Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: C0SViuUmkCa/EGPeQ/VqbZn+y/8qd9sdvXxSsFIooRg=
Subject key identifier: F5:46:DD:22:FF:EE:08:3A:2A:B3:63:1C:F5:1A:0A:B6:E2:70:DB:6F
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019D3865912213837542739AEA7E13C0513A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 1013
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa (hash: KygpTZidDj6IJAoJpYsnybjIOxvZc9DyQui8eumvF1w=)
2: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: RXxDABrfilMLlASamB6kctuWvpMD8FkE5mFE+niPOYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:91:22:13:83:75:42:73:9a:ea:7e:13:c0:51:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=f546dd22ffee083a2ab3631cf51a0ab6e270db6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:c4:0c:54:68:0f:70:df:c5:d0:7c:63:01:
f2:4f:41:09:a6:65:e4:c0:c0:19:8e:5c:e5:2e:f7:
e4:9c:88:dd:f0:67:4a:aa:c5:c2:54:29:28:d4:47:
83:2b:ea:15:81:1f:74:1e:9f:c6:4e:7c:3b:0a:cb:
f7:3f:33:ec:f1:2a:ff:15:6a:9d:b4:b1:f6:ae:aa:
13:60:4c:aa:06:9a:33:a0:e8:bd:74:f9:aa:f3:5e:
72:1f:a9:42:93:26:b6:a0:97:d7:a1:fd:1c:35:24:
1a:9d:db:ec:44:7d:c5:18:57:84:5e:7f:12:db:d3:
34:08:86:8c:44:da:ce:90:7a:fc:86:a4:51:59:20:
f3:18:5f:de:89:27:ea:be:00:6b:ed:3a:b5:b9:d0:
10:dd:5e:06:c5:9a:33:ae:ab:57:ac:62:e0:dd:f4:
61:34:e2:59:45:18:6a:bb:b8:68:bf:5f:49:25:bb:
69:ae:32:ef:f4:2e:c6:3f:82:08:fa:81:bb:f8:4f:
d2:6a:2a:ca:53:7d:fc:f7:f7:d1:78:94:1b:9b:a6:
4c:d0:be:36:60:f4:bd:e6:8a:35:b2:e6:f8:94:95:
29:d6:64:71:5b:f1:a4:01:f8:c8:cf:99:2c:be:5c:
d7:c4:cb:2f:ff:14:3b:d0:92:3f:db:49:81:10:46:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:DD:22:FF:EE:08:3A:2A:B3:63:1C:F5:1A:0A:B6:E2:70:DB:6F
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:3f:8c:73:56:13:ee:93:1b:6e:b6:22:4d:27:64:8b:e8:
70:02:b3:8a:f3:53:8c:83:fe:81:bb:9e:de:6f:d5:7e:ec:f4:
cb:58:55:8c:28:ba:63:b7:9f:36:8b:87:b1:39:c2:a3:a8:c5:
3f:26:b4:6f:54:fb:29:45:4b:7b:a1:3c:cf:08:f2:7b:47:2f:
49:1e:5c:07:6f:db:23:e7:d2:5a:9c:fd:8d:af:54:5c:66:07:
8b:42:9d:c9:0c:6b:b3:28:e1:7c:c1:6b:21:c3:4f:df:be:9a:
3f:28:fc:6b:34:dd:8e:ad:95:ad:e0:c2:bb:66:2d:19:ca:18:
10:27:d6:39:96:54:5e:5c:f8:fa:6e:5f:03:77:60:78:49:6f:
5a:c5:4d:9d:d7:09:79:b5:7c:21:e4:84:db:b3:77:93:61:f5:
2a:ba:64:52:4d:3e:5d:2c:db:e0:b9:7a:a7:1d:28:de:b3:43:
5d:de:03:e2:49:d3:c2:36:b1:6f:72:39:6c:75:7a:c7:ac:4d:
d3:81:3d:0c:f7:b1:67:dd:b8:69:5e:57:f0:5a:43:90:a7:df:
39:57:ff:eb:f5:4c:5b:1b:aa:1b:83:90:08:25:e6:4f:55:ea:
de:c8:67:68:9e:e5:f0:d7:c4:96:47:ca:12:7b:0f:a0:6d:2b:
78:b9:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client