Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: a90IzMGfgzkfdaIkSkH8Er1s0yXwgnvwLttNtKoc8V8=
Subject key identifier: 01:79:2A:4C:86:2D:82:D5:BE:DC:FD:15:72:B1:4D:62:5B:15:3D:D2
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019CAAFD234BF73801D0F0C682393DF481E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: FZXNAo_-RfWe2H9RHiCZ7xGUnYo.roa (hash: TDYzUGrD9meaYvgjEQfqWP3QZzAK3PuLuA6ZQryLHGU=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: Ve2aA1+KqMlsL6QG+37VSqRJTFAM6YfSagi958xK3Ks=)
3: qMQHyQ9qH1ECk7KL-kR203MB75k.roa (hash: vhQOUoORkCKEMjziW3Ye82TVpPsPBlso5nGmSCXjKmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:23:4b:f7:38:01:d0:f0:c6:82:39:3d:f4:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=01792a4c862d82d5bedcfd1572b14d625b153dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:6a:94:03:04:cc:6c:1d:9f:12:40:fc:cd:
67:d3:21:e2:eb:9b:c5:20:7f:e0:57:ee:38:a1:e6:
72:28:97:8b:9c:62:e4:64:c9:32:26:8d:8b:e5:39:
e7:4a:2b:4d:6d:d7:19:0a:f0:60:33:fb:00:29:07:
d8:e5:7e:c2:5a:7c:57:42:e2:95:8b:51:f1:af:d8:
d2:88:f8:7e:8b:ef:2c:68:ed:f3:0f:f9:dd:97:dc:
3e:7f:00:17:f0:95:20:56:f6:38:7f:70:cb:65:84:
e8:f1:18:4a:e0:b8:2f:46:4d:22:6b:4e:35:87:2f:
54:a3:58:b9:02:df:6b:37:eb:3e:b3:f9:ed:82:79:
af:0e:e8:26:52:50:1a:58:76:80:a2:bf:7f:f6:5a:
6b:2b:cf:cf:49:09:ce:9c:ad:a2:fb:cb:fc:61:bd:
9a:65:bc:96:58:84:7c:06:13:6a:f7:20:44:e6:6e:
e9:5e:06:95:ca:93:b9:b8:ae:29:f2:8c:be:8d:1b:
9c:e9:3b:40:75:d6:8a:44:0f:59:5d:af:b5:81:7f:
24:a7:3b:98:d7:b6:91:ec:29:71:9b:56:88:8c:04:
2e:12:60:79:92:f3:87:a1:76:4d:2c:4d:f1:c7:06:
73:73:01:cf:1d:57:44:2c:72:1d:27:fb:2a:2b:24:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:79:2A:4C:86:2D:82:D5:BE:DC:FD:15:72:B1:4D:62:5B:15:3D:D2
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2e:d2:b0:06:37:36:6b:ea:6e:7a:09:2d:cf:20:79:dd:ad:
15:fb:06:f8:9d:6c:d7:5f:ad:a6:b5:8c:91:62:04:1f:49:eb:
46:b0:95:71:a6:7e:03:43:6a:1a:56:23:60:88:43:3c:d1:4d:
10:47:75:0c:78:82:96:9d:fa:26:7a:02:9b:2f:d6:e5:a0:19:
53:6c:8c:00:8f:73:f1:a4:1f:5d:11:6a:c4:61:65:0a:af:a6:
a3:56:3d:b3:26:89:99:ba:a6:88:40:48:b8:27:c0:3a:6b:1d:
25:65:3b:c7:2b:0e:db:fa:c5:d3:d3:f2:81:f8:03:62:0c:ac:
b4:94:8f:e9:ed:d6:98:2d:16:3a:49:f2:f2:8d:bf:af:e8:69:
5b:5f:f4:bc:14:f1:16:0b:32:54:37:28:30:d3:e0:f5:46:2f:
dc:87:cd:1b:33:80:70:90:9b:94:38:3a:57:f6:b8:bd:0a:93:
23:d9:86:99:1e:c1:27:ce:12:3a:b3:a0:6e:bb:fc:2d:64:8c:
3e:c0:d0:58:98:50:f1:09:6d:89:f1:c1:2d:a3:4a:40:69:56:
31:34:ab:bc:a0:68:42:14:a3:c4:ba:12:90:49:8c:c9:d6:7c:
9b:d8:2d:71:24:fe:e4:88:14:af:cf:d0:e0:18:80:10:62:67:
ae:46:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:55 2026 by rpki-client