Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: kJawmZRHNxq4Ax49PZcHzGFDyC8boTzZJSWoPe+lBZA=
Subject key identifier: 22:E6:A9:93:DF:02:5E:9D:63:E4:66:54:7C:0F:16:0B:EF:AA:46:89
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019CE410DC841F0E5AE12E0E3C0E6BF7A9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 02EF
Signing time: Thu 12 Mar 2026 22:00:35 +0000
Manifest this update: Thu 12 Mar 2026 22:00:35 +0000
Manifest next update: Fri 13 Mar 2026 22:00:35 +0000
Files and hashes: 1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: lVgUk+3XMUtvZlA+fusx8s0BK7qBmoB93KYSMUYw9ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:dc:84:1f:0e:5a:e1:2e:0e:3c:0e:6b:f7:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Mar 12 22:00:35 2026 GMT
Not After : Mar 13 22:00:35 2026 GMT
Subject: CN=22e6a993df025e9d63e466547c0f160befaa4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:dd:9f:bc:b7:45:db:82:66:2a:f0:cc:89:
8c:0f:ab:01:e4:26:e8:bc:7f:aa:00:42:8a:6f:bc:
64:96:74:9c:4f:ca:57:e8:ac:49:27:c8:ec:a2:2f:
31:18:a6:79:83:3c:85:60:e3:11:17:11:bd:bc:8b:
e8:6b:ed:21:5e:51:a3:89:5f:dd:b6:83:10:d7:38:
3e:ec:d0:82:fd:d1:42:c4:37:80:ba:e0:8f:59:bf:
3a:59:45:cf:41:8e:3c:c6:e0:7b:fd:b9:5a:62:1e:
d6:c2:1d:c3:a6:57:c3:ae:ed:7b:87:4e:a1:5b:51:
82:c1:89:fe:d3:30:8d:14:dc:90:38:97:d3:e2:00:
12:e2:6f:dd:b0:0a:5d:cb:92:d6:cf:8b:58:75:ed:
65:78:0e:78:b8:c6:fb:80:86:11:17:6c:34:77:39:
ac:7d:06:d8:c5:0e:a9:3a:02:09:5b:2b:bd:af:ce:
79:2f:05:e4:f7:2b:e9:5f:de:70:4f:af:3a:72:db:
b2:55:58:a1:85:9d:76:4e:13:74:59:0f:1d:32:6b:
d9:6a:67:eb:22:fa:07:e0:e1:85:32:aa:59:57:24:
08:73:4c:6a:57:79:cf:56:74:51:cf:38:4b:72:d8:
51:6b:2b:51:e5:28:d7:06:3f:21:d8:b8:04:bf:23:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:A9:93:DF:02:5E:9D:63:E4:66:54:7C:0F:16:0B:EF:AA:46:89
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:91:dc:ce:fb:3d:1c:d9:fc:3e:31:ec:16:42:ce:7b:b9:
bd:e4:03:78:75:b3:16:5b:23:01:4a:67:99:8f:b5:bb:03:97:
53:0f:90:0c:15:d2:e1:8c:c2:85:62:81:f6:38:04:f7:ef:c4:
14:8c:9c:cb:bf:0c:53:9f:91:6a:09:f3:fa:44:15:00:08:5f:
85:36:0d:9e:6c:49:60:c2:45:28:2f:dc:50:0c:dd:82:07:90:
56:ae:45:a9:df:7b:4c:4c:ef:f4:e1:67:67:dd:43:a8:09:12:
0f:2e:5d:a4:20:6b:cf:21:4d:6e:6e:1f:9d:a0:98:0a:19:4f:
ca:20:40:28:78:2a:94:a9:cc:64:e6:22:f8:dd:8c:a0:25:60:
24:42:2f:1d:72:f8:81:a9:68:07:b6:eb:b3:db:de:70:fb:dd:
5b:ce:e7:1d:3c:cc:50:02:d7:f0:7c:d4:96:e4:8d:27:24:26:
c1:f6:8c:22:8e:82:fd:c3:de:08:ea:c2:19:35:8b:d5:44:82:
23:e9:82:d3:f6:ae:c2:35:bc:60:69:99:7c:97:95:b7:f5:d7:
fd:22:97:21:47:75:8f:1e:d9:eb:47:55:88:d6:70:5a:dc:31:
75:b2:04:0b:6f:44:de:78:47:cc:d7:fe:f4:8a:9b:fe:94:39:
b7:84:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:30:42 2026 by rpki-client