Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: 21UcLzRkMCmZvahjXybHVoKevhlNnyRBg08WAeMyKe8=
Subject key identifier: 02:DA:8A:79:A7:E7:2A:90:17:30:DD:44:FC:58:5E:E6:E6:6C:B1:19
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 019D37F75C7F9D8073297D36A2A599C639A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 084F
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: pATHlqJ4dVRrsdt77E8PC5jcTHM6EeKBOVV3zWaDLtM=)
2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5c:7f:9d:80:73:29:7d:36:a2:a5:99:c6:39:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=02da8a79a7e72a901730dd44fc585ee6e66cb119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:71:0f:d5:e4:ff:bc:5f:f6:5d:fc:53:d3:
d0:6a:b1:17:80:d1:91:d8:4e:2d:8f:bb:50:3e:4d:
e1:7b:d6:f1:08:03:70:84:2b:a6:65:e1:60:5f:b5:
a9:23:9b:e4:ac:23:f4:5e:81:73:0f:a0:5a:de:21:
12:2c:e0:93:d6:5d:33:b6:a4:2b:50:be:7e:05:b0:
dd:4a:70:ff:51:b4:a1:d1:9c:b4:46:7d:de:37:5c:
0d:a4:4b:9c:46:bb:8d:81:bc:19:44:c4:b7:2a:7e:
0d:ca:87:a6:a5:e5:2f:5b:db:b8:18:a8:1a:90:05:
24:ab:b0:cc:4b:92:fd:9d:9d:d0:d6:eb:a3:2a:ba:
e9:81:16:be:b7:cb:22:a1:3f:2e:ef:2f:65:db:a9:
c3:3e:da:60:f9:02:a8:79:b4:b7:12:9f:6c:56:dc:
8c:89:50:85:78:0b:4d:4c:eb:89:77:ce:f4:8b:cd:
71:38:c4:2c:90:31:b9:cb:a7:49:cb:c9:eb:e0:97:
bd:db:58:74:7a:ce:ed:51:17:2f:61:ba:64:37:9e:
92:38:fe:a1:64:52:14:c2:e5:24:1b:81:ea:97:0f:
23:c0:22:97:47:f8:c8:45:ed:82:a8:19:14:a8:f2:
20:7b:76:d7:37:28:c2:d3:be:8b:36:61:d1:ac:8a:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:8A:79:A7:E7:2A:90:17:30:DD:44:FC:58:5E:E6:E6:6C:B1:19
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ca:9a:da:b5:b4:28:f7:d0:15:e5:84:df:1d:cf:ee:78:e0:
29:8b:3b:04:80:02:d8:12:f8:71:0d:20:4b:bd:8c:eb:ec:b8:
9a:de:a4:16:7b:80:29:82:9e:11:1b:87:37:df:bd:94:a3:e0:
7f:ce:e0:aa:95:5c:d5:a8:1d:e5:49:2e:ad:8f:33:d1:5b:2e:
0c:1a:9f:72:0f:aa:ac:13:e5:cf:fb:23:d4:be:c8:fc:61:98:
d4:26:c7:f6:24:1a:d2:81:af:e9:a6:09:b1:6a:12:87:7e:8a:
f3:43:5d:e9:5f:5d:18:ae:a9:fc:4c:d2:21:7e:8e:47:04:8b:
f5:71:61:aa:e2:00:c6:44:00:3e:0c:27:26:2a:eb:e7:18:33:
a0:f4:8c:d7:1b:dc:f9:6b:0e:c8:99:29:b2:26:33:09:fd:cd:
c5:09:5c:27:32:ea:13:ad:a0:b3:f9:c6:00:63:7d:90:4b:bd:
c0:5a:8d:89:31:88:81:e1:8f:96:5c:be:f3:23:9e:47:e0:9e:
0e:3a:e8:be:d8:95:0e:28:a4:e6:b3:77:8e:9c:02:e7:9d:a6:
a2:63:59:a2:c8:7b:01:20:81:5d:28:44:97:5e:cb:9f:c4:59:
39:ff:be:3f:57:8f:23:ac:07:df:01:95:35:79:ea:1b:3b:b6:
27:89:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:07 2026 by rpki-client