Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier: tc7uG+3ATqmvtNgpUT943X3jQ33qJiuFOJtx19R6RI0=
Subject key identifier: 32:0F:8C:79:A0:E7:49:39:D1:B8:F9:09:51:CB:1A:F8:9C:C7:33:0D
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial: 019D38D303184F3A65C4E2B50B0C400A1BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number: 0496
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: tXweRuZMBfJPF0D5OXzpMUT4AGHGV1LNpxSN9sfWRnI=)
2: tdITwv0zRtaKmsmIYJ8svd-vjFU.roa (hash: Tuddv3yQVf/k3vQa7nswjjjj4m2xTNF5boEVBehAC4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:03:18:4f:3a:65:c4:e2:b5:0b:0c:40:0a:1b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=320f8c79a0e74939d1b8f90951cb1af89cc7330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:a4:04:53:b7:4e:1d:2d:45:c4:19:0e:77:
99:46:e8:34:8d:21:93:d2:e3:80:60:83:15:f0:54:
1c:72:59:49:7b:b7:03:24:07:c0:e1:56:45:57:ba:
1c:c9:e3:e9:0d:44:d3:5a:ac:13:2c:f4:4c:7a:58:
74:87:c3:79:bf:d4:79:dc:25:7b:8d:e0:7f:9b:4f:
91:70:6b:a2:cb:00:69:90:ef:6a:c4:0b:da:c5:2c:
e6:f3:5c:e5:a0:b3:75:84:be:c0:eb:5a:14:8c:91:
04:97:fa:44:8a:1f:07:e8:92:5e:b9:bc:9e:7f:6e:
43:10:9e:1d:cb:4f:c3:51:bc:bb:eb:05:05:a9:a8:
f2:d3:ab:30:6e:60:fe:97:c7:7a:40:f0:9c:5c:b2:
56:6d:b8:22:d2:f7:78:fc:e1:17:19:88:79:12:ec:
14:b8:1b:73:84:df:fc:5f:73:17:08:c6:c4:d7:4c:
c8:5f:26:7d:fe:77:b6:1f:a2:2d:e3:da:7a:dc:1b:
a6:2b:a0:33:bf:b0:b4:6f:3c:8e:8d:ac:80:3e:8b:
09:39:30:92:b9:db:7a:c7:64:4b:0f:6d:bd:14:81:
0b:9f:23:19:c9:c0:07:f3:c6:37:c8:06:72:c0:63:
cf:63:45:99:a2:cc:f3:a1:7a:5b:d4:1a:ab:3e:c1:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:8C:79:A0:E7:49:39:D1:B8:F9:09:51:CB:1A:F8:9C:C7:33:0D
X509v3 Authority Key Identifier:
keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:4b:5f:33:89:fc:4d:6d:bb:88:3f:ea:d1:74:04:35:10:b7:
8c:e3:30:f1:3e:03:96:03:7a:4a:bf:27:a7:a0:45:2c:73:32:
ec:34:ef:59:0e:00:1e:6d:2f:3c:ac:68:59:ca:50:27:44:0e:
00:f0:f6:be:91:00:ef:f3:fa:c0:8b:0b:9b:b3:e4:43:70:ca:
f5:c4:50:53:ce:8e:5e:65:6e:1d:03:26:dd:88:1b:1c:3f:ab:
89:77:c7:4c:b4:3a:88:14:5b:78:40:f0:6d:e3:22:ff:2e:a9:
dd:db:0f:91:5b:a0:32:5b:1e:6d:55:f6:94:f7:cd:e4:72:1f:
19:7f:12:a5:1a:c3:82:25:b5:25:d5:ee:ff:89:f1:0d:94:28:
fc:d8:43:64:6b:3a:42:83:c9:99:6e:02:b6:3b:f8:ad:3b:72:
c3:5c:98:6d:9a:20:3d:79:89:f8:66:1c:80:64:be:bd:44:9b:
45:15:e0:ed:92:b2:40:e0:ac:a2:fc:ab:ed:81:37:9a:9e:6b:
70:99:2a:9a:0e:35:71:37:a7:03:9b:08:ea:f2:f2:63:88:6e:
59:36:11:a1:2f:f3:33:d7:3b:b1:8c:b2:a1:52:b5:64:df:e9:
43:51:43:77:9c:94:6d:08:2f:68:c7:4c:79:2f:88:e9:81:6f:
bf:31:da:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wMYTzplxOK1CwxAChvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjZmZTlhN2UyMWE3NzNmNjFkNjUxMjNmODNlMjgyOGZk
MDQyOWYwHhcNMjYwMzI5MDkwMDQ2WhcNMjYwMzMwMDkwMDQ2WjAzMTEwLwYDVQQD
EygzMjBmOGM3OWEwZTc0OTM5ZDFiOGY5MDk1MWNiMWFmODljYzczMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VikBFO3Th0tRcQZDneZRug0jSGT
0uOAYIMV8FQccllJe7cDJAfA4VZFV7ocyePpDUTTWqwTLPRMelh0h8N5v9R53CV7
jeB/m0+RcGuiywBpkO9qxAvaxSzm81zloLN1hL7A61oUjJEEl/pEih8H6JJeubye
f25DEJ4dy0/DUby76wUFqajy06swbmD+l8d6QPCcXLJWbbgi0vd4/OEXGYh5EuwU
uBtzhN/8X3MXCMbE10zIXyZ9/ne2H6It49p63BumK6Azv7C0bzyOjayAPosJOTCS
udt6x2RLD229FIELnyMZycAH88Y3yAZywGPPY0WZoszzoXpb1BqrPsE6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIPjHmg50k50bj5CVHLGvicxzMNMB8GA1UdIwQY
MBaAFC0m/pp+Iadz9h1lEj+D4oKP0EKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUt
ZWIzMDZhOGQ0YWI1LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81NGU3OGMtNWRkMC00ZjI2LWI1NmUtZWIzMDZhOGQ0YWI1
LzEvTFNiLW1uNGhwM1AySFdVU1A0UGlnb19RUXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5UtfM4n8
TW27iD/q0XQENRC3jOMw8T4DlgN6Sr8np6BFLHMy7DTvWQ4AHm0vPKxoWcpQJ0QO
APD2vpEA7/P6wIsLm7PkQ3DK9cRQU86OXmVuHQMm3YgbHD+riXfHTLQ6iBRbeEDw
beMi/y6p3dsPkVugMlsebVX2lPfN5HIfGX8SpRrDgiW1JdXu/4nxDZQo/NhDZGs6
QoPJmW4Ctjv4rTtyw1yYbZogPXmJ+GYcgGS+vUSbRRXg7ZKyQOCsovyr7YE3mp5r
cJkqmg41cTenA5sI6vLyY4huWTYRoS/zM9c7sYyyoVK1ZN/pQ1FDd5yUbQgvaMdM
eS+I6YFvvzHauw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:48 2026 by rpki-client