Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: HJwS/naMUsyw+Dr4N12jPof7v0OTkU/e0BHgqd7Xy48=
Subject key identifier: DA:79:8E:00:40:A1:F1:03:15:A9:72:80:A0:F8:BF:C3:7E:EC:EF:28
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019CAA592D52DEF267B63DF385E370AD4238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 077A
Signing time: Sun 01 Mar 2026 17:01:36 +0000
Manifest this update: Sun 01 Mar 2026 17:01:36 +0000
Manifest next update: Mon 02 Mar 2026 17:01:36 +0000
Files and hashes: 1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: CV/dBsM4jRGjhhAi5nZsQ28Z8pZeQG7FVIhLxtcWHYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2d:52:de:f2:67:b6:3d:f3:85:e3:70:ad:42:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Mar 1 17:01:36 2026 GMT
Not After : Mar 2 17:01:36 2026 GMT
Subject: CN=da798e0040a1f10315a97280a0f8bfc37eecef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:04:0b:17:da:c6:32:c2:91:3a:69:98:42:
80:72:12:91:18:bb:67:34:89:93:39:1a:42:51:87:
20:64:06:b9:c1:f4:ab:29:e0:cd:99:67:1b:b9:d7:
af:46:6a:8b:f4:14:d3:03:19:dc:a6:c8:5f:23:ad:
02:60:0e:ab:40:db:9a:65:73:96:4a:95:db:d2:9c:
58:61:5e:2c:ba:db:03:c7:94:43:df:32:7e:b8:dd:
76:d3:6b:8c:ab:a3:a5:1d:0e:e9:57:79:48:b5:a5:
44:1e:94:6a:cc:1e:bf:6a:ee:43:9a:b8:61:b8:40:
72:8a:49:01:dc:a6:5a:f6:11:f1:45:46:07:b2:1a:
ed:df:58:d1:65:4b:8a:03:6a:1b:42:ea:bb:7d:1c:
22:e9:f6:be:89:3c:d7:86:89:40:d2:3b:18:70:c9:
21:81:e4:c5:bc:46:1e:f8:95:17:51:d6:77:2a:0f:
11:9d:c0:ab:83:71:26:23:3c:81:b6:a3:7b:83:19:
60:23:04:8b:fc:a0:df:0c:5f:b7:35:2b:70:77:fd:
23:d6:3e:8f:f2:d5:81:2b:8e:77:0f:e2:72:7d:2c:
9d:bc:10:29:3e:ec:8a:12:f2:a7:17:15:60:8f:6e:
3e:27:61:7a:9b:8d:bf:af:fa:e0:af:ae:4a:80:e0:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:8E:00:40:A1:F1:03:15:A9:72:80:A0:F8:BF:C3:7E:EC:EF:28
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ba:92:9b:62:27:ff:09:7b:98:49:68:5a:4d:0b:fa:33:05:
d5:3e:be:70:75:71:96:fc:92:b1:15:16:35:51:ae:08:51:ca:
94:71:2f:74:0f:4a:b8:3a:e4:2d:17:6a:93:1d:90:05:96:86:
fa:ad:fc:e7:fd:9c:4d:b8:84:b9:fb:6f:89:db:c6:70:ec:3a:
4a:b2:c5:ed:1d:03:0b:43:d9:9d:0f:0b:31:8c:0e:49:f4:c4:
d4:b2:6a:f9:67:17:7b:57:e2:0c:5f:56:e8:49:cb:85:4c:2b:
e5:ac:59:77:17:ba:ce:8e:9d:01:94:01:a4:21:f3:6f:3e:32:
95:2e:f0:90:88:a1:32:ce:27:ff:fd:9d:1a:ac:9a:0c:97:93:
12:09:c4:00:cf:9d:34:52:41:5b:20:55:a1:09:6c:b2:04:fd:
9a:23:b5:ec:21:14:0a:56:35:8d:0b:5b:53:f0:da:ce:67:c8:
dd:2e:d4:a9:07:40:d7:4c:33:d3:f9:58:d4:8e:49:e1:69:8a:
dc:71:a0:db:19:f9:76:bf:52:86:0b:01:cd:7d:9a:0b:6e:d3:
7d:8e:8d:cb:a4:1a:37:f6:d6:b8:c7:f3:11:fe:4c:0c:ce:d8:
c8:82:01:3c:b0:96:4a:4c:dd:e7:97:f8:b4:32:db:06:5c:84:
2d:d9:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:58 2026 by rpki-client