Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: QstLyNv2FE9tSlWAYph520n1y6cEwhHvIriVddQAsms=
Subject key identifier: CE:64:67:95:10:F2:80:EA:64:A2:28:AE:F3:33:8A:FE:D1:8F:0C:39
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019D37C0F341670803D901BAB7C348C08544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: W2fR/8RetisZwhnl+l0+1cOdUIEVQeBeukjWqX2PdmE=)
2: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (hash: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f3:41:67:08:03:d9:01:ba:b7:c3:48:c0:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=ce64679510f280ea64a228aef3338afed18f0c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:66:ef:1f:25:22:0e:27:25:ff:53:fe:21:57:
6c:95:87:df:11:0f:a1:35:6f:7f:8c:23:8b:5a:47:
10:f1:3e:46:c7:31:f1:00:7f:9d:da:76:3b:6f:0e:
6d:17:99:a4:f0:ff:1e:9b:c6:85:46:78:c0:2f:89:
0f:a4:ce:c8:bd:d8:24:50:68:66:0b:2e:b6:31:a6:
a2:fd:f6:08:a0:82:88:99:4d:26:11:bd:51:1e:9a:
d6:96:24:23:a2:9b:47:89:fc:96:0d:06:44:57:c9:
24:6f:5c:ae:d7:73:9e:43:64:a1:3b:ae:24:38:19:
08:d6:0d:df:ba:d1:3c:ef:81:85:f3:90:5d:c2:1a:
87:e7:7c:8f:53:d2:02:bd:a0:42:44:a6:94:2e:13:
0a:ad:6e:49:08:a2:c2:8c:49:7e:2b:56:ee:f2:40:
ed:59:05:c7:aa:8d:cb:e5:2b:a0:86:fa:ed:bc:da:
41:14:41:0b:ec:13:c4:23:0f:67:ba:20:7a:6c:19:
07:46:f5:ca:d4:0c:dc:5e:d5:31:bf:44:15:8b:b0:
c0:9b:83:c1:65:5d:8f:67:98:13:3e:9f:fe:f9:46:
ab:5d:0a:aa:8b:29:0e:4e:54:02:d1:96:da:39:f3:
ac:c4:0c:6f:a0:05:98:49:17:17:2d:08:70:e0:54:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:67:95:10:F2:80:EA:64:A2:28:AE:F3:33:8A:FE:D1:8F:0C:39
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0a:21:3d:11:b3:ab:ee:25:2e:31:c3:9e:cc:fb:92:93:5b:
dd:0c:dc:2e:8b:2b:93:f1:44:44:24:01:a2:ca:40:2d:4e:76:
74:cd:42:9e:ce:87:a3:0c:28:45:e2:94:dd:2e:21:eb:87:1b:
3a:d3:8e:91:1f:f7:5e:39:2e:d6:75:92:98:01:28:f1:30:b6:
8c:8f:6b:6e:54:ea:e2:7d:29:05:a6:ec:6a:6c:d9:a1:52:97:
f9:67:63:aa:ad:99:7f:a9:04:e7:f2:65:04:53:58:2a:71:da:
4b:45:d5:87:a3:4f:3e:bd:31:92:31:22:c2:1a:73:1b:3b:35:
37:a0:c8:a6:7b:fe:fa:31:01:60:7f:92:8c:99:79:ec:2f:a3:
ac:1e:e1:5a:68:ad:37:67:31:a6:40:50:b8:3c:72:e8:3f:2f:
17:46:a8:4a:73:42:b1:8f:d3:10:28:05:f7:93:59:c7:23:7c:
07:4d:26:8e:36:d7:90:18:44:b8:f7:4b:83:38:f0:69:63:b0:
3f:6e:43:8b:87:0f:7c:8d:da:8d:4e:fb:fa:37:7d:e6:40:a4:
24:e5:74:db:01:60:f6:b9:0a:44:70:c4:fe:19:96:53:d7:12:
c3:1a:8e:9e:71:91:1f:c8:0f:2c:5a:57:b2:7c:85:c0:34:f8:
76:45:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client