Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: fwvsxL13UXa7X9TfOTRapr/po90xVrs7WJWy47JoQ3s=
Subject key identifier: 8B:E9:61:5E:CD:32:36:BD:2A:8E:49:16:5C:19:C3:6F:49:33:B0:7F
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 019CAA586150D5CB3776A122E2573BAD89B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0CB2
Signing time: Sun 01 Mar 2026 17:00:44 +0000
Manifest this update: Sun 01 Mar 2026 17:00:44 +0000
Manifest next update: Mon 02 Mar 2026 17:00:44 +0000
Files and hashes: 1: HAZA6F3BwOd0IfWybSlNKmtev0c.roa (hash: gALftZc7LvU74tun0cfmm/0H5zwtdsQqdDGCiEp/ba4=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: XLPNeCpfjbni/e2pz6dZBXvgcENSQpLiLJ2Wt4zpZwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:61:50:d5:cb:37:76:a1:22:e2:57:3b:ad:89:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Mar 1 17:00:44 2026 GMT
Not After : Mar 2 17:00:44 2026 GMT
Subject: CN=8be9615ecd3236bd2a8e49165c19c36f4933b07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:1c:0b:dc:cc:c6:33:d6:f9:e0:39:ab:d0:
af:98:04:85:26:9c:95:51:13:46:e7:16:85:a8:e6:
b0:12:6c:cc:59:c1:fe:62:5c:54:e4:89:14:fd:4f:
ad:e6:97:91:5c:fd:dd:d1:60:d7:00:ec:58:ae:2f:
6a:92:4e:6c:65:7c:67:1b:ef:8a:c2:ba:d3:40:33:
17:f3:f2:6e:a9:1f:ec:b6:46:27:74:1d:76:83:fd:
c7:32:ff:f9:81:24:32:5d:34:de:51:c5:2f:80:cb:
62:9b:9d:08:6a:a1:c2:da:ae:24:b1:1b:ae:03:49:
71:33:46:43:cf:cc:07:ae:8a:60:b1:db:3f:b4:6e:
ea:e0:c5:6d:4d:f9:34:19:59:06:6e:b9:e5:2d:c7:
a8:7e:84:38:d5:11:3c:6b:83:98:9c:3b:ec:d0:9e:
82:a2:de:b8:16:36:85:ff:cd:1b:b9:b2:87:4c:24:
b0:65:ac:43:33:f6:d4:b5:ae:24:82:56:bd:5f:73:
f0:cf:ae:73:88:af:47:63:7b:14:a9:93:5d:22:83:
bf:eb:6a:b9:ea:41:58:97:a4:97:86:0e:a6:e7:a9:
37:1c:03:fd:03:c9:e5:27:ec:bc:ca:4f:d7:87:1b:
fc:d1:65:0d:5e:db:a5:7b:be:bb:5f:ff:af:07:8d:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E9:61:5E:CD:32:36:BD:2A:8E:49:16:5C:19:C3:6F:49:33:B0:7F
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:27:fa:f3:cd:61:7a:08:58:1f:9f:79:be:08:2d:9f:6c:82:
e6:f4:a9:de:44:af:c8:e4:24:d9:63:cd:db:da:30:9f:82:64:
bb:c9:e6:8e:c3:1f:dd:f6:73:b4:3e:67:d8:5c:e4:d1:d6:b4:
d6:09:7c:e1:02:aa:45:40:82:41:46:6e:95:44:90:70:77:93:
67:86:c6:ab:83:f0:66:1d:a3:17:1a:38:49:6b:d8:f1:03:c8:
a6:28:a7:24:b3:b1:37:16:c2:35:40:91:6e:a9:f8:a7:f3:7d:
44:3f:96:0f:46:ce:cc:50:a7:d1:4e:3e:86:77:c1:49:3a:01:
78:c5:41:2d:4e:1a:34:f8:62:bd:3c:6c:50:6a:1c:b7:b1:92:
c0:1e:b5:c0:2a:ed:2c:7a:9d:57:72:09:48:0b:a6:8e:10:ad:
e9:2a:f0:0b:05:68:58:f0:2d:31:85:84:8f:35:0b:ae:26:91:
fe:22:4e:1e:6f:ba:47:da:ae:f5:d2:71:aa:9c:48:38:14:c8:
9c:07:6e:23:ee:de:39:34:11:d6:61:dd:8d:a5:46:f1:60:c7:
1a:a0:02:ea:59:3e:52:32:6e:5d:8e:ac:0a:df:a1:0f:db:6e:
0a:bb:e1:91:4f:ae:db:ea:84:1b:22:1d:c4:fe:b1:47:38:c3:
e0:63:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:07 2026 by rpki-client