Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: Y6PEpX/vLjdOecAkDnaSTx8I7eP7lyOYMEcCar0MLZY=
Subject key identifier: 23:92:36:9F:04:CA:71:9F:18:A6:0A:2B:05:7F:DD:DD:CA:D4:7A:02
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019D37523A70DCD6B71F1B44673F59DF25FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0502
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: 7Hfss9En1whyIWgz1ubJS43Ngq+0ohCxcYAdUJ0NZGw=)
2: Oz8EKSEHcWY_e4izVRb6ZqBpY-g.roa (hash: WQ/GzCseC8Ss8NihAisrEJ049anzZmJVy7FC4nNnwTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3a:70:dc:d6:b7:1f:1b:44:67:3f:59:df:25:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=2392369f04ca719f18a60a2b057fddddcad47a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:1a:a1:47:43:5f:48:8d:18:38:a3:c4:14:
65:a0:51:60:96:ee:44:24:eb:cd:2d:a8:46:62:be:
02:43:3a:df:9c:4c:28:61:a6:aa:5f:80:13:13:49:
4a:b2:03:04:2e:7f:e8:c8:83:97:0c:d3:13:da:46:
ce:b0:9e:bb:eb:09:3e:ec:94:fc:9a:33:d7:aa:15:
a3:a8:69:48:e0:bf:40:f3:ef:38:37:7c:79:bb:8c:
53:4c:23:c5:da:e8:60:99:f8:a3:72:b4:4a:5d:c1:
d5:50:db:c0:4b:d1:95:ed:31:be:c6:1c:b2:7e:08:
79:00:52:1f:18:a4:84:a0:e5:86:3b:82:2a:b7:ca:
b7:4d:1e:53:18:a5:4b:60:33:4b:83:79:1c:87:f1:
6f:a6:0f:24:b3:d2:6d:53:1f:82:13:ea:c0:1e:20:
96:6b:79:83:c8:76:f7:cf:cf:5e:c9:42:4a:32:fa:
d9:22:3f:5e:22:94:fa:3a:3c:70:b3:f7:2a:03:4d:
6b:1e:ec:86:3c:49:7c:07:67:b8:7c:e1:7c:61:c9:
c4:5d:b0:8a:f3:d3:55:82:92:b4:8d:8a:1e:9e:4e:
ba:d2:68:0d:ba:4d:4d:01:47:e1:0a:f7:e2:6b:26:
29:87:a1:99:b1:a4:9c:be:51:be:dc:16:cf:66:3a:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:92:36:9F:04:CA:71:9F:18:A6:0A:2B:05:7F:DD:DD:CA:D4:7A:02
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3a:ff:df:29:f8:58:5f:0b:f8:95:41:d0:9d:70:6a:08:be:
9d:50:87:19:14:72:87:0e:db:0c:38:0b:f3:f3:0a:e2:55:a2:
6d:cf:d8:83:d0:c6:9f:8d:60:9f:35:89:4f:73:f6:10:8e:e1:
ba:bb:73:a8:6b:26:f1:28:69:bf:f8:e2:dd:50:98:a6:7a:44:
e1:8f:d3:87:eb:8b:6a:39:10:2c:73:d8:85:3c:f5:51:bd:a0:
20:fc:85:55:33:52:80:d7:75:8c:5b:55:f0:93:11:e4:12:d6:
ce:69:af:aa:38:1d:71:93:70:14:34:ad:81:5b:89:7e:3d:ff:
b0:73:52:36:12:dd:7a:d0:7a:76:41:57:a2:d4:81:46:c3:2c:
a0:4c:f9:3d:25:4d:26:0b:f5:ef:70:fb:11:13:32:15:eb:6e:
13:d1:3f:f7:b6:36:39:ed:25:30:c7:58:0e:04:ac:14:42:68:
d4:23:e4:18:31:4c:1e:0b:96:da:d5:dc:83:66:42:1f:03:3f:
53:68:a9:28:14:c9:4a:7c:ad:8f:67:5d:b4:fd:5e:63:d6:87:
d5:1e:c5:0d:c1:1d:be:39:8e:75:17:3d:65:90:88:88:42:6e:
30:c9:2f:ca:ab:3c:aa:b9:57:d9:7f:cd:fc:1f:fd:35:42:5c:
5a:ab:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:57 2026 by rpki-client