Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: DS2cESET9HEZw7SOUgjFmj3297LuFSl4GVSf0JsnU4A=
Subject key identifier: 74:DE:68:32:38:93:C6:0F:43:C6:A5:05:19:D4:E2:1B:4B:C2:10:5F
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019D37C0FD83C24705C2FF06E5A6D4829A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 1851
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: v1ho/w8mr/km6u0d9WUMBhaYWCoXqC3zUIrqRNeGSqY=)
2: hs1mGbyytLZUcmmoRa1vmUrBtV0.roa (hash: Q7jJNRLIE/XZCLjYqKH3txSs09Wat8XFnoEvxouvOI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fd:83:c2:47:05:c2:ff:06:e5:a6:d4:82:9a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=74de68323893c60f43c6a50519d4e21b4bc2105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:b0:60:37:b9:3a:3c:dd:56:74:31:f1:e1:
33:cd:72:c1:c7:d1:26:12:ae:5b:ef:95:86:da:3b:
93:5c:fa:7c:16:a4:a2:42:f9:9a:ea:4a:3d:ab:24:
61:c8:96:4f:49:50:67:7f:e4:48:40:c4:9c:e2:5a:
15:d3:17:2d:c7:23:44:5e:22:e5:62:b2:a1:45:97:
20:cf:69:0f:c5:2d:a8:0f:b7:07:6d:6d:6c:f5:b8:
17:4b:27:d6:3c:8e:27:3e:a0:35:1f:68:c0:1a:24:
12:df:be:37:90:2c:a5:fd:58:2a:95:02:49:a7:d6:
e1:2c:d1:c2:b2:0a:23:3e:68:1c:5c:09:f9:17:28:
da:e9:fd:8c:e9:b5:f5:79:bb:e8:48:9e:30:79:0d:
6d:92:db:24:50:2a:d1:c1:9c:2e:22:e8:d6:99:0a:
30:e9:bb:89:83:07:81:64:e2:1f:9d:2a:82:40:50:
36:92:ad:1a:e4:05:0e:ff:a7:01:d4:10:38:de:81:
a0:30:e6:6d:5f:92:bc:74:1b:a9:eb:c3:6f:72:db:
b0:6b:b7:c8:65:bd:05:5a:8c:bb:16:38:28:a5:d5:
e7:99:e4:66:5c:24:4f:4a:be:37:fb:15:c6:29:1a:
d6:40:0d:83:ae:7c:08:47:6b:47:44:f2:35:f3:09:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:68:32:38:93:C6:0F:43:C6:A5:05:19:D4:E2:1B:4B:C2:10:5F
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:f9:bf:96:85:c3:40:8f:5a:e6:8c:38:89:51:79:28:4b:
fb:12:24:fe:45:3b:e7:e4:22:d7:17:ec:90:aa:a1:2b:2d:65:
bf:f0:7e:85:5c:63:cd:9f:72:21:49:d8:2a:59:1d:b3:5c:bb:
ed:2f:d1:b5:af:57:fc:f6:d9:7f:12:e6:d5:61:25:2d:b7:cd:
c5:62:c4:00:57:1c:e4:8d:88:0f:7d:19:3f:ff:c8:5e:7d:8d:
65:53:92:e6:9a:e5:8e:8d:a9:10:0f:e1:8e:12:8b:de:52:62:
06:fb:9a:3a:d6:0a:eb:25:4e:7c:9f:37:b1:d8:45:23:94:50:
5b:0b:fa:84:77:8c:02:cd:44:24:69:e6:15:71:65:b3:40:d0:
18:93:75:81:c7:8a:67:cd:15:05:2b:c8:03:67:1d:16:82:42:
43:cb:99:56:03:5d:e7:c5:6c:e3:56:c6:36:41:f4:be:8a:4f:
34:9b:71:4d:1e:bb:07:b3:31:81:3f:c4:45:5d:1f:51:87:15:
fc:4f:4e:9e:2c:78:64:67:68:55:de:e4:c8:f1:e9:86:41:92:
af:d2:22:95:cd:2d:0d:73:7e:f7:28:33:8c:21:0b:3d:64:32:
2d:d5:6c:e9:69:fb:ea:e3:f8:2e:f0:68:cc:1f:4d:19:e9:e9:
f2:86:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:35 2026 by rpki-client