Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: Ge0is7EX4vJ8cO2Er6EdXfDLpo+UlIyp8H7i+N3UFFc=
Subject key identifier: 8D:E5:3D:89:51:EB:7E:3D:B7:E3:F9:A5:16:A7:99:93:AB:C3:AE:EF
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 019D37C000C750E2C212E15757FAFB41EF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 05A5
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: H1NoDUCOEj/zN1XFxxNk+lxaU8vsaNU/FK5dHJWaNOQ=)
2: mP9cK1RwU1pjVezxiqGqeS_0jfQ.roa (hash: +NdnMWckAu9KkO1maMu0xEAp7z5Y14BHcgqlI8aDarY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:00:c7:50:e2:c2:12:e1:57:57:fa:fb:41:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=8de53d8951eb7e3db7e3f9a516a79993abc3aeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:8d:87:82:0d:c8:55:31:da:5f:b8:88:3f:
4b:02:ad:5c:35:de:62:9f:c6:df:8d:6d:f8:0b:d8:
66:a3:bd:43:00:a1:0c:88:b3:8d:3d:30:10:22:d9:
bb:b9:5b:2b:79:41:31:9f:57:bf:af:0e:7c:72:03:
b7:d4:39:dc:3f:fb:27:bb:10:04:37:d6:99:8c:8a:
03:a7:f2:0b:7e:fc:b7:12:a9:37:e6:09:28:7e:cb:
2f:fa:bc:c8:d7:cc:45:fc:92:8a:0b:ab:f9:2f:54:
7b:2d:57:25:72:c0:96:26:a5:37:2b:4d:50:30:df:
b8:a8:51:45:4f:f4:10:db:d0:21:a2:12:66:a1:2b:
27:21:1e:7d:6d:93:ff:db:34:d5:9e:c1:b3:aa:2e:
76:e5:f4:1c:1c:3d:22:69:31:a4:19:55:66:80:2f:
9e:9c:29:36:c0:16:5f:ce:59:40:82:2d:c1:de:c8:
b9:06:13:ad:6c:78:76:5d:3d:57:75:07:ec:20:b5:
ce:c7:12:8a:78:d6:4e:32:fa:69:52:19:a3:e8:4a:
94:85:23:cb:83:57:ac:30:71:80:f9:54:47:18:9f:
7d:20:7b:f8:b6:71:b6:75:68:66:bc:24:fe:08:06:
ef:16:34:9e:8b:8c:b9:cb:9c:f1:47:f1:b1:a5:73:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:3D:89:51:EB:7E:3D:B7:E3:F9:A5:16:A7:99:93:AB:C3:AE:EF
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:77:8a:51:66:1e:f5:a0:a2:d2:a6:79:67:26:d1:ef:7f:
fa:b0:5b:9f:9b:85:af:cd:0b:c8:2c:7e:1b:e3:7e:f9:6f:67:
6f:63:48:8b:53:40:b5:1d:50:1a:f0:f5:de:69:28:31:cf:5f:
79:cc:73:3e:15:aa:59:37:4e:b4:12:fd:81:bc:d7:b8:a2:54:
c3:c1:8b:36:9a:d2:a5:d3:6a:ab:34:c6:a4:48:ff:10:87:17:
52:5d:21:47:db:78:53:47:79:09:57:02:ff:8e:49:27:0a:b7:
92:08:e5:4b:a6:56:14:a5:5d:32:1b:59:38:37:59:a5:f8:bc:
dd:9f:25:e9:20:19:c9:e0:1d:fc:b3:02:72:87:1f:84:bb:2b:
99:8e:39:b6:41:3b:ab:ca:55:89:ef:86:c2:66:b7:7f:4f:ef:
53:1a:ca:4b:f4:25:8c:e9:0c:2a:34:81:66:67:dd:56:dc:d2:
69:07:44:32:2e:d4:c7:98:30:81:40:8e:92:b0:24:4b:4a:1c:
93:d9:ff:69:f6:d5:51:91:7e:5e:34:fc:b7:30:65:dc:78:b7:
94:cd:42:c9:27:93:b6:f5:a7:af:32:41:0d:69:21:27:ec:61:
30:52:f9:9f:38:fd:03:5d:3c:b1:61:30:16:9a:82:9e:7d:46:
d0:d0:59:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:20 2026 by rpki-client