Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier: 5bJafdYlhSNoOmkr/0eVwfeb9B/LkulVBDUjiKBLRKA=
Subject key identifier: 6F:45:71:83:18:B1:9D:D6:50:4C:29:EC:44:5A:40:0A:60:D6:E8:AB
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 019D389C65026B3B8C670F628BF2FE64D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number: 0322
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: 7n2Y25sjxqUeap5Yoe/Llj5gEVYh1WV+fGngOCnLuF4=)
2: 8JXiL7XzwcUKWslrEH3fiUl9_1Q.roa (hash: XHMaFPKefGJYFcZdQ/GsdUkoHTLr9GXBB/VoyGHP+zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:65:02:6b:3b:8c:67:0f:62:8b:f2:fe:64:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=6f45718318b19dd6504c29ec445a400a60d6e8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:89:5e:2d:9e:e8:74:dc:6c:ee:2b:fa:05:
e3:a3:84:67:a5:3a:ef:68:ce:08:0d:0a:90:9c:cb:
4c:c4:ae:11:75:85:62:75:50:d7:25:59:e7:b4:a1:
40:d6:64:4e:6a:56:2b:89:e8:76:fb:2a:fe:ee:d3:
a6:8a:a4:4a:b8:89:e6:a6:df:4d:37:16:1e:13:af:
7f:ca:00:8a:89:72:f6:cf:77:c5:47:77:af:7c:11:
88:25:c5:12:16:7a:39:85:29:1f:d3:a8:63:cf:7e:
39:ca:50:5e:ea:3e:89:36:8e:6a:c3:a6:79:a1:c8:
0d:b8:2d:b5:32:be:ff:09:1c:cf:68:92:ab:03:0c:
fc:58:2c:cb:23:97:7a:a9:91:94:7d:50:fd:9e:ef:
0f:15:c7:f0:da:ac:90:5c:24:d3:fe:08:5d:e0:85:
53:ce:92:bd:e2:2f:4e:16:d6:97:15:1c:77:33:83:
0c:83:6c:f5:98:b7:c9:a9:77:a9:6e:86:c1:13:00:
c3:3b:f0:51:e5:99:ad:ed:c1:ce:77:c2:c8:0f:b9:
9d:b0:12:c3:39:9b:81:23:82:2a:b0:f5:2c:88:9f:
3b:ba:95:1b:26:aa:04:b8:b7:f0:3d:ae:b1:b3:b9:
54:cf:8d:ea:07:3c:9e:a7:78:6b:03:7b:52:43:4f:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:71:83:18:B1:9D:D6:50:4C:29:EC:44:5A:40:0A:60:D6:E8:AB
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:eb:b7:7e:14:46:4c:ef:04:7a:31:65:b4:41:44:70:0d:c7:
67:94:70:1f:7b:13:f5:00:c6:55:64:09:2a:e2:09:69:f1:2c:
c5:ae:2f:a3:5c:f5:47:54:1c:14:0c:df:da:68:c8:2a:3c:06:
aa:96:7c:58:46:dd:0b:32:6c:0d:11:c6:13:89:25:09:d6:02:
4e:26:98:38:4e:39:3b:d5:40:6d:00:41:2f:98:72:7f:25:17:
23:77:eb:35:cb:74:52:ab:29:76:e6:e7:6d:12:bc:23:a8:8e:
7b:d4:d3:2b:87:8f:41:4e:43:d6:62:cd:43:93:09:34:5f:a6:
35:69:b9:22:45:b7:49:f5:68:0d:a6:36:2a:d6:da:52:c0:9b:
22:22:c9:0b:ce:ef:41:b0:bf:c4:dc:7c:df:f3:2f:4e:08:c4:
a0:5c:33:96:6b:a9:a4:dd:39:7b:b7:c3:63:5e:a5:6f:7e:07:
1d:11:32:4a:77:e0:ed:08:48:e8:62:cb:82:7e:0b:ab:30:78:
6b:fa:6b:16:3c:54:d2:b9:69:67:84:ed:76:9e:03:07:04:fc:
7c:eb:70:af:a1:df:7e:a3:f9:5c:e0:46:3b:7f:25:63:5b:c6:
8c:f8:a0:21:36:79:46:2d:49:6c:83:3f:ee:11:26:2f:db:7a:
da:99:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:43 2026 by rpki-client