Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: VlyYLCf1WwInooRU8ul/+Vs7C6FPn1otU5bcJFvmu9k=
Subject key identifier: F4:03:4F:99:ED:17:BC:0D:5B:1D:B9:D7:2F:D8:92:43:8F:DD:43:E9
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 019CADC74D4AACCE49F9D337CD87634B42E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 09:00:45 +0000
Manifest this update: Mon 02 Mar 2026 09:00:45 +0000
Manifest next update: Tue 03 Mar 2026 09:00:45 +0000
Files and hashes: 1: GyhIX9G7ssewah6bDhgNQPrqbwo.roa (hash: kljqR0c8WAPsE2bmcYrTdPFXyOSyujcjC+p/sprv0mg=)
2: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: jm6azyFKakBp5zwGTIqEdrex+sP3kN73bOULR94miEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:4d:4a:ac:ce:49:f9:d3:37:cd:87:63:4b:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Mar 2 09:00:45 2026 GMT
Not After : Mar 3 09:00:45 2026 GMT
Subject: CN=f4034f99ed17bc0d5b1db9d72fd892438fdd43e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:56:7c:10:b0:2e:bf:d4:98:d3:f0:39:f7:
59:43:fc:67:a5:3a:bc:d8:88:e5:c4:f2:1c:43:2c:
71:01:96:b9:93:84:15:17:0a:07:7e:33:86:f0:6a:
21:09:b3:ab:47:b6:ee:8f:f0:df:23:ad:d5:87:f2:
e4:66:57:44:c8:a7:0e:8f:80:fd:6f:6f:cc:e3:11:
3d:46:c9:60:db:b4:a1:1b:cd:36:5d:35:65:77:73:
29:06:45:5a:f9:6d:fe:c2:b9:d1:53:5e:f5:a0:32:
b0:13:96:64:6a:90:e5:1c:38:2d:df:60:09:07:4b:
1a:b0:cf:ba:4b:1a:6b:86:8e:d6:41:6c:e1:e8:26:
54:9b:4f:99:f9:39:38:ce:53:54:72:64:7d:44:d9:
29:83:e7:8b:ad:6f:7d:7d:12:91:50:ce:a8:76:74:
a6:a7:f9:64:f7:d2:01:c7:60:ce:fa:21:2d:4b:9b:
13:11:79:41:cc:65:54:e8:d2:69:77:77:87:a9:14:
52:b7:86:55:7f:21:ba:34:c8:0c:c3:89:04:b3:2e:
ec:52:53:65:49:3b:61:51:02:61:4b:bb:d6:92:a9:
6f:1c:5d:74:0a:d5:fe:e1:f0:0a:20:1f:d5:f8:2b:
7d:64:f9:38:0b:2e:b4:17:5b:5b:36:6d:9f:e9:b8:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:4F:99:ED:17:BC:0D:5B:1D:B9:D7:2F:D8:92:43:8F:DD:43:E9
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:62:63:4a:88:77:6c:f6:8e:e2:1c:67:77:d3:ce:a2:cd:34:
6c:73:a8:b2:c0:9a:5f:b1:c2:15:dd:24:4f:ee:25:85:f4:84:
54:fd:27:03:9e:30:ce:b2:b5:74:bc:cd:8c:99:7d:75:83:0a:
c2:61:97:99:47:18:fb:e0:15:f4:32:01:ad:c1:a6:05:ae:92:
94:cf:17:02:0a:25:1c:6d:17:df:e0:37:17:58:45:a7:5b:36:
23:1c:48:3c:1d:a9:51:9e:9b:eb:b8:7d:47:86:10:25:32:6d:
97:7a:a8:86:5e:46:84:7e:2e:77:26:5d:32:d9:d7:c2:77:12:
60:a1:48:fa:65:54:c2:dc:7b:7b:78:a0:b2:5a:68:4e:51:0a:
39:36:37:46:fc:e6:55:78:9f:ed:15:2a:8b:a8:a8:84:cc:c5:
ba:87:87:bf:5e:a5:a9:a3:b7:8e:2d:d4:2e:c5:e4:f0:5b:96:
18:74:35:e3:3c:f3:8d:d6:20:90:b3:75:94:f1:6f:4b:42:7c:
08:fa:c3:5b:14:1c:cf:ac:02:f6:9d:09:71:0f:f9:16:35:9e:
24:0a:dd:3e:4d:6c:5c:37:77:e1:60:cf:f9:09:70:09:e8:4e:
58:9e:80:cf:1b:0b:c1:cd:b6:8d:de:52:1c:dd:c9:f5:96:ae:
fa:c9:df:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx01KrM5J+dM3zYdjS0LiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm
MGYzNWUwHhcNMjYwMzAyMDkwMDQ1WhcNMjYwMzAzMDkwMDQ1WjAzMTEwLwYDVQQD
EyhmNDAzNGY5OWVkMTdiYzBkNWIxZGI5ZDcyZmQ4OTI0MzhmZGQ0M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UdWfBCwLr/UmNPwOfdZQ/xnpTq8
2IjlxPIcQyxxAZa5k4QVFwoHfjOG8GohCbOrR7buj/DfI63Vh/LkZldEyKcOj4D9
b2/M4xE9Rslg27ShG802XTVld3MpBkVa+W3+wrnRU171oDKwE5ZkapDlHDgt32AJ
B0sasM+6Sxprho7WQWzh6CZUm0+Z+Tk4zlNUcmR9RNkpg+eLrW99fRKRUM6odnSm
p/lk99IBx2DO+iEtS5sTEXlBzGVU6NJpd3eHqRRSt4ZVfyG6NMgMw4kEsy7sUlNl
STthUQJhS7vWkqlvHF10CtX+4fAKIB/V+Ct9ZPk4Cy60F1tbNm2f6bhQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQDT5ntF7wNWx251y/YkkOP3UPpMB8GA1UdIwQY
MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt
MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3
LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWJjSoh3
bPaO4hxnd9POos00bHOossCaX7HCFd0kT+4lhfSEVP0nA54wzrK1dLzNjJl9dYMK
wmGXmUcY++AV9DIBrcGmBa6SlM8XAgolHG0X3+A3F1hFp1s2IxxIPB2pUZ6b67h9
R4YQJTJtl3qohl5GhH4udyZdMtnXwncSYKFI+mVUwtx7e3igslpoTlEKOTY3Rvzm
VXif7RUqi6iohMzFuoeHv16lqaO3ji3ULsXk8FuWGHQ14zzzjdYgkLN1lPFvS0J8
CPrDWxQcz6wC9p0JcQ/5FjWeJArdPk1sXDd34WDP+QlwCehOWJ6AzxsLwc22jd5S
HN3J9Zau+snfXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:31 2026 by rpki-client