Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: o18k1qpnO+4/JSQqAhnNr/eNgSIq1OyGkMR1llLYXwI=
Subject key identifier: 23:B1:B9:4E:AB:C6:C7:F8:28:51:7C:B2:08:97:0A:D9:F0:F7:20:7E
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 019CABD8F47E62DFF45D3F81DF7E7CCDC425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 055F
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: 1teBGWyrdeMcfN_5PnazQXWLD1E.roa (hash: WrL5v9AFdVY6509NouX1fyjcl0G8QjZ4sA1Zzo1jtEc=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: sStG8wP38B8WbkTjmf8VWY6zoVIwwEnQFavY+fB0U+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f4:7e:62:df:f4:5d:3f:81:df:7e:7c:cd:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=23b1b94eabc6c7f828517cb208970ad9f0f7207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:b2:1b:58:0f:50:21:75:b4:b1:ee:b3:ad:
93:cd:11:69:61:7f:79:ec:bf:c2:4f:4e:b1:b4:b6:
0a:56:10:c9:16:7a:0c:b7:45:1f:e1:37:69:ae:15:
52:c0:78:28:c9:a9:d9:bc:ea:cf:53:ff:a8:8d:f4:
9b:b9:5b:aa:0b:b8:ee:bb:20:5a:c9:62:62:1d:72:
32:72:d0:d7:80:7b:91:d5:cc:e3:5c:ca:77:9e:9a:
ae:00:b7:a9:eb:ae:f5:bf:e5:0b:8b:36:52:5c:48:
01:cf:6d:18:b0:ea:bb:2e:f2:c5:c9:8e:19:db:17:
ec:e6:d6:86:ef:82:d3:e0:75:5f:32:78:ff:14:18:
17:e9:48:d0:f9:1f:c4:73:c4:09:41:62:cb:5d:3b:
4c:d5:6e:dd:f2:cc:91:00:b1:73:93:21:5e:b8:da:
a3:bc:3c:05:26:94:c3:b6:a1:46:98:e4:6e:51:a7:
57:55:89:31:a7:07:fb:5c:7d:46:da:72:85:a4:47:
f7:e8:00:55:75:7c:ad:69:84:47:60:0d:a2:a5:d6:
2b:75:01:31:47:ea:dc:4e:0f:d3:87:af:7a:5d:44:
41:d6:b3:2d:dc:35:67:94:d9:53:39:8d:3b:5e:18:
0f:56:fd:90:4a:7d:8e:2e:92:36:15:51:8c:f9:3e:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:B9:4E:AB:C6:C7:F8:28:51:7C:B2:08:97:0A:D9:F0:F7:20:7E
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:db:0c:f9:58:12:13:77:25:52:f1:73:fb:d5:01:dd:80:e1:
08:0e:6e:65:9d:e3:80:0d:be:db:91:69:c1:e2:1d:c7:86:f8:
28:2e:3b:a7:cc:0c:b4:cd:d6:cd:04:7e:ae:33:61:f5:a2:a2:
13:a5:11:38:15:47:55:5f:0f:d7:d4:5b:a5:59:12:91:c8:02:
28:1f:16:8f:96:9c:54:65:45:a1:de:b1:29:b8:d6:ee:16:40:
cd:25:45:62:3e:92:98:6d:d5:d5:ec:4e:83:67:a3:9f:10:87:
35:2e:7f:c2:0e:5b:e6:f3:4d:96:59:f4:37:6f:a0:f3:c8:90:
a2:51:21:0a:b5:46:d4:de:c8:e7:77:ed:b9:19:8c:cf:93:27:
a6:fa:f8:14:2c:99:ba:4d:26:2c:19:7b:4a:07:41:44:16:f6:
46:cd:dc:5c:8b:53:a2:d2:1a:e7:16:a2:ef:c3:33:1f:4f:83:
55:34:3b:f5:f1:83:75:47:9b:bb:a1:79:01:c0:01:fa:4c:7f:
dd:f7:d5:f2:eb:96:8e:bb:08:03:03:9c:97:bd:d0:48:78:ea:
86:7a:10:9b:fb:f6:76:a8:a1:92:c6:95:d1:c1:5e:bd:74:98:
16:53:b9:09:66:82:27:98:aa:c2:8e:4d:b7:aa:64:27:f1:c5:
69:e8:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:33 2026 by rpki-client