Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
File: lQ8oTPXDnybd0jUufyrfeo3GD44.mft (raw, json)
Hash identifier: N9oc8ZjbIJN+DCPs+VHacNzgoKG2/SHtFQztyrMsNuA=
Subject key identifier: FB:8C:02:D1:47:66:1D:9E:1B:0C:A8:E9:40:1C:90:34:BB:C9:59:4D
Authority key identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
Certificate issuer: /CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Certificate serial: 019D39419A04E8E52843EA4080E4D35F2F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
Manifest number: 0E8B
Signing time: Sun 29 Mar 2026 11:01:33 +0000
Manifest this update: Sun 29 Mar 2026 11:01:33 +0000
Manifest next update: Mon 30 Mar 2026 11:01:33 +0000
Files and hashes: 1: lQ8oTPXDnybd0jUufyrfeo3GD44.crl (hash: tp/oT2nh645hdnCdmIj2ckyG3uXxGrW4CvL/MUoWJKw=)
2: yB6M8ezFHQHag23503sXzkmX4yQ.roa (hash: epvHA2OWGmIXHjeNZ2bPshcPm5dCsn8VP6Fq2wrQdO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9a:04:e8:e5:28:43:ea:40:80:e4:d3:5f:2f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Validity
Not Before: Mar 29 11:01:33 2026 GMT
Not After : Mar 30 11:01:33 2026 GMT
Subject: CN=fb8c02d147661d9e1b0ca8e9401c9034bbc9594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:a2:7c:6d:a6:0c:5b:2d:ce:3b:d4:47:5d:
98:6d:41:b2:37:0e:41:87:59:36:ec:2f:f9:3a:42:
e5:08:2b:91:75:5d:30:ee:6e:5b:46:ad:2b:86:4f:
ad:a5:5e:f9:f0:cc:2e:30:19:25:44:98:00:3e:78:
5b:4a:0f:bf:84:4a:02:62:23:81:0b:3c:5f:74:00:
ce:8f:6d:43:2e:f2:ec:d1:80:f0:fa:50:52:76:58:
e4:12:da:cc:29:bd:31:b3:4c:16:74:29:9b:cc:55:
c1:e5:2a:ed:09:54:a9:ca:56:f2:cd:cf:34:f0:e5:
53:6b:2c:80:96:2e:24:f4:11:14:fd:0a:b3:f8:40:
e9:fb:cf:74:33:44:b5:78:d4:44:40:78:65:37:fe:
91:0b:4d:d8:f0:9d:7e:82:9e:d0:68:e8:ae:bc:86:
5f:75:d2:4a:ea:3b:df:37:dc:87:ea:a2:ea:17:f8:
43:0a:8a:25:2d:81:25:bb:2c:15:50:8a:24:d3:c7:
db:4c:7c:ad:07:44:72:44:b7:08:71:cb:0f:7c:b1:
0c:b1:d1:46:b8:13:71:1d:e4:cc:a8:76:fe:9f:bb:
e5:df:8f:33:6e:e5:a0:d0:2b:08:5c:68:22:cd:74:
d5:b0:b0:77:19:c2:8e:a7:d6:5b:c4:45:a1:7d:75:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:02:D1:47:66:1D:9E:1B:0C:A8:E9:40:1C:90:34:BB:C9:59:4D
X509v3 Authority Key Identifier:
keyid:95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ed:fb:64:6a:aa:67:3b:5c:8b:0b:0f:6c:f0:b5:62:52:62:
4d:39:f7:bb:42:70:af:a0:75:4a:f5:de:bd:ef:0e:9c:9e:7a:
89:5f:a9:38:bc:d1:4b:cd:b9:77:e2:e3:f9:89:da:07:5e:33:
cf:6b:f3:cc:08:f9:e4:94:1d:a4:87:47:0b:5b:e7:44:cf:db:
79:f2:d9:a5:78:38:1b:f4:99:8a:3d:77:10:c6:9b:d4:27:12:
d3:bf:8f:46:3b:97:04:4f:51:e1:3d:ef:8c:ab:7c:bf:6b:7b:
ce:48:50:05:af:09:6e:39:86:a2:a6:a4:a6:74:f8:93:e7:3f:
e5:38:ca:ae:c3:e9:26:7d:ae:3a:68:a4:4d:50:95:db:36:fe:
95:37:25:1f:5e:e2:21:ae:05:e4:01:9e:83:4c:d6:8d:6b:2b:
66:20:d8:eb:3d:a0:97:db:a0:5a:74:ac:04:af:24:cc:d0:74:
d6:d0:a3:fe:8f:8d:d3:10:2d:ad:64:f0:65:e1:ef:9f:c6:36:
f9:df:d5:7c:3e:a1:48:17:9a:26:88:0e:8b:99:1f:e9:86:1c:
1d:f8:12:bb:f0:97:3f:29:72:96:41:ba:20:3c:ee:35:5c:d6:
0a:72:85:0b:6a:8e:dd:bc:8f:3f:30:11:e2:1e:cd:d6:39:7b:
c5:b4:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:39 2026 by rpki-client