Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: vi63q/76BKFIcDkE9Lv58IWMZX//T9qg0BpK08pwAXc=
Subject key identifier: EA:75:4E:8F:B1:21:46:76:7C:BB:5F:83:30:D0:25:23:D9:71:A5:A1
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 019D37C0FC7C792D20E16EAE5B9354FA1BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (hash: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0=)
2: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: 2ztuvhKmA5sKMbaKbC5FdYz6Dm1CsH5mAAdJqao/Fvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fc:7c:79:2d:20:e1:6e:ae:5b:93:54:fa:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=ea754e8fb12146767cbb5f8330d02523d971a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:c4:3d:e4:3b:5a:ba:f7:74:2c:ad:9b:99:
58:d5:d9:7b:1a:ec:dc:fe:5b:4e:eb:eb:ef:a4:32:
d6:40:38:bf:72:67:ec:f7:cb:37:ed:d6:c4:52:fb:
bb:9a:28:32:43:52:8c:fe:eb:14:5d:bc:23:3f:78:
2b:94:b9:a5:eb:aa:09:ad:bd:9d:e9:ce:63:e4:7c:
2f:a5:dc:21:7a:56:a4:4f:06:aa:77:28:4c:6b:b8:
93:6b:28:3d:72:05:21:af:ca:ce:f1:10:6b:d9:fb:
36:45:f0:91:e2:7a:78:a4:48:38:7e:0f:30:53:08:
ac:d4:77:2c:06:f0:6c:bf:3b:08:e1:5d:e5:54:11:
af:00:59:41:16:13:11:d4:a9:8b:bc:17:a4:ad:5e:
a9:ec:08:86:18:f4:f0:7d:a2:56:76:09:98:62:36:
f9:0c:9d:57:4f:a1:23:30:29:dc:d1:6a:0b:aa:dd:
3b:ab:7b:fc:92:76:2f:45:35:e0:1f:df:97:1c:4d:
7b:b6:0d:29:d0:70:52:dc:84:0c:e3:d5:52:96:24:
4e:d3:73:eb:ae:d3:75:41:18:1c:17:79:ec:2d:7e:
c3:f8:48:c4:77:cb:c9:1b:c3:85:f4:bf:03:c9:ab:
eb:50:eb:39:4f:20:89:34:44:4f:9d:f5:35:de:d2:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:4E:8F:B1:21:46:76:7C:BB:5F:83:30:D0:25:23:D9:71:A5:A1
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8f:fa:42:5c:9d:16:b1:1a:d5:96:cf:88:c0:03:d0:ee:72:
c3:c4:21:8d:3b:e1:b0:c1:e0:2a:ac:1f:1b:b8:c8:41:d2:95:
e0:a1:78:99:8e:70:28:ef:75:89:b5:6a:d6:86:51:5d:7a:a0:
3d:0a:04:3d:b6:ad:4f:af:66:20:34:72:29:1a:3b:15:ea:c2:
eb:19:f5:d7:f6:4c:a5:ef:2a:c7:1a:b2:d0:7c:b2:1a:71:d2:
fc:2c:08:ac:c2:9e:7e:a1:43:cc:85:d2:bd:d0:96:82:fd:0b:
8b:82:5b:15:5d:d8:25:58:ed:31:07:1b:54:79:89:5a:c6:5a:
2b:41:c2:d1:a8:42:31:90:54:12:80:f6:27:53:95:18:a2:24:
30:ae:52:75:df:e6:6c:29:56:c1:0e:c5:65:ff:8b:cc:8a:17:
79:8e:04:c4:e4:74:da:d3:64:cf:ad:9c:ea:42:8d:64:bb:ba:
80:0d:38:eb:fc:8f:7e:ad:b8:a7:dd:4e:02:5e:ad:f4:9e:fe:
38:2e:85:e8:9b:1f:ae:bc:5e:1e:eb:81:e9:1b:18:c0:eb:ca:
47:98:69:35:46:34:e1:12:70:77:dd:41:6b:a7:12:e3:e4:d1:
1e:80:75:b2:e9:5a:8a:92:13:cb:e1:a9:6e:05:62:4c:c9:85:
8e:72:2a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPx8eS0g4W6uW5NU+hu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MWQ0OTNiMWJjMGE4Yzg1MmRkMTFjZmM5Mzc4OTFkYWMz
ZjA3YzIwHhcNMjYwMzI5MDQwMTI3WhcNMjYwMzMwMDQwMTI3WjAzMTEwLwYDVQQD
EyhlYTc1NGU4ZmIxMjE0Njc2N2NiYjVmODMzMGQwMjUyM2Q5NzFhNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufnEPeQ7Wrr3dCytm5lY1dl7Guzc
/ltO6+vvpDLWQDi/cmfs98s37dbEUvu7migyQ1KM/usUXbwjP3grlLml66oJrb2d
6c5j5HwvpdwhelakTwaqdyhMa7iTayg9cgUhr8rO8RBr2fs2RfCR4np4pEg4fg8w
Uwis1HcsBvBsvzsI4V3lVBGvAFlBFhMR1KmLvBekrV6p7AiGGPTwfaJWdgmYYjb5
DJ1XT6EjMCnc0WoLqt07q3v8knYvRTXgH9+XHE17tg0p0HBS3IQM49VSliRO03Pr
rtN1QRgcF3nsLX7D+EjEd8vJG8OF9L8DyavrUOs5TyCJNERPnfU13tIeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOp1To+xIUZ2fLtfgzDQJSPZcaWhMB8GA1UdIwQY
MBaAFJUdSTsbwKjIUt0Rz8k3iR2sPwfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84OWJmM2EtYmY5MC00NjdhLWE5MGIt
MjJlMjQ4ZWQyMDE0LzEvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84OWJmM2EtYmY5MC00NjdhLWE5MGItMjJlMjQ4ZWQyMDE0
LzEvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoY/6Qlyd
FrEa1ZbPiMAD0O5yw8QhjTvhsMHgKqwfG7jIQdKV4KF4mY5wKO91ibVq1oZRXXqg
PQoEPbatT69mIDRyKRo7FerC6xn11/ZMpe8qxxqy0HyyGnHS/CwIrMKefqFDzIXS
vdCWgv0Li4JbFV3YJVjtMQcbVHmJWsZaK0HC0ahCMZBUEoD2J1OVGKIkMK5Sdd/m
bClWwQ7FZf+LzIoXeY4ExOR02tNkz62c6kKNZLu6gA046/yPfq24p91OAl6t9J7+
OC6F6JsfrrxeHuuB6RsYwOvKR5hpNUY04RJwd91Ba6cS4+TRHoB1sulaipITy+Gp
bgViTMmFjnIqKg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:36 2026 by rpki-client