Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: Gul2nzQ/KUhxrClAGOif3hQNNB6mWjdGCLajYFKR7oU=
Subject key identifier: 1E:6B:AB:B3:73:BF:80:18:F1:BE:20:31:59:EA:17:28:0B:BF:43:7C
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019CAC4683AB13D20D2D0651DBA42C44F215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: ThGR0cOh6M5/UXqg43N4aIyLdhDwoUcWxCqNTK2O1+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:83:ab:13:d2:0d:2d:06:51:db:a4:2c:44:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=1e6babb373bf8018f1be203159ea17280bbf437c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:ac:92:03:c0:ae:1c:a5:bb:28:0f:a4:7f:
53:2c:35:3a:3b:30:4e:53:d8:48:fd:30:2d:e6:5a:
c5:26:97:fa:52:7b:54:8d:8c:86:e9:4e:05:1f:8c:
6c:06:7a:11:3f:02:f7:82:08:ea:f5:77:81:e7:b8:
1b:9b:3e:aa:69:1a:01:6c:2c:f5:3d:bd:56:c5:dd:
68:44:8b:c8:98:97:94:82:28:f6:41:76:93:b0:ab:
1d:37:7e:45:bf:ac:8c:2e:bf:39:ae:0e:6b:72:c4:
c0:ee:2b:35:54:6d:e5:c5:08:58:7b:8e:7c:34:fe:
4e:00:f2:f1:64:3d:a0:03:4a:d5:ca:95:09:82:95:
4d:5d:15:e0:c1:29:14:22:34:20:e0:ec:b7:3c:ee:
9f:b5:80:4e:e9:04:f4:81:6e:49:27:9f:dd:82:fb:
53:f6:96:c9:a8:47:a4:25:14:e8:dc:68:ef:49:e4:
45:fc:ad:a6:44:4c:73:85:0c:26:ef:81:52:64:6d:
27:b7:cc:37:d3:82:1f:a5:1a:09:cb:aa:fb:8c:ad:
02:4b:e9:10:e7:13:de:f3:30:66:ff:a4:c8:89:f6:
30:a1:9a:b8:b7:b9:22:ef:1a:5f:3f:d2:07:d1:7c:
31:27:90:6d:83:75:c4:54:60:58:55:90:be:5d:4d:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:AB:B3:73:BF:80:18:F1:BE:20:31:59:EA:17:28:0B:BF:43:7C
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:76:e8:51:82:8b:59:43:3d:48:3d:47:50:a0:2a:e9:52:83:
bc:d0:1b:e6:a9:e6:78:f2:c1:94:17:b0:39:40:0b:29:bf:39:
23:46:93:6a:53:c6:11:e7:7f:60:27:45:57:bb:2a:98:6d:be:
20:fb:b4:0d:21:e3:b0:82:c3:a4:fe:12:26:4e:17:15:4e:95:
78:04:bc:b4:ab:2c:3c:25:c6:5a:ef:ac:2c:29:0f:2b:29:e9:
e5:9b:aa:7d:ab:97:08:70:bc:48:20:a0:c0:9f:f8:2a:88:78:
00:8b:62:d4:14:69:e5:ca:73:aa:9e:da:0b:9e:e9:b0:4e:8f:
82:27:84:85:75:1f:56:46:62:e5:eb:53:28:04:c2:df:fc:15:
21:42:28:a6:08:ed:82:2c:1f:75:2a:16:5e:fc:58:19:f5:e7:
87:f3:d5:ea:13:cd:51:6f:d8:fb:bb:d9:d1:7e:b6:99:6c:13:
a5:e3:a3:9e:62:7d:a2:07:4c:ba:a3:97:e9:60:26:f5:1d:19:
9f:8d:a7:f0:a2:a1:82:4f:86:7c:30:70:fc:30:ad:fa:ee:2d:
dd:85:ed:97:cb:f8:65:bc:6a:0e:9f:be:35:7a:1d:64:76:e4:
37:49:95:d7:7e:c0:1d:52:97:58:bf:9a:87:c7:bc:0f:ee:53:
f5:aa:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:47 2026 by rpki-client