Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: OM20xUZL8s4PDybIUUyQWu34CpPAraosv0mJgGmtWZA=
Subject key identifier: 85:39:54:68:E4:D6:1D:40:78:74:39:E8:69:67:EC:C3:CA:42:C7:8C
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019CACB49AF5EB874E311A794A345492CA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 04:00:43 +0000
Manifest this update: Mon 02 Mar 2026 04:00:43 +0000
Manifest next update: Tue 03 Mar 2026 04:00:43 +0000
Files and hashes: 1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
4: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
5: hYxTxK4AHKTY1TwSA43oGaIbwvI.roa (hash: pXMygWt3Q3zIvm4RuMnURnfNgvmTHNGm+Wsjn0P2p18=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: boUL9oRFOr0pcmrqwn2uJY8abbfPC4tXGPUgDF5t5Ek=)
7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:9a:f5:eb:87:4e:31:1a:79:4a:34:54:92:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Mar 2 04:00:43 2026 GMT
Not After : Mar 3 04:00:43 2026 GMT
Subject: CN=85395468e4d61d40787439e86967ecc3ca42c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:ac:b7:86:2f:bf:77:b6:79:0d:e2:43:82:
bd:df:a5:dd:04:e3:f4:73:09:56:27:09:6f:a7:08:
e2:cc:38:28:0c:62:bd:be:31:2f:d9:5a:02:07:da:
e3:c0:3d:3c:75:c4:7f:b7:bf:5b:bf:88:75:f6:d9:
0b:a9:62:9d:80:e3:bd:bf:3b:32:b3:bf:d0:f1:17:
67:91:30:78:ba:b2:e5:ba:8e:d6:5b:42:d3:11:84:
c1:72:cc:e7:25:29:9c:4d:67:d4:ab:c0:d0:56:1e:
1a:5e:fc:60:c0:9a:ec:e3:51:03:d3:ba:7c:95:53:
13:e2:41:89:79:1e:25:d5:fa:3f:71:db:c6:b8:52:
8a:a5:74:2b:46:6c:e2:60:41:6c:51:d1:98:ff:7f:
57:b0:82:04:6e:3b:8d:49:20:9c:3b:7f:fc:4c:93:
d1:98:9e:c4:e6:01:b9:cb:09:b4:eb:45:6d:69:21:
bb:6a:57:cd:59:dd:da:52:6c:e4:b7:3c:30:2c:b3:
2a:17:c2:31:dd:4d:3c:d5:bc:2c:58:58:73:fd:c1:
ba:fd:ff:41:fe:1e:46:da:28:b2:b8:87:77:d2:c8:
89:4b:5c:72:36:bb:f2:7e:f8:bd:0f:7f:54:d6:28:
fd:54:4b:63:30:29:c4:19:63:4e:2d:5d:31:2f:f5:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:54:68:E4:D6:1D:40:78:74:39:E8:69:67:EC:C3:CA:42:C7:8C
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:72:82:c8:53:07:2c:45:f6:ff:d2:80:ce:95:03:69:6b:
67:e1:9c:21:3a:11:13:b9:34:4f:f3:ef:9c:15:60:7d:52:71:
f0:70:42:cf:7a:4b:f0:0e:61:da:fc:55:3b:13:9e:0a:3a:e3:
ba:f7:cb:31:44:c3:aa:00:ab:8a:ad:b9:0a:a2:f0:f5:f0:68:
fb:46:7e:d0:a3:17:3c:39:81:a6:4d:b4:18:9b:a1:55:bf:2b:
79:93:97:95:16:11:66:7b:6d:7a:f7:00:88:53:9c:b9:ff:21:
74:9f:79:ca:24:75:6a:2e:17:0d:f8:45:91:64:25:60:74:0f:
de:a3:53:3e:4e:60:3e:61:5f:3c:fb:92:7f:22:0c:4f:36:89:
7f:da:cc:dd:2b:73:0d:d9:f0:bd:74:dc:68:01:7f:55:e1:80:
8a:31:10:71:96:5b:01:8a:a1:6e:09:86:f1:71:93:df:af:bb:
fe:bd:03:59:c4:4d:a9:d1:76:55:fd:29:35:cd:14:d4:52:0a:
61:ee:e3:e8:7b:c0:94:3f:f8:7e:fa:48:64:4c:45:c7:93:fa:
d2:fb:d6:7a:57:e4:fb:d9:79:4e:87:43:9e:9c:c6:2b:b2:55:
2b:bc:84:59:4f:3e:b7:d0:a9:5e:93:04:bd:a7:e4:41:56:23:
67:57:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:58 2026 by rpki-client