Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: Aaq7mGkb6uCeZQLca4fblGEXL04yYaLfFFOl5nDG8IM=
Subject key identifier: 49:57:4A:47:88:6E:0E:6C:CE:F8:6F:53:4B:F2:87:EC:9C:2B:77:A9
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 019CAAFD21CD4444C7EF25C48751CF2410C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 0431
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa (hash: VqlHGjyV6XrN2/klxM4KjUioPDS5vL2CP/yVnvM9BOI=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: cQkglw0KkSuDCxzR1vySg5S7HIXtu8NBrvLj46Xri9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:21:cd:44:44:c7:ef:25:c4:87:51:cf:24:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=49574a47886e0e6ccef86f534bf287ec9c2b77a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:3f:af:98:46:f2:dd:a3:8d:84:06:39:1d:
c7:75:8d:a2:c7:fe:27:ba:93:13:e9:3f:80:f6:42:
31:c5:5e:b6:f5:a5:0a:45:ec:19:87:8a:16:24:83:
ba:ee:f6:0e:a6:6d:8a:a7:b2:20:8c:bf:af:60:0d:
ca:56:eb:c7:11:f9:ad:e5:90:09:d9:39:1e:2d:f3:
53:52:da:34:18:85:c5:d5:d4:46:d0:8b:4a:b1:52:
db:5b:c8:fa:6d:77:d8:34:50:2c:dc:14:5b:36:c9:
f1:55:02:80:5d:5e:b1:c1:98:4d:e2:14:1c:be:7f:
c1:51:e0:83:07:1f:56:df:ba:10:b4:98:61:85:ea:
da:48:74:b2:ee:07:0f:95:2c:fb:5a:d4:1c:73:20:
fd:4e:0a:83:78:44:30:17:43:7f:70:63:b0:f4:61:
86:21:27:e6:19:22:e5:f6:88:9e:c0:c4:5c:e3:04:
dc:c8:4c:48:67:73:ff:e0:cc:4c:b8:1e:2c:63:89:
0a:06:35:93:53:7c:65:c1:f6:3f:0b:4f:51:1e:c0:
e9:1d:06:94:e3:06:d6:60:d2:b3:16:d3:91:7a:19:
30:7b:d8:2e:4a:73:71:ef:5f:4c:75:77:25:fd:e1:
20:e9:4d:51:92:b9:69:87:61:58:09:b6:d1:19:8f:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:4A:47:88:6E:0E:6C:CE:F8:6F:53:4B:F2:87:EC:9C:2B:77:A9
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8e:f7:fb:0d:ef:47:c0:1f:fe:9c:9a:85:17:8e:df:e4:3d:
9b:14:ed:14:f4:f3:ed:08:73:b1:1b:2f:d7:ac:18:28:ad:6b:
9d:8a:c5:3b:15:a5:14:57:3c:64:ff:47:75:e2:8c:d5:2c:0a:
54:cc:cc:48:b9:b9:38:1f:6b:f9:b9:32:a3:39:da:20:a8:c4:
c5:78:9b:8d:4c:f2:7e:ef:61:2f:c9:8c:06:79:31:06:46:23:
0d:8a:53:8b:c7:57:23:02:7a:7a:0b:45:5e:91:ae:ba:94:d9:
56:41:d6:e4:84:f4:80:e6:6c:8b:0a:7c:d2:42:78:60:fb:ec:
fa:22:f2:d5:60:3b:1d:5f:70:df:58:e4:5a:1c:4c:58:95:98:
66:36:1b:ae:29:18:1c:01:31:63:58:a2:ae:92:54:98:42:fe:
dc:1c:df:51:74:1f:89:e8:5a:7d:a3:b1:f8:34:86:4e:55:95:
8d:ea:87:f1:79:3c:be:e4:57:cc:81:ff:08:a1:65:c8:a5:01:
c3:b3:89:65:0c:91:60:b5:0d:5a:cb:88:26:cd:2a:16:b9:87:
17:3c:2a:ea:90:8b:60:c0:78:3d:0b:c7:7d:93:87:fd:fe:cc:
aa:b7:55:bd:3c:39:de:76:3a:c4:ae:22:18:50:ec:6c:1d:9d:
71:27:0f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/SHNRETH7yXEh1HPJBDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzAzNWJjOGZiZjY3NjNjODg4ZGIzNDRkMmFiNGFlNjI5
NDY2NjUwHhcNMjYwMzAxMjAwMDQxWhcNMjYwMzAyMjAwMDQxWjAzMTEwLwYDVQQD
Eyg0OTU3NGE0Nzg4NmUwZTZjY2VmODZmNTM0YmYyODdlYzljMmI3N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMQ/r5hG8t2jjYQGOR3HdY2ix/4n
upMT6T+A9kIxxV629aUKRewZh4oWJIO67vYOpm2Kp7IgjL+vYA3KVuvHEfmt5ZAJ
2TkeLfNTUto0GIXF1dRG0ItKsVLbW8j6bXfYNFAs3BRbNsnxVQKAXV6xwZhN4hQc
vn/BUeCDBx9W37oQtJhhheraSHSy7gcPlSz7WtQccyD9TgqDeEQwF0N/cGOw9GGG
ISfmGSLl9oiewMRc4wTcyExIZ3P/4MxMuB4sY4kKBjWTU3xlwfY/C09RHsDpHQaU
4wbWYNKzFtORehkwe9guSnNx719MdXcl/eEg6U1Rkrlph2FYCbbRGY9TWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElXSkeIbg5szvhvU0vyh+ycK3epMB8GA1UdIwQY
MBaAFJbANbyPv2djyIjbNE0qtK5ilGZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAt
ZDYzMDdlMmRhOWY3LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAtZDYzMDdlMmRhOWY3
LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI73+w3v
R8Af/pyahReO3+Q9mxTtFPTz7QhzsRsv16wYKK1rnYrFOxWlFFc8ZP9HdeKM1SwK
VMzMSLm5OB9r+bkyoznaIKjExXibjUzyfu9hL8mMBnkxBkYjDYpTi8dXIwJ6egtF
XpGuupTZVkHW5IT0gOZsiwp80kJ4YPvs+iLy1WA7HV9w31jkWhxMWJWYZjYbrikY
HAExY1iirpJUmEL+3BzfUXQfiehafaOx+DSGTlWVjeqH8Xk8vuRXzIH/CKFlyKUB
w7OJZQyRYLUNWsuIJs0qFrmHFzwq6pCLYMB4PQvHfZOH/f7MqrdVvTw53nY6xK4i
GFDsbB2dcScPZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:23 2026 by rpki-client