Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: n3KpZFCQXYIJaEm7VLLMmcwgafOPLe2kdKFZB7Wnlj8=
Subject key identifier: 02:9E:CC:7E:C3:D4:8C:8E:9A:6C:E4:04:1B:FF:5F:62:43:DF:5F:2E
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 019CAC7E1A05A4F43801626C05E6916E0DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: LciY0RStSPOSPF9vNfhhVnOspsWkISfYAY66mcpVjWI=)
2: SdYBPf9hyZeCBZ0CXzRVluMGnGU.roa (hash: hgdsfyjTVsGnv4VajpzC0ZJUGOBghoLM7l+xd5EQZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1a:05:a4:f4:38:01:62:6c:05:e6:91:6e:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=029ecc7ec3d48c8e9a6ce4041bff5f6243df5f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:c1:29:88:86:36:65:d5:66:38:b7:0e:1a:
5c:b8:18:ff:9a:20:86:c7:34:df:59:67:3a:00:a6:
f7:2e:69:f7:fd:ad:74:84:0d:50:65:c2:c5:ed:c5:
5a:35:71:0f:a9:6b:4f:9b:e2:4e:a7:4a:e7:72:70:
86:94:10:a0:9e:b7:0b:24:37:33:d4:ce:80:a7:8b:
44:2f:34:b4:44:30:e4:7e:0a:99:3d:5e:53:e0:0f:
98:6f:f1:f4:0a:03:43:c5:48:5c:31:6f:40:6e:2a:
04:70:f6:7b:50:28:d3:85:db:ce:3b:fd:a6:7c:70:
a3:d1:24:05:cf:93:d6:47:2f:9f:17:5c:80:91:97:
32:ec:2e:25:40:a2:63:41:2c:8d:e1:df:98:74:3b:
6a:e9:3e:a4:39:90:02:99:9d:25:33:d4:6f:15:86:
c3:ca:47:72:7a:03:7f:13:13:25:e2:bc:14:9e:3c:
93:d0:2d:a4:eb:13:eb:6e:28:46:b8:a5:90:65:02:
7c:ae:0a:db:7f:eb:db:d2:fa:68:8b:d0:38:c2:a1:
b7:76:a6:47:a9:7d:97:d5:24:09:b6:e9:c5:21:ac:
36:c8:bc:4f:ac:b7:af:48:dc:c1:72:00:c1:ab:fe:
55:3d:42:fa:53:30:0a:45:73:a9:4e:00:74:5c:28:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9E:CC:7E:C3:D4:8C:8E:9A:6C:E4:04:1B:FF:5F:62:43:DF:5F:2E
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b9:b5:05:80:27:07:1d:d6:eb:97:08:69:03:46:1a:22:26:
15:fa:fe:5d:55:83:ed:36:80:1f:5a:96:fc:09:fd:28:02:df:
70:d3:24:76:d0:a3:ad:f4:4a:12:e8:54:c9:43:bd:69:8e:23:
5f:bd:c2:bb:a9:ca:17:a8:23:70:89:9f:83:e9:c4:f7:cd:68:
26:0f:43:1c:e2:18:04:c2:be:ce:6b:8a:2a:e9:fb:1f:6d:1a:
bc:da:d8:c4:62:a2:6c:23:4f:5a:c0:38:36:1a:22:f9:5d:df:
19:0e:44:49:9e:b0:ba:e2:9b:6b:6b:65:08:0e:1a:1e:b7:f8:
8b:c4:db:dc:70:df:b6:35:ca:1c:45:27:7b:50:7b:78:94:1c:
33:ab:af:55:cd:3f:3e:d6:85:c5:b7:71:d1:ee:d3:e2:79:16:
a0:74:cb:f9:63:4b:4a:cf:e3:a6:57:4e:b1:c1:88:df:bb:9e:
db:1e:17:b5:c5:53:bf:7f:58:73:79:5d:65:9f:70:38:f7:e5:
1f:c5:fd:df:de:13:62:20:42:de:45:b8:85:85:57:06:22:65:
76:fd:99:25:eb:0b:3d:14:05:48:07:69:45:3b:d0:e1:3b:8c:
18:65:47:28:78:e1:ba:9d:da:58:3e:92:5d:f4:e0:00:a4:47:
14:c8:57:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfhoFpPQ4AWJsBeaRbg2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZjg3NzlhM2M4MmYwMGZjMTQ0MzVlZTdkOGQwYjhkNmRk
ODIwNGUwHhcNMjYwMzAyMDMwMTExWhcNMjYwMzAzMDMwMTExWjAzMTEwLwYDVQQD
EygwMjllY2M3ZWMzZDQ4YzhlOWE2Y2U0MDQxYmZmNWY2MjQzZGY1ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN3BKYiGNmXVZji3DhpcuBj/miCG
xzTfWWc6AKb3Lmn3/a10hA1QZcLF7cVaNXEPqWtPm+JOp0rncnCGlBCgnrcLJDcz
1M6Ap4tELzS0RDDkfgqZPV5T4A+Yb/H0CgNDxUhcMW9AbioEcPZ7UCjThdvOO/2m
fHCj0SQFz5PWRy+fF1yAkZcy7C4lQKJjQSyN4d+YdDtq6T6kOZACmZ0lM9RvFYbD
ykdyegN/ExMl4rwUnjyT0C2k6xPrbihGuKWQZQJ8rgrbf+vb0vpoi9A4wqG3dqZH
qX2X1SQJtunFIaw2yLxPrLevSNzBcgDBq/5VPUL6UzAKRXOpTgB0XCiZaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKezH7D1IyOmmzkBBv/X2JD318uMB8GA1UdIwQY
MBaAFC34d5o8gvAPwUQ17n2NC41t2CBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4Yjct
ZTJhZTA1NWVjZWQxLzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jY2Q5NmUtMTMzZS00NWI3LTg4YjctZTJhZTA1NWVjZWQx
LzEvTGZoM21qeUM4QV9CUkRYdWZZMExqVzNZSUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLm1BYAn
Bx3W65cIaQNGGiImFfr+XVWD7TaAH1qW/An9KALfcNMkdtCjrfRKEuhUyUO9aY4j
X73Cu6nKF6gjcImfg+nE981oJg9DHOIYBMK+zmuKKun7H20avNrYxGKibCNPWsA4
Nhoi+V3fGQ5ESZ6wuuKba2tlCA4aHrf4i8Tb3HDftjXKHEUne1B7eJQcM6uvVc0/
PtaFxbdx0e7T4nkWoHTL+WNLSs/jpldOscGI37ue2x4XtcVTv39Yc3ldZZ9wOPfl
H8X9394TYiBC3kW4hYVXBiJldv2ZJesLPRQFSAdpRTvQ4TuMGGVHKHjhup3aWD6S
XfTgAKRHFMhXRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:31 2026 by rpki-client