Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: zJARMzzdfQkIxy9dvEkK7x6GbBrD7+Vl3y3Y5qucD6Y=
Subject key identifier: 50:0B:A1:56:20:A7:AC:1A:30:11:DF:0F:C0:B9:AE:2B:9A:38:2C:BB
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019CE71238BB682E1F594FF94520E3F2DBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 12:00:56 +0000
Manifest this update: Fri 13 Mar 2026 12:00:56 +0000
Manifest next update: Sat 14 Mar 2026 12:00:56 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: RkrULor958l7JJdDeVGQwFO1v54OG5GAm+iEOImYaV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:38:bb:68:2e:1f:59:4f:f9:45:20:e3:f2:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Mar 13 12:00:56 2026 GMT
Not After : Mar 14 12:00:56 2026 GMT
Subject: CN=500ba15620a7ac1a3011df0fc0b9ae2b9a382cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:e1:c9:42:18:10:46:95:53:b1:f9:84:ca:
bc:42:10:8e:ad:81:7d:2a:dc:ff:4a:4f:48:5f:67:
d1:01:4a:95:a2:97:70:4c:b9:99:bc:1d:bc:8d:b8:
d0:df:47:98:e1:78:8c:f0:a3:f4:4b:63:21:b6:8d:
5d:1b:d2:07:a5:b8:8e:e9:42:a0:1f:cd:b5:ab:f7:
4b:fb:eb:91:58:ef:d2:e1:e1:b6:df:4f:0c:26:8c:
21:e7:e6:14:43:0a:aa:42:63:f5:ab:f2:8a:43:70:
cb:50:64:36:8b:7c:e8:2b:93:88:a0:db:86:fa:4a:
b8:b9:0d:d5:3c:53:08:4b:7c:40:0f:05:64:e5:93:
49:01:cf:dd:04:2f:c8:88:6d:18:88:80:e7:b0:a5:
83:44:ed:05:05:fc:72:8c:b4:05:36:9b:cf:20:9b:
55:5a:67:77:97:13:c9:31:52:95:f3:44:be:97:ca:
3e:23:c7:0c:4e:56:34:65:a2:09:25:98:bb:f0:64:
a4:e3:9c:b3:46:a8:bb:4f:08:2e:69:d9:45:d9:91:
1a:b9:7b:97:f7:cb:34:db:85:e7:c3:b9:d7:11:f9:
19:1f:07:2e:90:de:b2:f1:c3:ad:42:ee:f8:98:d7:
e3:4c:0a:9d:a2:80:d4:4f:c2:70:21:c9:2e:08:e2:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:A1:56:20:A7:AC:1A:30:11:DF:0F:C0:B9:AE:2B:9A:38:2C:BB
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bf:a8:e4:01:e9:64:21:0e:0f:e1:55:93:e8:38:b5:d4:e4:
58:74:2e:d9:b9:6f:31:f2:3b:b3:bf:51:aa:d7:87:10:d4:c4:
31:c1:d9:ad:6a:64:c2:3d:dc:59:c8:66:59:79:57:8b:c9:fa:
13:6b:3b:ed:af:a0:a6:1d:6a:60:c2:a4:6a:59:b8:7b:0c:b0:
d0:13:ab:52:ab:43:73:56:07:c0:b6:8a:44:00:db:cf:03:04:
1f:23:a1:0b:1f:eb:10:09:d1:3c:da:74:5b:d4:5c:34:f2:33:
70:d3:af:c8:b3:68:a7:0d:3b:50:ea:21:9e:25:e8:98:7c:e6:
ea:ee:25:da:96:dd:7d:34:ca:74:cb:ad:61:a0:3f:ba:b4:20:
2e:b1:b8:ab:a0:93:a3:46:7e:cb:8d:7e:54:71:a4:37:34:14:
7f:db:d2:af:fa:40:7e:31:59:27:d2:9c:8d:f4:88:67:73:2f:
b5:b1:df:c7:fd:cc:e0:98:1c:ef:f2:f5:9f:f6:bb:e6:73:7e:
a9:90:8f:c4:a2:13:8a:11:50:12:f6:60:0c:1f:9e:22:d0:74:
eb:dc:e0:35:62:16:b5:3f:09:f2:6a:09:e3:8c:d7:bc:94:b4:
be:1c:e9:52:60:2e:bc:4e:59:bc:79:2e:a6:c9:e9:4b:4c:6f:
45:90:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:56:57 2026 by rpki-client