Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: mx6YgT4NFY21Z8q6anb6TyZ3S7B3LA1Qf0JEROGDcuU=
Subject key identifier: 49:C1:7B:8B:3C:41:22:B4:80:7C:FB:16:72:AB:06:65:20:3B:9D:42
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 019CAA58D5F29E6AF7AEDAFE7F30B456ED94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:14 +0000
Manifest this update: Sun 01 Mar 2026 17:01:14 +0000
Manifest next update: Mon 02 Mar 2026 17:01:14 +0000
Files and hashes: 1: YYcTpfzg-qxOriFzAQc4sR83vwQ.roa (hash: 5h0JVwXb5CNZ8oS+rmCxklJ1x85gCyuZA9bxlvjYhdU=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: 43WAowcN1fOxGTf9urmRoHBt654qUHS+Od0fXl84U5Y=)
3: oxwK7ORpNdbpT88HwfpKeXMaclU.roa (hash: Wa92A7nZrCyu9yJGfUvVy9HkpHlaa9cNxOWmvKp3jX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d5:f2:9e:6a:f7:ae:da:fe:7f:30:b4:56:ed:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Mar 1 17:01:14 2026 GMT
Not After : Mar 2 17:01:14 2026 GMT
Subject: CN=49c17b8b3c4122b4807cfb1672ab0665203b9d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:74:77:2f:d0:d5:6f:ac:47:ac:cd:b6:d2:
d5:47:1f:e0:5c:20:53:7f:b3:75:1f:3e:e6:fe:38:
a2:26:dc:bd:48:c4:e6:d6:67:37:24:7e:98:e8:d9:
6f:13:b1:aa:ae:a2:99:d0:c8:01:27:e1:bc:1e:7a:
eb:f0:71:d0:e0:21:7e:3f:e6:4a:d3:59:fb:94:6f:
94:23:e3:37:5f:1e:71:0e:3e:73:13:61:81:33:80:
6b:e6:6e:e8:5e:16:5c:13:3a:94:d5:0e:f1:9b:ea:
68:46:d2:2c:54:81:77:cc:16:02:d6:47:18:3c:14:
09:f7:90:e8:d4:40:10:01:b8:b4:5e:a7:4c:7c:26:
ef:21:86:1f:59:5b:28:b6:ff:21:40:c8:fb:fb:d7:
e2:0b:ed:1c:68:9a:34:09:34:e1:f6:4f:ce:5f:3e:
42:63:fb:fe:09:ed:df:85:f0:b4:0c:de:99:41:b8:
37:a6:ea:d3:8f:f6:69:95:59:37:03:4c:59:bf:15:
26:e3:85:55:0b:a4:1f:29:09:b9:82:61:4b:4c:01:
49:ef:9f:7f:dc:57:c0:30:b1:9b:96:9d:98:fa:53:
23:93:f8:fc:3f:60:81:39:23:2f:a7:c0:96:71:37:
dc:e5:6a:7b:13:d7:1a:da:9e:be:80:b2:13:e4:ef:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:7B:8B:3C:41:22:B4:80:7C:FB:16:72:AB:06:65:20:3B:9D:42
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:94:d3:89:a8:07:6c:84:42:df:a6:34:1c:29:33:5b:a2:05:
98:e1:c9:12:90:da:ad:ea:19:f5:e6:ab:15:fc:93:4c:be:2d:
67:b3:17:2f:70:45:c8:42:fd:5e:aa:75:7b:3f:ab:9a:d4:6b:
71:89:dd:28:bd:aa:03:b1:39:ac:33:21:08:04:28:78:c2:47:
db:70:50:a2:3b:f1:06:54:26:6c:71:41:5a:fa:8b:59:47:cb:
eb:87:a2:73:ed:e7:2e:5c:22:ee:fa:d8:3d:1b:74:41:89:ee:
63:44:1e:f5:13:6d:50:3e:da:20:9f:a8:bb:31:77:e4:5c:a1:
c6:b3:87:1c:f5:4c:47:36:55:71:9e:e5:24:fb:7b:b2:08:45:
27:4d:b8:cf:4f:9c:ed:33:72:24:8e:a5:55:9c:7c:28:c0:a9:
b9:bb:42:a5:12:80:20:e9:01:83:92:d6:8a:58:33:1f:59:09:
33:2b:a4:bf:e0:b6:58:58:4f:dc:a0:b4:8e:99:ea:c4:d1:9f:
45:39:5d:69:ca:29:c5:16:1b:68:15:85:cd:d9:9c:93:50:e2:
4e:e6:34:1f:18:3e:72:c9:fc:48:f3:85:d5:66:9e:1a:b3:d4:
1c:df:52:03:1b:b8:8d:2b:84:80:0a:62:4f:1a:3f:b3:ad:55:
d4:a1:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:51 2026 by rpki-client