Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: ZX4bqIHnFbTsdlUcS3GJCRTmG/qaQU1sISe8ybyRp90=
Subject key identifier: 2F:6E:C5:D3:D4:47:C8:14:70:2B:71:1F:6B:A6:C9:7C:D8:16:BB:7C
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 019D37F6FFD9D494F0006AF5BAAE6DAD8DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 047A
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: 1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa (hash: VqlHGjyV6XrN2/klxM4KjUioPDS5vL2CP/yVnvM9BOI=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: 3YThX68x3dLPVIaOZFrQlGiCPfHKJc8nasdoTxTQH2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ff:d9:d4:94:f0:00:6a:f5:ba:ae:6d:ad:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=2f6ec5d3d447c814702b711f6ba6c97cd816bb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:8f:02:5b:7d:84:1e:9c:be:28:6a:b0:52:
d4:4a:4d:ab:b5:dd:fd:44:a1:77:de:80:71:be:a1:
cc:a7:a5:70:be:b4:a7:5a:fc:f3:b2:fa:0c:14:39:
6d:f9:9c:52:4c:b6:97:ab:c1:a3:59:17:fd:14:90:
a7:43:43:0c:85:a2:60:04:aa:7a:06:17:73:b4:59:
82:52:5c:95:d6:7f:58:af:ef:08:13:b4:cd:db:b6:
d0:31:fc:40:54:b3:73:70:71:40:7f:6c:a2:76:ec:
f1:d7:fa:39:37:24:ac:43:31:84:af:3e:8b:21:08:
ea:2b:39:9c:f4:ad:e9:a3:ee:33:36:f2:f2:b5:77:
44:dd:b4:b8:b1:35:bb:00:5b:c7:6b:21:ab:1f:11:
fc:39:38:a6:64:88:cf:cd:d9:40:e2:61:06:b8:15:
c6:d8:db:2a:cf:61:63:42:72:6c:69:3d:5c:41:e3:
ab:48:73:73:6f:3b:f0:26:3d:36:21:b4:ad:45:0b:
5d:05:b1:d2:aa:8d:3f:43:cd:41:79:e5:99:67:8e:
75:e6:1b:0c:82:87:35:fd:1f:de:40:8c:eb:90:f7:
8b:af:de:98:48:a7:38:d6:3d:0a:6d:16:8d:17:62:
4e:4e:14:8a:a5:2c:00:5c:69:08:b3:7a:f7:8b:b0:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:C5:D3:D4:47:C8:14:70:2B:71:1F:6B:A6:C9:7C:D8:16:BB:7C
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5d:ff:f6:7e:ed:24:1c:52:ba:18:e6:5d:fa:99:90:ad:69:
e7:ff:94:6d:f4:36:b6:ca:fb:0a:40:f3:2f:23:91:4d:c2:f3:
46:84:78:dc:a2:e8:60:20:46:ab:ac:92:02:27:4c:24:13:74:
a5:51:48:82:c1:bd:e5:05:51:d8:7e:36:5d:42:95:3e:ac:d6:
0b:b2:05:07:37:51:08:a4:f1:c9:c6:20:a9:09:aa:f0:a9:ab:
29:14:74:ad:ab:43:52:29:0c:0a:0f:2f:15:a0:e8:83:6b:a7:
3d:2d:aa:0e:70:b8:63:17:2e:74:2d:f6:e7:b6:34:91:88:aa:
24:56:33:7d:ad:fa:7f:92:03:64:90:f0:bf:17:6e:10:a6:a9:
8c:44:8b:ae:59:d5:5f:a7:d8:05:da:f6:88:0c:db:b0:72:af:
f1:d3:b8:52:c9:c7:f2:e2:48:fc:60:b5:05:90:8a:f3:25:e0:
bc:0c:ed:87:58:ea:43:39:62:72:cb:c4:18:cd:bd:ff:dc:7c:
5a:a9:df:6d:d2:95:c6:3e:f3:47:91:08:7d:5b:12:30:91:ee:
ea:88:c1:c0:ff:d2:92:ce:78:18:87:f8:92:a3:77:65:3c:a2:
6f:49:6a:8c:76:ac:2d:22:22:a0:d1:93:10:ac:b2:4c:76:4c:
c9:44:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client