Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: uhiZL1lQtLfI05tPq89xrnONjV2AUfI1Q3HzQg7Y5qA=
Subject key identifier: C0:B8:B2:1C:2E:0D:68:2F:C3:88:1D:FF:9B:28:12:C6:B7:D7:E0:DF
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019CABA2546CFF12DF86A9408225DFD046E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1726
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: BgkebpBhISi7yrdl5zgWc6kxIH4.roa (hash: X8DOyattSG0MTouveclCaC/OSKoml4GgvWQUYGFm67c=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: xhuyxQs+co7hq5267W07PdKd4T0ymbYxvOMu5AcT6KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:54:6c:ff:12:df:86:a9:40:82:25:df:d0:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=c0b8b21c2e0d682fc3881dff9b2812c6b7d7e0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:5b:59:79:e0:38:6f:62:bd:8b:8f:27:6c:
32:6c:75:00:a7:72:19:38:16:15:a8:b4:83:a2:e3:
3b:f8:95:cd:ec:ee:59:9f:e4:19:77:1d:51:ca:38:
29:0a:52:9b:57:d4:76:20:06:ad:8d:82:ff:54:05:
52:03:88:7e:15:4f:94:27:b1:ba:9a:e6:cf:a6:0f:
db:18:0c:d6:12:36:18:a1:66:0b:06:8f:ac:d2:00:
92:df:d6:b2:bd:68:3d:bc:5d:3f:86:39:87:99:6e:
c8:6b:9b:af:7f:5d:e1:61:34:0a:4c:a2:4d:8e:a5:
29:5f:02:f5:ec:93:75:23:be:46:6c:81:ae:ab:bb:
af:96:31:20:3e:41:9f:2a:bd:af:7f:9b:9e:14:19:
e4:12:0d:57:3f:d0:b1:ec:d8:75:59:b3:98:a5:a4:
c3:f5:0b:a7:ea:65:2c:d5:b1:12:84:88:1d:bd:59:
d5:0a:2b:ae:08:94:65:af:ac:91:9d:72:8f:9a:04:
25:03:d9:be:21:6f:71:41:bc:70:f8:a1:8b:23:ea:
3a:4f:26:48:7a:e0:af:5f:25:d9:1b:dd:5c:2c:b1:
f0:f6:ac:5f:db:c7:28:50:92:74:b9:60:bf:ce:0e:
b2:93:77:1e:bc:b7:92:ea:56:41:c5:e0:d1:c6:bc:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:B2:1C:2E:0D:68:2F:C3:88:1D:FF:9B:28:12:C6:B7:D7:E0:DF
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:68:1c:23:68:05:5b:d2:9d:2a:01:56:f6:b2:8b:97:1e:a1:
cb:4b:15:0b:65:79:5b:f1:9c:41:92:da:33:84:16:47:0b:51:
42:75:0b:aa:a9:76:93:04:78:b0:75:b4:be:8d:a9:be:70:7c:
5b:5c:d3:38:39:a8:96:a6:60:f1:e1:0e:d9:7e:f6:2d:45:5b:
69:07:01:35:68:01:92:f9:43:36:7e:60:c2:b5:30:ee:2a:04:
a7:63:f8:d6:e1:5d:95:71:3e:27:5c:55:ce:31:f8:34:ab:6a:
3c:77:df:c4:d0:a6:8c:86:f0:99:27:5d:17:96:5f:9f:38:5b:
83:bc:4e:3d:c1:49:1f:ac:a9:30:4a:e7:39:82:f0:f2:41:ee:
56:ed:34:dd:05:2a:5d:65:54:4d:e2:1f:3e:e7:11:f1:82:32:
b1:ec:17:ac:ee:b8:2c:0c:e1:23:42:e2:3f:d4:90:1b:ef:a5:
0f:e6:3e:a6:9e:68:ef:fd:82:c7:f8:cb:f6:68:ed:7b:43:a1:
fb:2f:0a:74:d9:ac:74:99:66:bf:68:3f:6b:6a:19:3c:7d:78:
00:57:fa:42:80:20:d3:24:9f:74:4b:eb:06:9c:05:1e:96:09:
29:5e:da:67:5a:5b:8a:07:b4:e8:d8:59:c6:f6:69:a6:1e:9e:
11:b0:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:38 2026 by rpki-client