Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: oQ14O+hAOX8j5jMHCWKBm76KpRqxpKrIqmq1kPpaZj4=
Subject key identifier: DA:8E:62:FE:C8:A8:72:B9:4A:E4:1A:DD:46:7D:40:E6:D7:26:ED:8C
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 019CABD984C541D99B53D0AAB739D9F15973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 0AD4
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: JmukJcLMTVnoHK721SIDdRGwjZc.roa (hash: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: 0SG5nCeX+LOaPgUpa9ECu/eEn47v6qPfSNC7R/YyNW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:84:c5:41:d9:9b:53:d0:aa:b7:39:d9:f1:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=da8e62fec8a872b94ae41add467d40e6d726ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:53:9e:ba:83:c6:dc:28:97:d7:d2:2f:3e:
68:66:e2:cd:36:08:9d:f1:28:4f:b3:7c:40:76:2f:
e3:0f:af:78:d3:8c:4e:c3:fa:f8:c8:a4:cc:63:79:
9c:77:03:a0:01:2b:49:9e:24:66:ca:95:6e:80:b5:
2a:9c:57:a9:5d:7e:5b:85:94:8b:6b:94:68:9e:06:
7f:86:3b:ea:01:66:14:e0:79:51:4f:85:51:5a:0f:
b2:6c:69:e7:53:81:6c:13:16:04:89:3e:0e:49:60:
93:60:ed:19:b0:42:12:90:18:f7:c9:69:3f:8a:f3:
94:d2:32:bc:9f:fd:be:43:2b:d9:3a:00:09:4f:99:
92:f0:c0:52:42:c4:a5:72:81:3a:9f:87:8b:e5:c4:
56:b2:f2:20:d1:19:6a:0d:27:4a:34:ba:75:80:8d:
63:c8:95:c4:04:23:bc:64:cc:2c:82:dc:97:d1:55:
91:a5:d5:18:a0:99:2b:13:57:10:56:2a:bf:e8:da:
e9:8f:0d:7e:bb:12:3d:70:ac:91:e8:1e:ca:48:98:
fb:d6:96:00:69:13:8a:92:f9:1c:a7:56:93:30:99:
7b:d1:b2:bb:aa:ce:11:71:35:69:68:e4:68:c7:3a:
34:84:9b:94:a2:74:e4:1f:91:df:27:04:3d:67:f8:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:62:FE:C8:A8:72:B9:4A:E4:1A:DD:46:7D:40:E6:D7:26:ED:8C
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c0:41:08:6e:f4:30:6a:6d:2f:8f:cc:64:de:e6:a5:18:0e:
3b:d1:7c:2c:9a:97:17:2a:b7:a8:5d:77:eb:ab:e9:28:87:25:
77:22:cc:e8:c7:aa:4d:6f:8f:d0:71:69:f4:c8:3f:dc:65:e2:
20:f9:f0:2b:e0:e7:94:64:7a:5d:a7:0d:36:de:2f:b3:7a:c2:
64:2b:09:4b:ba:ca:45:cb:a8:be:e9:42:eb:29:15:6a:51:14:
5e:ab:83:e8:98:ab:55:6f:60:92:81:16:c6:bf:6a:ce:36:72:
e5:af:c1:53:f2:57:3e:a2:01:16:25:ea:52:18:88:64:c0:65:
f4:23:02:7e:25:ca:ac:22:58:17:26:6f:39:1f:c3:3c:5e:15:
85:ed:a6:21:87:5d:f1:a8:52:9b:2b:ca:c4:fd:d0:76:d2:75:
45:21:8e:8b:31:54:5f:0d:0a:de:f4:3a:09:f8:ae:2e:99:0b:
08:0e:ad:9c:82:9d:d3:da:b3:42:bc:22:60:cb:28:5f:02:f2:
e2:d8:3f:f8:47:ce:30:60:ac:cd:df:3a:00:98:6c:e5:8e:f5:
33:1a:2a:17:53:a9:8a:95:b3:5a:0e:c1:8a:dc:19:40:24:70:
a4:cc:96:9d:c2:42:5d:e5:3b:e9:85:fb:6a:79:75:21:80:12:
41:f8:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:08 2026 by rpki-client