Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: IqIlMyLmGcysgPhSNnmjKjGtKDi0RUFKT+evnrw55Iw=
Subject key identifier: EA:52:B6:88:53:1E:21:E4:87:E2:80:C1:82:BA:C4:DD:70:11:F4:9F
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019CACB4AD4B4639C169A6C973025DC44D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0954
Signing time: Mon 02 Mar 2026 04:00:47 +0000
Manifest this update: Mon 02 Mar 2026 04:00:47 +0000
Manifest next update: Tue 03 Mar 2026 04:00:47 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: pXrWz90tq1g71zO9Zqa7thaW0hH4DCpDLicDnp1KVaM=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ad:4b:46:39:c1:69:a6:c9:73:02:5d:c4:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Mar 2 04:00:47 2026 GMT
Not After : Mar 3 04:00:47 2026 GMT
Subject: CN=ea52b688531e21e487e280c182bac4dd7011f49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:52:bb:e0:3f:de:3b:a8:ad:0c:30:58:ae:
03:e2:1b:d3:fd:47:2a:c0:3f:7d:49:6b:ee:37:67:
c6:57:1e:83:d6:2a:37:e1:c3:ed:e5:7a:c7:bc:1f:
ac:f3:fb:16:64:e1:03:09:f7:22:fc:e1:a9:c3:10:
dd:7e:b0:01:2b:25:d3:1d:81:d5:53:c6:fe:25:d1:
9e:bb:98:7e:ee:0c:63:17:a9:3b:b1:45:61:d0:4d:
8f:56:14:b5:3f:ba:38:11:77:db:69:39:30:f8:64:
a1:ef:4f:1f:d6:a8:cb:3f:3c:b0:dc:09:c1:e6:7b:
de:36:93:61:3a:d5:24:3d:36:fd:da:43:a6:70:0e:
89:dd:0b:dd:5b:26:43:47:d2:fc:f5:27:28:47:d1:
f9:5d:94:d9:89:11:8c:c7:7d:c2:cb:02:1e:1d:e1:
d4:61:4c:71:db:f3:4b:ad:51:18:38:14:1d:e5:92:
13:0b:d4:33:b6:73:5e:79:9c:ea:c7:df:3a:96:f0:
82:dc:08:73:55:d4:39:43:b6:58:19:6e:56:05:72:
4d:08:04:ea:3c:35:6b:34:3d:2b:2c:4f:98:80:1d:
a4:40:0a:04:cf:8d:dc:14:da:6c:ba:97:9b:d4:30:
fc:7a:49:94:48:22:9d:b5:28:d3:aa:dc:e9:33:40:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:52:B6:88:53:1E:21:E4:87:E2:80:C1:82:BA:C4:DD:70:11:F4:9F
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bf:99:05:42:a4:a8:2b:87:8b:b8:ea:41:ef:63:19:2e:ec:
bc:e8:f7:07:61:b0:e6:ae:6c:58:b1:a4:91:8b:fe:3c:5d:ed:
49:f7:b5:9e:b7:12:fe:84:9e:ef:ea:2b:19:c4:60:de:16:64:
cd:52:dc:43:6b:ab:45:b3:7a:0e:bc:cb:56:bb:14:f4:9e:f5:
1f:59:6b:cc:fa:2c:4f:09:77:44:b4:3a:54:4c:79:95:40:f6:
10:90:d9:5d:04:7d:03:f5:b9:47:29:cd:b6:61:9a:38:d9:2d:
8d:10:a9:79:4d:8e:e0:2a:ce:4f:a9:cf:b2:44:9c:48:e3:3a:
0e:82:63:72:46:c0:c8:10:07:b1:f7:b8:93:61:33:4c:15:83:
e0:d6:dc:5d:bd:03:99:8d:89:44:e5:dc:25:e4:a0:80:d7:b9:
ba:63:19:e1:21:1c:c1:b6:fc:00:2a:40:b3:49:8d:24:91:54:
93:dc:41:ac:4b:a4:18:ca:02:cd:3f:9d:2d:6a:0f:2e:41:4b:
1a:7e:f9:e4:da:ba:32:92:ca:10:7a:47:99:ea:8e:66:94:84:
a2:f9:42:33:8c:22:ca:7f:f6:8b:66:62:35:eb:aa:e7:36:4d:
8e:14:05:99:3a:38:85:8f:a7:dd:3f:ee:a1:d8:be:c9:22:7a:
ed:37:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:32 2026 by rpki-client