Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: UMdCfXyPp0TlxMgedtd3roalZadEBG1y3cZYlD3UUUo=
Subject key identifier: E5:A7:CE:F4:57:F4:4D:B6:85:03:64:15:6E:9A:CA:98:23:8A:76:FD
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 019CE66D20D8BA85409596D44C261E58F4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 09:00:37 +0000
Manifest this update: Fri 13 Mar 2026 09:00:37 +0000
Manifest next update: Sat 14 Mar 2026 09:00:37 +0000
Files and hashes: 1: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
2: OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa (hash: cg+zDM1Nsx6Yirfpu41rhF9dShj8Jqt4XkTVhq7Ju3g=)
3: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: hU1pjtFBNE7Itxc9SE8q3XmBx5FNWpJYXbJJI/z32i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:20:d8:ba:85:40:95:96:d4:4c:26:1e:58:f4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Mar 13 09:00:37 2026 GMT
Not After : Mar 14 09:00:37 2026 GMT
Subject: CN=e5a7cef457f44db6850364156e9aca98238a76fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:e1:6d:d4:14:7b:cc:db:45:15:ca:de:f5:
75:b9:a8:12:03:44:53:3a:5f:fb:79:9d:27:f5:6c:
c9:a2:6c:85:1f:c0:f4:21:02:dd:e3:56:dc:77:8b:
fb:57:62:7a:c6:e6:42:71:7a:90:33:97:16:ed:5c:
6f:36:f5:ca:88:79:c0:97:d8:fd:9a:e7:b6:81:13:
55:d1:0e:55:75:fd:61:03:c1:eb:ac:03:21:7c:6b:
5a:39:63:09:ed:0e:69:e9:31:a7:cb:12:57:c8:f0:
a7:75:eb:dd:f8:d3:41:7c:2d:0b:4e:cc:8f:c8:66:
90:3a:c7:fb:91:0c:29:30:04:10:68:f9:5b:fa:9c:
70:61:76:ea:20:3c:cf:cd:77:9f:9d:14:13:e8:96:
68:15:6c:b8:53:c8:4b:d8:56:b4:7f:a2:27:eb:5c:
51:d6:0a:ae:a0:1a:28:14:e7:fc:86:c2:03:3f:e6:
b1:13:5c:74:b7:9a:48:b6:fc:4f:0b:ad:cb:f5:f6:
fe:92:44:57:31:a1:23:7e:8b:1a:ab:fa:8a:e9:60:
f2:e2:ba:02:bd:65:c6:7b:da:7c:e6:12:76:22:b8:
b6:3c:ce:13:db:9a:70:f3:a2:4a:a6:c5:cd:ff:24:
c9:67:d9:9b:f5:fc:7c:20:df:4d:db:59:29:57:6d:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A7:CE:F4:57:F4:4D:B6:85:03:64:15:6E:9A:CA:98:23:8A:76:FD
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b8:19:ff:66:cd:4f:1e:b0:af:7f:93:e4:04:7b:c1:3e:00:
67:78:ec:54:a7:dc:8f:3b:20:cb:3d:ee:f8:ff:6d:b3:2f:10:
07:18:4c:b3:ef:57:25:ff:f3:64:1b:1f:c1:7b:82:bd:55:3b:
5e:3d:da:c8:27:4a:5d:f1:91:5b:85:23:7d:c2:12:89:09:7d:
36:74:5c:bf:52:ab:1e:5d:4a:61:aa:a0:30:ff:55:6d:7a:aa:
0a:10:5f:6e:c8:ad:15:92:03:eb:5d:f1:ed:a5:27:ab:28:8c:
4d:93:89:e3:3a:ee:51:0b:0b:2d:6f:50:ec:ba:88:98:ac:f2:
77:ca:97:fb:6b:d6:d8:2c:1a:57:84:23:22:f3:b8:47:ee:b4:
37:53:83:ec:d9:41:a9:02:25:2b:42:7b:89:55:43:03:48:c2:
dd:b9:1a:f6:59:55:48:3a:09:49:28:75:ba:6f:99:7c:69:3a:
e6:fc:97:93:d8:14:3a:33:28:75:23:49:79:30:2f:e4:40:3c:
51:7f:4e:23:10:fa:9d:14:19:34:e9:cd:14:7b:b3:ef:a1:29:
f4:e6:0f:4e:47:bf:f5:53:a8:7e:89:f9:0a:70:e8:c6:95:f4:
d5:c4:e3:d1:b2:d7:21:75:86:85:04:49:36:40:d3:00:42:2b:
cc:f5:dc:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbSDYuoVAlZbUTCYeWPSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk
ZDNkOTIwHhcNMjYwMzEzMDkwMDM3WhcNMjYwMzE0MDkwMDM3WjAzMTEwLwYDVQQD
EyhlNWE3Y2VmNDU3ZjQ0ZGI2ODUwMzY0MTU2ZTlhY2E5ODIzOGE3NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsHhbdQUe8zbRRXK3vV1uagSA0RT
Ol/7eZ0n9WzJomyFH8D0IQLd41bcd4v7V2J6xuZCcXqQM5cW7VxvNvXKiHnAl9j9
mue2gRNV0Q5Vdf1hA8HrrAMhfGtaOWMJ7Q5p6TGnyxJXyPCndevd+NNBfC0LTsyP
yGaQOsf7kQwpMAQQaPlb+pxwYXbqIDzPzXefnRQT6JZoFWy4U8hL2Fa0f6In61xR
1gquoBooFOf8hsIDP+axE1x0t5pItvxPC63L9fb+kkRXMaEjfosaq/qK6WDy4roC
vWXGe9p85hJ2Iri2PM4T25pw86JKpsXN/yTJZ9mb9fx8IN9N21kpV21a1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWnzvRX9E22hQNkFW6aypgjinb9MB8GA1UdIwQY
MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt
YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2
LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrgZ/2bN
Tx6wr3+T5AR7wT4AZ3jsVKfcjzsgyz3u+P9tsy8QBxhMs+9XJf/zZBsfwXuCvVU7
Xj3ayCdKXfGRW4UjfcISiQl9NnRcv1KrHl1KYaqgMP9VbXqqChBfbsitFZID613x
7aUnqyiMTZOJ4zruUQsLLW9Q7LqImKzyd8qX+2vW2CwaV4QjIvO4R+60N1OD7NlB
qQIlK0J7iVVDA0jC3bka9llVSDoJSSh1um+ZfGk65vyXk9gUOjModSNJeTAv5EA8
UX9OIxD6nRQZNOnNFHuz76Ep9OYPTke/9VOofon5CnDoxpX01cTj0bLXIXWGhQRJ
NkDTAEIrzPXcgA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:10:16 2026 by rpki-client