Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: i3jhhyBRwxdvLOXmrKygcbDWd8cVIJ8muyWwo2QjKMc=
Subject key identifier: 0D:FC:3A:B5:52:9A:59:17:38:5A:54:DB:F8:A0:E8:0D:A0:E3:02:2F
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 019CACB46EA6E16BAD035069693F228A9412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 0D68
Signing time: Mon 02 Mar 2026 04:00:31 +0000
Manifest this update: Mon 02 Mar 2026 04:00:31 +0000
Manifest next update: Tue 03 Mar 2026 04:00:31 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: gIB44jca38USbVqfBkncRbYa93mLvU2fN3EqjWvHy/0=)
2: XCJhrSPpZucqjPgaRc-yq5mBolo.roa (hash: aP3PkSYJUsN1jhJkS9fDL4Ew5pUSNdbtYk5nVTNSpag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6e:a6:e1:6b:ad:03:50:69:69:3f:22:8a:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Mar 2 04:00:31 2026 GMT
Not After : Mar 3 04:00:31 2026 GMT
Subject: CN=0dfc3ab5529a5917385a54dbf8a0e80da0e3022f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:3c:40:13:a5:b9:e6:cb:c5:eb:f3:1a:0e:
69:a0:ad:fa:37:30:28:85:fa:cb:43:d3:14:18:67:
5d:5e:98:1b:7a:f5:a5:e0:f4:69:78:63:80:40:e1:
90:cd:86:d9:aa:aa:f5:c0:f9:0a:6c:13:01:e3:bf:
cd:f5:7d:82:f3:9f:06:2b:61:8e:8a:52:a2:49:0b:
60:b6:c3:54:2e:65:45:fc:5e:fb:e3:f7:ab:34:5d:
e5:2b:a6:ba:46:2d:27:26:30:3b:9c:6f:d2:8a:1b:
cf:96:aa:65:13:4c:9b:39:fd:ad:a5:87:32:f6:61:
14:0f:0c:79:6a:be:4a:0d:cb:9d:c9:75:4c:0d:bd:
b2:a9:6a:d3:00:e5:ff:02:e5:e8:64:47:b3:ea:14:
8c:32:0d:24:7c:1a:13:8b:8b:5e:23:53:9b:d5:49:
35:d0:f3:58:32:08:86:1e:b4:5b:00:5b:e7:2f:0e:
b0:cc:66:b0:8b:42:e5:39:18:80:6f:33:eb:d4:e3:
58:10:8f:46:ba:6f:66:cb:6b:3a:35:d0:1c:e5:89:
5c:42:42:40:ca:e2:62:10:95:25:93:f9:a3:6c:ef:
ab:0b:9a:be:80:1b:f8:6f:a6:59:22:e9:25:bf:f4:
42:ef:c6:49:ab:35:f4:f3:9d:e7:b1:7b:5d:08:d9:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:3A:B5:52:9A:59:17:38:5A:54:DB:F8:A0:E8:0D:A0:E3:02:2F
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:68:2a:9d:90:3b:de:81:82:c3:81:62:d8:1e:a3:bf:6d:cb:
b9:e8:e2:8b:37:27:a2:cd:95:15:14:c0:a5:a5:b4:b1:5b:04:
e2:34:8f:f1:f3:3c:75:fa:61:79:d9:de:92:23:2b:45:ae:5e:
c6:cd:25:f9:8c:e8:10:1e:d3:b8:16:c7:a5:43:c3:ce:f5:10:
c0:a7:1b:c7:e1:4d:33:01:14:e7:57:bd:2b:e9:0c:b5:15:f9:
c8:77:9a:51:be:82:eb:3e:4f:ed:a7:8e:6b:c7:8f:b0:3d:83:
b9:84:8e:7c:c3:fd:90:2b:13:15:1d:17:ff:e2:e3:8d:71:63:
fb:f4:3f:91:06:d0:21:d5:a5:d5:e8:24:92:aa:62:dd:28:7b:
a0:8d:c2:4a:0c:1d:ff:65:cd:da:b2:02:ee:c8:18:5b:b9:b6:
5a:98:93:1c:3d:0e:7a:74:4f:49:a2:04:58:fc:b9:a6:22:b1:
32:0c:92:37:17:99:27:e3:02:4c:6f:99:67:47:76:83:6a:1e:
ae:c1:84:99:4d:06:8f:13:6e:a9:8e:e6:1e:ca:c5:c7:69:9a:
21:c2:25:c5:ed:c7:32:3d:81:7b:51:a5:3a:d7:c5:10:3e:97:
2e:f5:1f:ee:bd:b4:79:c7:fe:c6:58:07:4f:a3:4c:f6:04:fc:
a2:73:9a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystG6m4WutA1BpaT8iipQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjAyMmNlNGRjODFmMDNiM2IzMDczMGE2YzIzZWFmMzQy
ZWNjNWUwHhcNMjYwMzAyMDQwMDMxWhcNMjYwMzAzMDQwMDMxWjAzMTEwLwYDVQQD
EygwZGZjM2FiNTUyOWE1OTE3Mzg1YTU0ZGJmOGEwZTgwZGEwZTMwMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFQ8QBOluebLxevzGg5poK36NzAo
hfrLQ9MUGGddXpgbevWl4PRpeGOAQOGQzYbZqqr1wPkKbBMB47/N9X2C858GK2GO
ilKiSQtgtsNULmVF/F774/erNF3lK6a6Ri0nJjA7nG/SihvPlqplE0ybOf2tpYcy
9mEUDwx5ar5KDcudyXVMDb2yqWrTAOX/AuXoZEez6hSMMg0kfBoTi4teI1Ob1Uk1
0PNYMgiGHrRbAFvnLw6wzGawi0LlORiAbzPr1ONYEI9Gum9my2s6NdAc5YlcQkJA
yuJiEJUlk/mjbO+rC5q+gBv4b6ZZIuklv/RC78ZJqzX0853nsXtdCNkFTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA38OrVSmlkXOFpU2/ig6A2g4wIvMB8GA1UdIwQY
MBaAFCzwIs5NyB8Ds7MHMKbCPq80LsxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUt
Y2E0ZWQ4MDk3OTcwLzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUtY2E0ZWQ4MDk3OTcw
LzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGgqnZA7
3oGCw4Fi2B6jv23Luejiizcnos2VFRTApaW0sVsE4jSP8fM8dfphednekiMrRa5e
xs0l+YzoEB7TuBbHpUPDzvUQwKcbx+FNMwEU51e9K+kMtRX5yHeaUb6C6z5P7aeO
a8ePsD2DuYSOfMP9kCsTFR0X/+LjjXFj+/Q/kQbQIdWl1egkkqpi3Sh7oI3CSgwd
/2XN2rIC7sgYW7m2WpiTHD0OenRPSaIEWPy5piKxMgySNxeZJ+MCTG+ZZ0d2g2oe
rsGEmU0GjxNuqY7mHsrFx2maIcIlxe3HMj2Be1GlOtfFED6XLvUf7r20ecf+xlgH
T6NM9gT8onOaPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:33 2026 by rpki-client