Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: 6vV4sS5TE0dkjT+Ao2+Yvk+8MbMJYIvlh8DWnDaHetc=
Subject key identifier: E1:DA:8C:2E:D1:72:35:8F:BB:40:CD:06:47:05:18:DD:46:F0:6A:29
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019CA94603551E06FC526EFEE7B908624597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 12:01:03 +0000
Manifest this update: Sun 01 Mar 2026 12:01:03 +0000
Manifest next update: Mon 02 Mar 2026 12:01:03 +0000
Files and hashes: 1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: 9RGFrt/0XRrfAeHGJzgzX3OmtIDYFigHEx9pUq7PgGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:03:55:1e:06:fc:52:6e:fe:e7:b9:08:62:45:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Mar 1 12:01:03 2026 GMT
Not After : Mar 2 12:01:03 2026 GMT
Subject: CN=e1da8c2ed172358fbb40cd06470518dd46f06a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:0d:9e:3b:e2:9b:d1:cf:a7:2e:55:44:84:
6d:8e:c9:fd:c1:f8:85:38:d6:11:2e:16:a4:56:24:
e8:9a:8a:bd:6f:bd:37:bd:02:e2:3c:dd:9a:6b:f9:
f2:01:3c:5c:80:95:3a:79:be:8f:3f:0d:bd:46:17:
dc:00:e9:76:5e:b2:04:e3:a6:23:2b:24:55:10:05:
3a:cf:08:b1:d6:38:98:9f:c1:da:c7:9b:c5:15:c5:
36:4f:78:e9:1c:19:20:b4:96:81:44:fd:63:26:67:
4a:aa:44:f5:d4:3c:fd:cd:69:90:ef:b7:af:c1:e4:
09:67:43:14:85:00:8f:df:52:6c:b0:26:14:df:1d:
1f:6c:d2:5e:85:93:64:a1:a4:d7:78:b1:64:c2:9d:
da:b5:51:1c:05:c1:8b:f2:3c:ba:d1:c7:02:b5:42:
3a:ef:26:2c:29:84:87:1e:a6:13:48:00:89:39:d1:
ba:78:16:bf:17:5e:06:1b:7b:9c:10:27:1f:94:93:
64:f9:cc:2b:4e:29:48:13:81:44:45:39:aa:aa:cd:
b6:db:a6:e9:fc:d2:23:14:80:3d:62:06:fe:05:c1:
54:25:4a:48:39:e1:c5:56:bf:ed:87:76:06:a2:56:
67:3a:dc:57:3f:47:ed:5c:c3:18:2a:42:52:55:8e:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:8C:2E:D1:72:35:8F:BB:40:CD:06:47:05:18:DD:46:F0:6A:29
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:ef:ca:01:37:6a:ad:fb:3c:19:14:81:d8:85:26:cd:7e:
26:a7:80:6f:bb:1f:e7:ab:fa:de:19:c9:17:6a:eb:8e:f0:07:
a6:8e:64:59:8d:ac:22:55:83:bc:1c:cc:e5:73:25:a9:e1:d4:
0f:29:20:eb:6f:f4:1d:19:e0:9f:a5:5e:be:e1:ea:f5:7c:0d:
49:67:1e:0e:d1:c9:0b:88:dc:ba:ad:d4:78:db:1b:b3:07:ae:
5b:34:8c:3d:7c:69:b8:0e:ca:44:48:11:8c:3c:0e:fb:1b:3f:
2b:51:58:c4:94:d0:b0:8a:d8:82:28:f9:3b:83:3a:0a:6f:73:
c9:2a:c0:af:b0:cb:b2:2d:a5:4c:09:85:25:c1:55:b2:dc:3e:
b5:7e:0e:09:42:29:29:57:4f:5a:f7:e4:8c:59:4e:31:8a:85:
d2:15:0f:3f:9c:b8:d8:0f:d2:6c:ba:1e:ca:f7:02:1e:fb:4f:
b3:a2:2e:13:79:84:66:6f:4d:71:d6:86:6f:ac:c9:24:ad:5d:
fc:56:63:b8:38:f5:d9:3a:71:bd:20:d7:61:f5:34:0d:23:53:
dd:a6:b5:40:7f:45:54:d5:ae:56:90:a2:16:f6:98:af:29:68:
3b:52:c5:64:b3:97:2b:e4:d5:08:ad:6b:04:8e:1f:4c:31:bf:
06:ff:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:53 2026 by rpki-client