Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: oRUX2Q3cgReUu9uDdDimQtzkC+LEKCa+8F9D72N8JLY=
Subject key identifier: 7E:BD:F6:AA:94:CE:5C:2B:47:15:6C:40:9F:C9:10:0A:33:7C:F0:0E
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 019CAB6BE8F1870142D8FC269D65A77F405A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: J13kXmJ3D0YA4Jk4VUUYm7s+P+Kgk9y0kKKmPdDtD1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e8:f1:87:01:42:d8:fc:26:9d:65:a7:7f:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=7ebdf6aa94ce5c2b47156c409fc9100a337cf00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:67:e6:0d:8a:97:d1:39:b1:dc:03:88:d6:
b3:48:16:e5:86:57:4d:08:db:d9:8c:32:f0:ac:c0:
b8:4d:14:f1:3c:06:75:86:c2:d0:b9:0b:53:dd:f7:
a7:24:36:1c:78:18:11:fb:64:29:6f:8f:bb:fe:c7:
38:86:07:9f:85:67:c9:d9:64:6a:59:f6:9c:85:4a:
20:62:61:20:39:db:cf:69:c2:26:f4:81:14:c3:b6:
77:1f:b9:64:be:92:3b:ee:65:ee:c4:1b:80:0a:67:
57:4b:e5:0c:67:8a:c9:ee:90:4c:64:5b:7e:e7:ee:
69:e9:7b:41:90:e2:55:99:eb:76:fc:b5:f9:39:3a:
79:88:e0:75:97:3d:76:e4:13:a9:03:a2:6d:34:ea:
f3:98:c1:48:32:6e:19:99:bf:b1:d5:58:4b:4c:95:
ec:e5:ac:85:4f:89:c4:88:f4:06:3c:97:66:9c:36:
52:06:c5:b7:3a:63:3f:21:6e:73:d3:fd:7d:18:0b:
4d:e2:16:34:4d:2a:30:59:1a:3a:2a:1a:48:1e:b8:
bd:2d:dc:93:33:12:dc:54:c5:a4:9e:01:b0:e4:ee:
0c:ae:59:41:34:c2:c3:a8:dd:8c:52:09:38:b0:73:
8b:dd:13:86:8c:75:35:87:69:55:ab:be:cd:dc:93:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:F6:AA:94:CE:5C:2B:47:15:6C:40:9F:C9:10:0A:33:7C:F0:0E
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:3a:eb:f5:09:9f:99:16:f0:42:89:0c:7e:42:43:8d:39:
cc:4f:21:e8:93:90:77:78:54:06:ca:80:ad:0b:7a:39:9a:52:
85:2a:70:7f:e0:90:3a:53:ff:c4:9e:5b:23:f3:5c:b5:06:ed:
04:a4:8d:78:7f:9d:2f:e6:be:4d:87:82:c9:c1:0e:25:15:96:
a5:d5:b5:71:b8:17:bb:0a:d1:7c:3f:64:94:f6:5a:86:ea:4d:
d4:3b:ac:40:96:8d:32:85:d3:be:f1:33:33:c6:2b:2c:76:dc:
92:0a:34:3b:54:2a:79:2f:c0:9f:05:db:46:c8:15:82:1d:d5:
ae:d8:93:e8:b6:f4:f1:f9:8b:5b:8b:46:fd:97:d6:84:d9:c0:
3b:ef:32:65:25:c6:86:fa:d8:66:6d:d5:87:50:ec:98:6a:21:
76:1e:e5:80:53:0b:6d:99:8b:7a:53:b4:c8:d2:06:ec:05:91:
bb:d6:82:f3:4d:d4:05:13:9e:24:7d:5f:1e:92:eb:b4:6c:ae:
cf:5b:ce:50:d6:5e:6a:c5:3e:b5:a7:84:67:61:b1:74:04:f8:
e7:a4:7d:bd:34:2b:03:68:07:57:f2:5f:66:22:a0:50:94:d9:
94:41:59:a0:51:ea:cd:5e:f0:7b:5d:d6:f5:c9:f9:2a:b3:f4:
51:36:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:29 2026 by rpki-client