Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier: 7gT/6hQs5OE0nm0KRsg1ys3HMcVC3eD2Up9MGIdY5bw=
Subject key identifier: BC:DA:D8:D2:DA:2F:14:79:FF:37:0D:C0:36:E3:5E:06:CF:96:36:85
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019CA9EA8200F4C590BD9646A17E2DC7CA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:00:44 +0000
Manifest this update: Sun 01 Mar 2026 15:00:44 +0000
Manifest next update: Mon 02 Mar 2026 15:00:44 +0000
Files and hashes: 1: NCKrnZ6BBgRyh9N8rjzonLxGGi8.roa (hash: cPlIwNXE1gIgFxpt8lhNk4Dl9OB1ImP6P9GMfjOfmqQ=)
2: QN1eUaTvYAP_ELe-EbMtz85iMfc.roa (hash: xwP2gxjcLucn9cj9qV9ME9PvxT/Q/xeoP3TDbLZIYfY=)
3: Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa (hash: 5B/exxRvB/e4faBVuRg/6C6JUY3dZXdeStf6YjAxx6c=)
4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: 2xC6/9/PVZjjBna3HMW6CXWTC67Nf3r16APRwNhM+Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:82:00:f4:c5:90:bd:96:46:a1:7e:2d:c7:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Mar 1 15:00:44 2026 GMT
Not After : Mar 2 15:00:44 2026 GMT
Subject: CN=bcdad8d2da2f1479ff370dc036e35e06cf963685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:fd:ee:78:6d:b9:08:30:df:db:02:f9:09:
e9:87:42:92:b2:be:1c:aa:6c:b5:3a:3f:c7:2b:eb:
2f:79:b9:b5:17:63:46:a3:5f:4d:44:e6:5c:11:29:
46:5d:7d:bf:19:03:12:c2:39:45:bd:17:9d:72:bd:
5d:0a:7d:16:61:60:cc:c6:15:4b:e3:68:f2:0e:c8:
78:41:0e:d9:4f:b6:3a:2b:a2:e3:f1:df:ba:61:77:
7e:64:3b:cd:98:e9:03:9f:18:64:d4:ec:1b:5c:09:
40:a0:b5:6c:d1:48:a5:ea:27:82:7a:fb:d8:82:72:
d0:e7:84:d7:20:22:cf:0f:1e:ed:5d:5e:1a:6d:4f:
ce:20:f7:41:5f:a1:25:b9:cb:93:21:ed:e8:ba:d1:
69:fa:35:a7:a0:a0:1b:84:47:35:32:ce:a2:65:e3:
64:85:56:33:cc:cf:83:2b:5a:84:7a:22:2a:3c:c1:
83:01:52:3a:86:b4:d4:b7:cc:75:7b:1a:7d:75:30:
4f:9b:15:48:79:bf:75:f4:0a:f7:ac:d5:33:e3:83:
cd:f9:e3:64:37:c7:30:e2:3b:72:e2:ca:99:67:eb:
3f:f3:96:25:b6:7d:2d:8b:e9:90:f5:35:cb:25:d6:
50:9d:14:d6:81:c5:b5:64:76:f4:c2:8a:bf:95:d2:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:D8:D2:DA:2F:14:79:FF:37:0D:C0:36:E3:5E:06:CF:96:36:85
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d1:03:37:bf:ba:02:73:d7:ac:a2:0f:55:35:35:8d:dc:ef:
29:ee:68:c0:dd:43:58:52:83:87:03:de:e6:9a:51:99:df:1d:
64:07:08:5c:3b:b3:27:5f:8d:5d:39:b9:a7:c1:2e:f9:d4:f1:
67:a5:05:a4:2e:97:7b:d0:2c:c9:24:60:4e:82:83:36:21:c6:
2d:f3:31:0d:da:3d:f6:02:c8:01:cf:cd:ec:9b:94:65:05:98:
27:1a:f2:e9:5e:03:af:e2:93:b5:02:69:ce:c6:7e:93:bc:85:
44:fd:6a:fd:d5:b9:8b:ba:c8:0c:e7:e8:38:6b:90:4f:74:31:
10:21:a6:ea:ae:0a:c5:29:75:9e:c1:9e:74:14:bd:a3:0a:4f:
c6:f1:2e:7b:df:d8:8a:3a:7c:73:76:e9:0b:ef:d4:09:8a:2e:
45:66:19:77:7a:17:9d:0f:95:4c:c9:0f:56:85:15:72:9d:35:
bd:92:f1:6d:2d:56:50:e4:5c:4a:44:e5:45:5e:9c:19:b2:a6:
c0:28:e1:e9:6b:51:a5:be:57:f9:1d:a8:f5:4a:f7:dc:1d:e0:
f0:98:19:42:5e:f6:a0:4d:fa:b6:b9:37:54:64:f9:65:17:8a:
74:54:94:6f:c3:10:4e:b4:e0:13:c3:d9:b9:03:8f:ec:b0:2e:
16:d5:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:36 2026 by rpki-client