Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: OjpkHdIhjS/DeUIUIuXXOHgO9RhG/Bd/UNtz5iuFbCg=
Subject key identifier: DD:35:DA:29:9F:F5:F6:43:81:6E:08:AD:55:4C:2E:0B:4B:23:92:B9
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 019CE1EC1994D82DE282800E3E5C6AC5256C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0992
Signing time: Thu 12 Mar 2026 12:01:12 +0000
Manifest this update: Thu 12 Mar 2026 12:01:12 +0000
Manifest next update: Fri 13 Mar 2026 12:01:12 +0000
Files and hashes: 1: NvHVcOuHPgyc57kdkgknLviy86E.roa (hash: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: igHN/jH3xCa0mNGXdU3qqnwvl5IsCHFQIH7jHOhbbRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:ec:19:94:d8:2d:e2:82:80:0e:3e:5c:6a:c5:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Mar 12 12:01:12 2026 GMT
Not After : Mar 13 12:01:12 2026 GMT
Subject: CN=dd35da299ff5f643816e08ad554c2e0b4b2392b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:f9:eb:c6:c3:79:da:f1:4d:2d:2f:84:67:
05:cb:da:60:a5:a2:b6:1e:d7:0b:1a:fc:c9:96:24:
10:dd:b5:13:66:bc:88:e1:15:f8:f5:aa:c9:ee:46:
40:f0:f1:36:ac:57:20:9b:fb:e3:d3:0b:3e:31:17:
0a:ab:f0:a7:f7:02:56:53:50:db:21:c0:ab:a6:de:
5d:28:fc:3d:9e:5b:ae:43:e9:8b:7a:43:f5:a9:75:
79:94:12:13:10:1f:b2:24:ff:1e:26:b0:bd:dd:cc:
8c:38:e3:9d:ec:a2:81:64:72:4c:fd:56:2e:1c:2d:
23:0e:e0:06:fa:6c:07:7b:d3:ca:23:43:00:69:16:
48:b8:e2:4f:c5:d3:4f:4f:9b:7f:b1:9e:6f:b2:b2:
37:0a:8d:64:cc:f1:d2:74:61:53:c3:83:c1:8c:0e:
26:6f:d6:6a:35:4f:b0:4e:32:9c:5d:47:cc:82:0d:
d2:8c:74:e4:78:cf:1d:4e:cd:23:7e:59:cc:98:01:
ed:c5:bc:95:c6:17:e5:f7:1d:1f:3b:98:96:c6:b5:
89:65:b6:5e:82:88:9e:81:97:62:fa:be:9a:23:c5:
61:6d:25:de:a7:e2:1a:b2:f4:c3:83:d5:e2:e3:a4:
c1:4e:15:dc:f0:b5:7b:ca:09:1c:57:d8:75:34:e3:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:DA:29:9F:F5:F6:43:81:6E:08:AD:55:4C:2E:0B:4B:23:92:B9
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:f6:84:75:58:d6:2b:88:a9:5c:ea:07:da:09:7d:ce:1b:
0e:25:da:bf:54:2d:79:36:45:61:2c:99:8a:50:32:cc:13:6c:
1c:e5:46:8c:ac:e8:d1:6f:e2:bf:53:16:d0:87:99:1b:0e:86:
17:26:26:1d:9d:18:6b:36:b5:19:90:11:45:91:a0:57:4a:f4:
b4:e6:83:2a:72:77:29:47:ae:e6:36:7a:67:b4:00:50:06:8b:
81:eb:c0:c9:9c:d4:fc:7e:3d:ba:29:30:68:45:25:28:1a:62:
70:cd:2f:24:8b:dc:7c:5c:59:42:ce:28:84:7d:5f:56:b2:7a:
3a:b1:51:8b:76:fe:da:66:ff:fb:e5:d2:ca:8c:ca:15:9f:13:
fa:46:c3:47:d1:a4:ab:1a:1d:c1:d9:95:58:e2:bf:2d:55:1c:
38:6e:47:0d:67:af:ac:98:84:fa:98:27:55:c7:c1:6a:e9:1b:
5a:a1:95:2d:a6:1f:a7:17:a7:ec:5a:86:a6:c5:e7:a5:5f:fe:
01:9b:c3:6b:1e:0c:ac:2c:7e:be:5e:22:04:ca:1a:5c:ba:8f:
90:fb:ab:7a:33:b8:80:67:40:23:cc:0f:7e:6f:7b:4d:cc:fe:
bb:15:c9:21:a2:fa:99:6c:65:33:8f:56:ee:56:6a:69:be:4a:
ac:1d:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:53 2026 by rpki-client