:29:39:18:31:08:8f:e8:6f:77:59:40:87:de:65:
b1:49:6c:37:d0:7f:34:16:d3:24:ff:f2:f4:f7:5a:
a4:8a:0c:2a:a3:c0:c9:3a:92:a5:c5:dc:50:a4:79:
18:7c:9a:db:b9:26:8d:3d:99:5f:fd:61:02:82:4a:
a0:2f:d4:60:7a:45:02:8c:8b:7f:90:76:04:8c:99:
3b:e6:e6:8a:7b:a8:84:8f:68:20:a3:a2:0d:a7:30:
d5:8d:e1:e4:21:cb:5a:8a:63:8d:52:34:39:a8:49:
ab:f0:3a:7e:d2:77:7f:d2:07:d4:12:f7:af:3f:00:
66:6e:cd:84:8d:46:8a:6d:96:0b:ee:e7:d5:96:12:
3f:71:e2:0a:75:dd:13:d2:7f:bb:08:1c:c5:44:63:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:AF:43:8D:10:8A:8E:47:52:BA:63:A0:DD:ED:24:A3:80:82:8B
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:9b:b7:16:61:39:68:79:1b:73:c5:2d:c4:55:86:82:91:
f4:6e:aa:88:02:0a:e3:75:bb:01:7d:a4:45:23:7a:f6:8b:f1:
d8:e3:de:33:56:07:61:2c:7f:f5:d9:99:66:84:0c:01:c7:92:
4b:9c:bd:e1:57:fa:4c:cc:4a:dc:f2:69:07:72:d0:1e:14:e6:
e1:50:dd:45:46:4b:29:57:0d:f3:84:65:71:25:7b:dc:ea:99:
c4:17:b5:fa:66:22:d4:fc:2d:a6:49:de:58:3a:ae:aa:e8:27:
4f:3d:7f:a9:91:77:44:6e:65:d3:fd:16:26:09:fe:c7:50:92:
e1:69:99:97:8a:5a:4f:4b:b7:ba:a6:f4:e8:6e:95:68:81:38:
b2:e0:f9:e8:2e:7d:c4:30:ad:d5:c5:84:f1:a0:50:6a:37:47:
79:8c:dd:2f:1b:b4:ae:ce:58:db:3a:d3:57:e5:81:98:db:a9:
74:08:6d:e8:fc:10:f5:d0:6b:cd:be:fa:73:43:01:4f:e5:4a:
95:ad:cf:0b:67:2c:56:d9:32:ed:f0:cf:75:f3:05:c3:69:13:
92:9d:3a:24:d1:55:43:b8:75:b4:7f:a9:06:01:b1:c4:23:39:
0c:3e:ae:f0:d6:c2:86:b6:cc:66:d4:fa:15:ef:4b:9a:20:b8:
59:cf:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:16 2026 by rpki-client