Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: 3pH9DRqdRW2QGQ4eeYsYdA3JnNgWHma8+LyGOSfLFGo=
Subject key identifier: 62:0E:3F:11:BC:A5:92:87:50:59:CC:85:D7:4B:09:94:76:03:54:7C
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 019CAC7E2279EE08EEF42B7A722D6F9CFAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 06D6
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: UTPn7sDyIDaf0ipM77C87Kdh1RA.roa (hash: yJkUEolTOzyU/wbxz5ChhzuCMevnkgv8qFIuytCOr7E=)
2: Y86nHrN-bbG9H8afnIR7ras_Ma0.roa (hash: hrk5zm3StPI0sBpuzLM9Lwz+1Pf71xxcm0cAPnW+R0k=)
3: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: 87l8QzkemFYG/R3pympBHiuHrAI9A4SvWcxkDf5YtbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:22:79:ee:08:ee:f4:2b:7a:72:2d:6f:9c:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=620e3f11bca592875059cc85d74b09947603547c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:da:58:18:21:09:a8:c3:7a:b5:c6:c9:f3:
6b:47:cb:88:4c:40:49:1d:9c:d0:64:58:0f:e5:2c:
86:12:2f:6d:1f:fb:bc:0f:46:7d:ef:5d:0b:56:00:
91:fb:be:07:0a:f1:b4:03:79:b6:b9:73:c7:b6:a5:
85:29:d0:32:f5:97:da:73:3d:fb:57:65:3b:d9:f2:
80:95:78:7d:5f:62:35:ed:c8:05:1f:ec:da:a8:43:
f6:0f:31:e4:89:c7:0d:42:86:6e:e8:1a:6a:6d:04:
11:c1:c8:96:98:81:5d:6d:ef:30:2c:50:08:cb:9b:
0b:16:88:d9:74:7e:bf:42:e6:8f:6f:81:0b:53:97:
61:de:8f:14:df:f7:85:fb:62:8f:1f:03:ec:ef:41:
01:d6:42:12:ee:72:9c:73:21:1a:a3:34:f5:83:1b:
15:14:89:00:22:a1:99:c9:6f:31:b8:75:b9:09:1f:
72:74:bc:c2:4b:6e:97:61:ce:b5:45:dc:b9:76:82:
4b:40:95:7f:24:f3:d3:62:d5:d8:14:e4:74:56:23:
d7:b2:da:bf:65:3d:80:a6:eb:ce:fa:7c:ab:a8:8c:
de:2b:d7:c6:16:c6:2a:d2:4d:4d:db:eb:a6:b3:ad:
7e:1f:79:bb:a2:4e:91:03:59:53:9b:3d:2b:87:40:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:3F:11:BC:A5:92:87:50:59:CC:85:D7:4B:09:94:76:03:54:7C
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9d:93:ca:43:52:fa:f6:56:61:81:20:d9:d7:01:e2:77:22:
1a:00:bb:ef:07:ba:1b:ba:f0:d5:0f:14:24:4b:4c:8f:6a:e3:
74:92:ae:93:cb:7c:3a:23:a0:b5:c0:a9:0c:b4:33:28:17:57:
b1:12:d1:b6:56:26:3d:bc:cf:59:df:1e:02:42:53:78:d9:3a:
e7:37:61:33:b4:ba:a4:b4:5d:11:1c:c7:5f:87:a0:8a:f4:10:
34:af:4f:cb:22:0a:11:4c:61:3d:b7:f6:04:37:c4:eb:14:9b:
9d:b7:aa:9b:33:dc:c7:90:36:f3:cb:c9:60:c8:0d:3c:93:5b:
7d:95:69:34:f9:4a:99:d6:96:ae:56:f0:a7:c4:90:8e:4c:45:
39:99:7c:ab:f7:d9:a4:64:83:ae:c5:b9:3a:22:20:59:4a:a9:
05:b3:c4:e3:89:cd:d6:c9:81:b6:ff:e1:f8:61:b8:3d:0f:c3:
02:25:84:a8:5e:b7:c7:61:f5:96:89:ca:3a:af:0c:39:ea:ac:
2d:33:ba:37:3e:00:c5:a2:b7:75:32:06:f7:f2:f1:6a:92:cf:
1c:87:84:67:2a:20:17:00:7a:8e:f3:25:75:d9:32:33:2b:8d:
94:6e:7b:9d:ea:d8:ac:32:00:7c:f8:02:b9:a7:5d:7e:29:c2:
91:f3:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:43 2026 by rpki-client