Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: AlUJiHLAlhAmLrtQJJrLrSIxED01oCYOihHsOzn7KSg=
Subject key identifier: 81:2F:24:8B:63:61:FC:12:D9:D4:23:4C:79:25:B2:B8:2D:CF:F7:BB
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 019CAB6B86C8D265D23E716F245A3579A8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 182C
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: 7w7oDCky3AV97MuZ6NwGQ3x9HGU.roa (hash: 7XBb43aHvOCSfipcR6qByLYTIyX5HDAp9+iD4nMHLV4=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: g1yEAlQUVlUZu8QmMXWljW6FHyU+kRaOh14nMPRcfkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:86:c8:d2:65:d2:3e:71:6f:24:5a:35:79:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=812f248b6361fc12d9d4234c7925b2b82dcff7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:c5:98:e6:c5:fc:0b:84:66:20:ab:9b:ba:
74:b5:55:ab:4f:2d:ba:36:ad:54:ec:79:77:4c:10:
ac:c9:64:3c:e5:73:9b:23:0a:b7:7e:ab:d8:04:db:
42:ee:bf:c9:e6:8c:1c:eb:53:9f:56:a4:2e:ee:63:
99:f4:77:e6:8f:ce:06:a5:fe:aa:16:c6:74:26:98:
91:6e:47:cf:08:4c:ff:5f:9f:5f:af:b1:e3:89:32:
f6:e7:cc:56:83:86:c8:61:40:e9:4f:79:87:78:e3:
85:74:1d:d1:7d:20:21:98:6e:cd:78:dc:02:87:15:
b0:96:c3:4b:de:90:31:f1:79:e0:ca:9d:1a:88:5d:
52:df:d7:c2:c9:45:25:d5:86:ad:e8:c1:bf:7f:c3:
89:34:84:3d:9e:17:17:be:0b:a4:d3:2f:19:93:e5:
1d:57:7e:2b:4c:44:d0:ad:9c:84:38:95:32:20:d7:
88:7d:56:e2:45:80:09:55:7b:2f:c2:8b:c2:27:0f:
fd:16:68:93:27:a1:47:72:a7:5e:6e:d4:22:56:e3:
b3:cf:fc:86:41:c9:d6:26:4f:49:a6:1c:6b:8d:41:
9b:92:51:9c:b4:17:6e:b6:2a:0d:04:40:93:2d:ee:
8d:4e:04:55:28:52:11:5f:f5:ad:c0:45:2c:5d:58:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:24:8B:63:61:FC:12:D9:D4:23:4C:79:25:B2:B8:2D:CF:F7:BB
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:32:46:e0:71:29:b6:fc:6a:74:bc:37:33:2d:0f:a1:50:
84:ea:dd:48:ea:d6:62:18:50:f5:cc:db:40:b4:15:b7:8b:42:
61:dd:bc:b5:e4:17:cf:87:cf:3e:97:f6:a2:ae:6d:b5:da:17:
13:c7:cb:ed:9d:82:60:9d:53:3b:84:09:f0:89:f4:36:96:ab:
c9:b0:98:c0:83:a8:50:e6:f9:5b:d5:45:6f:cf:0d:97:9d:0a:
8c:6b:7f:b0:96:e3:a9:ed:9d:68:07:ce:c5:bc:bb:a1:93:5f:
6e:6e:db:92:d6:b2:dc:55:ab:ba:21:c3:db:44:49:c2:e5:05:
63:a0:24:8a:0b:3c:3d:fb:03:b4:cc:b8:fd:cc:11:1f:d8:bb:
ee:90:46:32:7b:5a:a6:a2:ba:96:0e:93:57:ed:e4:ea:4e:2a:
21:2e:fb:61:ea:e6:87:f3:10:8a:f0:45:9b:cf:fc:cc:4a:ec:
e6:92:7e:99:91:1c:9f:60:25:8f:0e:ef:7c:7c:18:90:e8:83:
74:bf:9b:0c:d0:0a:13:5d:be:84:2b:95:d9:61:9d:80:94:9b:
8d:3c:73:4f:6a:f9:70:16:39:59:e7:dc:1e:95:74:56:e5:9a:
64:17:84:51:c0:87:06:25:0f:a0:f7:ad:dc:2c:2b:39:33:e2:
21:e7:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:32 2026 by rpki-client