Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: pclcrmh2GIFVtvHHOJrPnbBGEPgAY0BDm+Eo6IFnw/s=
Subject key identifier: C1:27:A0:06:58:46:E9:1B:9C:38:32:AD:21:12:AC:4F:C0:4E:7A:06
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 019D389C1B2F428868F558510567CC1BDB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: 226BZyJmLGvxoWLAf4PKwDePW1M.roa (hash: naS4Hl+qEsGHYxRmEuAcqgInMtduGMJYAggaVrJL7yU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: l69gWI+AJmp/RsjUYSB9CMCAbsMdY8wQFLJ/lBFl5lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1b:2f:42:88:68:f5:58:51:05:67:cc:1b:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=c127a0065846e91b9c3832ad2112ac4fc04e7a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:fd:51:3b:77:67:4b:81:17:17:e5:d0:eb:
b4:77:cd:5d:67:e2:2b:65:30:5f:9f:50:93:f5:a8:
ac:97:fc:b4:29:47:f1:07:61:62:f5:dd:07:66:8d:
68:bf:0a:1a:96:a9:85:8d:26:62:3a:27:42:fe:fc:
49:ab:fe:6c:c6:3b:b1:3c:c1:3a:55:ac:58:b0:42:
2b:a2:52:4c:e4:d9:52:1c:a7:fa:10:81:c0:c0:1a:
85:e4:1b:0a:d8:b0:37:16:ca:83:e9:1a:ec:ff:a6:
66:77:c4:1b:4b:02:9c:14:96:bf:98:15:c1:cb:19:
c9:48:a3:a0:66:3a:cf:70:f8:0c:e0:79:36:35:83:
31:26:ae:b6:c1:8d:08:b4:92:66:2f:54:75:2f:2a:
8f:81:25:78:2e:aa:78:7f:16:b3:75:d6:53:11:d3:
2d:97:9f:d8:54:2a:dc:34:48:c6:7a:aa:3a:3d:4a:
82:23:88:b9:1a:21:14:ea:a0:8c:4a:d7:73:28:db:
a2:8d:cd:96:d1:0f:8e:33:ef:6b:80:a9:72:47:f6:
8d:fd:3b:03:77:59:5f:92:85:4f:a8:28:da:1a:e0:
b4:f1:f9:c7:d7:de:c6:88:f6:be:16:da:ea:7a:7c:
28:c0:94:da:83:a1:dd:4b:53:c6:d3:9c:4d:5b:74:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:A0:06:58:46:E9:1B:9C:38:32:AD:21:12:AC:4F:C0:4E:7A:06
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:06:5d:18:cd:12:d1:19:d2:35:28:a6:3d:e4:40:5d:68:d2:
50:85:4a:a0:b5:8f:39:73:6a:f4:cc:d0:55:9a:51:0a:2d:3f:
8e:c7:44:ba:b4:b8:ca:db:7d:84:25:8c:cc:d8:25:44:74:8c:
cb:55:d5:3a:ea:87:93:a6:90:0c:19:70:30:ef:55:56:b4:6f:
35:7e:86:34:c3:ce:87:49:b7:28:c7:43:88:ca:e8:66:75:1d:
fc:15:44:a0:2a:a5:e2:80:4b:24:52:2c:af:4e:73:f3:d8:5b:
82:b8:62:e8:f7:84:bc:b5:77:b1:33:da:d0:a8:b3:cf:04:e0:
d6:40:e1:54:55:d7:90:60:47:b5:a2:6b:6c:52:9c:18:f4:99:
4d:81:7f:ea:81:b9:83:97:2d:a2:33:07:a4:7a:82:73:cd:18:
65:58:e6:d3:fa:c3:8d:d4:4f:54:9a:2f:bc:86:09:a6:ac:6e:
48:af:74:7b:9b:68:40:c8:4c:b6:fc:03:dc:da:48:80:e3:6d:
67:40:2d:8b:ef:76:75:14:fa:d0:29:a6:a3:fa:ea:5d:ee:68:
8f:ed:00:77:2e:29:8f:4f:e0:06:b1:5e:0b:f8:d0:40:30:46:
f8:0d:8b:18:ed:cb:bf:7e:d1:9a:63:bf:17:0b:b5:c2:aa:21:
3d:04:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:37 2026 by rpki-client