Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: 6FWEnKvpTIOXxUTQv88hI/umlIBUutUv4ZACqirR5zA=
Subject key identifier: A2:F3:43:A6:85:A0:61:D0:AA:C6:E9:70:47:52:97:F6:D5:13:75:90
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 019CABD9514F1F8401DC2F8EEA4771B31CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:11 +0000
Manifest this update: Mon 02 Mar 2026 00:01:11 +0000
Manifest next update: Tue 03 Mar 2026 00:01:11 +0000
Files and hashes: 1: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: zA8lK+mxhh/c0t9eAzGGJbSgOzO54GrwVbMom8xxk+E=)
2: uFl_ZizKGWHrxXUyCquBDXz3y3k.roa (hash: /TpoOOO6sEekhbdoi+eDFkK9983+dY21TSBKPL3C0K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:51:4f:1f:84:01:dc:2f:8e:ea:47:71:b3:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Mar 2 00:01:11 2026 GMT
Not After : Mar 3 00:01:11 2026 GMT
Subject: CN=a2f343a685a061d0aac6e970475297f6d5137590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:3e:b2:7a:7b:bd:b2:23:6f:7e:55:84:4a:
f8:2f:08:40:0a:b9:67:4f:34:fc:f7:2f:93:e0:e2:
3e:5c:71:96:dd:62:f0:ab:3b:50:0f:21:b5:d4:80:
d8:26:1e:4d:7f:3f:5c:fe:93:e8:b9:8b:de:2c:0b:
86:ec:c8:41:df:ef:be:4f:ad:9a:51:a7:c1:5f:fb:
8c:87:dc:a6:7a:56:37:4b:0a:c5:5a:7b:7f:76:41:
ba:b2:0b:be:bb:a8:d7:be:87:17:bb:ff:67:41:0c:
75:2f:23:dd:5a:42:88:78:6e:bf:f3:e9:4f:a3:fb:
ce:e3:14:72:c4:74:1e:e0:1b:b4:7d:43:15:81:0b:
a4:7c:13:f5:17:b6:d8:fb:69:9c:86:0d:65:9b:5c:
08:1a:76:19:25:cb:02:6d:21:4c:3f:aa:c2:cd:ac:
99:d3:80:7d:0c:b3:4b:3e:ab:2a:5d:85:a8:50:61:
50:68:a3:a1:62:0a:c8:85:2e:d7:df:c1:0a:31:ac:
eb:69:98:9d:de:1b:f4:fd:ae:8f:a7:24:8b:69:8b:
f0:37:d6:bf:be:f7:0a:eb:4c:ed:10:66:49:8a:d4:
c5:8b:96:bb:ca:90:c9:c6:6b:b6:3d:47:d7:d6:4b:
99:fa:8b:39:9d:2a:28:04:b6:b0:4c:b7:f9:d3:1e:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:43:A6:85:A0:61:D0:AA:C6:E9:70:47:52:97:F6:D5:13:75:90
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:2e:28:77:fe:f7:54:d3:9f:25:b6:0c:e7:65:c9:21:d0:
5d:f3:96:78:c3:23:af:1f:1a:87:42:16:88:a5:49:b2:94:09:
32:f1:e6:6c:c2:18:7d:0c:f8:99:62:2b:cb:37:2d:72:0c:00:
5e:45:c5:1b:89:41:80:0a:60:31:d0:87:4a:a3:4b:3c:a9:7e:
b5:b4:b9:52:69:58:61:02:21:16:b2:c3:9d:53:57:56:85:09:
e0:50:28:3b:e9:05:cd:b3:b0:82:1a:a0:02:3f:66:c6:04:80:
18:49:e0:44:89:80:d2:02:0f:a5:19:f1:d4:26:fe:35:c6:37:
ac:03:07:05:eb:61:86:d9:eb:f3:72:52:a8:a2:7d:3b:c4:c8:
87:cf:61:43:ea:08:16:85:af:37:67:36:bb:e3:46:7b:0d:a9:
fa:0b:ea:0c:77:0f:c6:71:62:43:ae:7e:4b:4b:e8:57:d4:c6:
0b:55:29:89:0a:7a:1d:18:46:b4:b0:72:35:c3:7f:03:99:d9:
17:24:14:3e:e8:05:b5:1a:61:8d:f2:2e:0c:ba:b1:8e:82:68:
7c:ce:6d:9e:92:b1:da:c7:38:ea:e7:1a:8b:04:26:36:25:b7:
ba:45:4b:a9:c6:1c:fa:0e:1a:7d:aa:49:bb:7b:66:95:80:a9:
ca:eb:f8:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2VFPH4QB3C+O6kdxsxy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmI1ZTJlMGZkOTgzMmQ3M2IxZWY4ZjllNDg2ZmZkMDBi
M2Q3ODkwHhcNMjYwMzAyMDAwMTExWhcNMjYwMzAzMDAwMTExWjAzMTEwLwYDVQQD
EyhhMmYzNDNhNjg1YTA2MWQwYWFjNmU5NzA0NzUyOTdmNmQ1MTM3NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGg+snp7vbIjb35VhEr4LwhACrln
TzT89y+T4OI+XHGW3WLwqztQDyG11IDYJh5Nfz9c/pPouYveLAuG7MhB3+++T62a
UafBX/uMh9ymelY3SwrFWnt/dkG6sgu+u6jXvocXu/9nQQx1LyPdWkKIeG6/8+lP
o/vO4xRyxHQe4Bu0fUMVgQukfBP1F7bY+2mchg1lm1wIGnYZJcsCbSFMP6rCzayZ
04B9DLNLPqsqXYWoUGFQaKOhYgrIhS7X38EKMazraZid3hv0/a6PpySLaYvwN9a/
vvcK60ztEGZJitTFi5a7ypDJxmu2PUfX1kuZ+os5nSooBLawTLf50x6cmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLzQ6aFoGHQqsbpcEdSl/bVE3WQMB8GA1UdIwQY
MBaAFPy7Xi4P2YMtc7Hvj55Ib/0As9eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTkt
NWU2YTkyZTdmNjhmLzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTktNWU2YTkyZTdmNjhm
LzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVcuKHf+
91TTnyW2DOdlySHQXfOWeMMjrx8ah0IWiKVJspQJMvHmbMIYfQz4mWIryzctcgwA
XkXFG4lBgApgMdCHSqNLPKl+tbS5UmlYYQIhFrLDnVNXVoUJ4FAoO+kFzbOwghqg
Aj9mxgSAGEngRImA0gIPpRnx1Cb+NcY3rAMHBethhtnr83JSqKJ9O8TIh89hQ+oI
FoWvN2c2u+NGew2p+gvqDHcPxnFiQ65+S0voV9TGC1UpiQp6HRhGtLByNcN/A5nZ
FyQUPugFtRphjfIuDLqxjoJofM5tnpKx2sc46ucaiwQmNiW3ukVLqcYc+g4afapJ
u3tmlYCpyuv4qA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:24 2026 by rpki-client