Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: vNqzkVS8prqb+FbR9UPRvejhlEv/7GEzQLdfaSwfzWY=
Subject key identifier: 0E:36:9C:FC:F2:E7:34:DC:AF:AE:8D:2E:31:B9:A3:8D:62:57:29:37
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019D3978255D6D893DABA1F898815384E7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 1811
Signing time: Sun 29 Mar 2026 12:01:08 +0000
Manifest this update: Sun 29 Mar 2026 12:01:08 +0000
Manifest next update: Mon 30 Mar 2026 12:01:08 +0000
Files and hashes: 1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: 97X7z1q+DPpQ4LvA1ZnX3epR6pcIuG5cfJx83a/k50g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:25:5d:6d:89:3d:ab:a1:f8:98:81:53:84:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Mar 29 12:01:08 2026 GMT
Not After : Mar 30 12:01:08 2026 GMT
Subject: CN=0e369cfcf2e734dcafae8d2e31b9a38d62572937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:bb:b6:8d:ad:6a:77:de:bd:61:c5:cd:4e:
e3:66:15:8e:8f:c4:b5:3e:da:9e:7d:29:1f:9f:c7:
ea:17:3b:04:3f:fe:7a:b5:6b:50:0b:10:a5:98:1b:
5b:d1:42:12:e0:d6:b1:25:41:d2:37:89:4e:8d:c1:
5d:0b:b7:27:f9:6e:0c:32:d4:06:6f:ec:72:a6:88:
17:1a:96:2d:07:ea:25:e4:2e:e9:c7:aa:9a:f4:63:
7f:e2:f0:48:52:45:9f:25:45:31:e6:93:11:33:32:
e7:9b:00:43:1a:5c:09:0c:18:cb:f9:f2:c7:07:cf:
cd:28:d5:7d:c1:1a:4f:cf:2b:54:ca:5b:91:b6:d8:
25:68:30:a7:39:15:e8:9f:17:a1:eb:16:0c:f6:8f:
06:5f:91:7f:84:29:dc:1e:20:24:ea:9d:7b:4c:e7:
47:e1:f8:56:6c:ba:5f:40:26:51:98:4e:fe:a6:cb:
77:75:07:90:9a:75:44:b8:a5:d0:70:f9:c3:0e:a5:
4f:32:d6:aa:03:1f:d1:06:37:fd:37:25:33:63:7b:
29:57:44:61:e9:10:f4:b5:69:b2:71:71:93:24:a6:
89:9f:97:35:82:95:58:96:54:01:79:23:f9:71:80:
0e:99:16:df:0c:c2:fd:b2:ff:8c:f1:91:86:68:16:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:9C:FC:F2:E7:34:DC:AF:AE:8D:2E:31:B9:A3:8D:62:57:29:37
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:82:14:7c:fa:dd:85:5e:86:c7:d8:79:53:a7:07:40:1f:
50:82:91:99:36:3b:60:9a:8c:4a:2f:66:8c:e2:e1:d2:f8:ba:
a4:36:8a:07:48:ba:dc:ba:88:18:eb:28:e3:5c:e7:cb:d3:32:
6f:c5:77:97:29:e3:91:30:a3:1d:e3:3b:89:73:7d:1f:3d:57:
cb:a0:f6:98:bb:ef:bc:99:73:30:5f:1b:37:2e:38:fa:69:c5:
16:7b:9f:fe:8e:16:44:65:ae:03:21:67:1a:d3:f7:a0:8f:01:
d6:13:a8:af:d0:40:39:0b:e1:c1:91:48:37:4d:51:5a:37:a8:
8c:0b:5e:f9:92:b3:ca:3d:d6:f5:97:75:eb:fb:eb:e3:20:b4:
8b:9f:5a:67:75:65:56:18:6b:83:57:6f:fb:40:59:2a:02:8d:
b2:7b:d6:98:b7:68:6f:32:fc:97:1f:3c:2b:5e:0b:86:8d:bf:
2c:e5:fd:26:03:2c:ce:a1:5d:c6:ae:16:a0:89:5c:9f:b4:9f:
5d:86:d8:f2:4c:be:d8:26:b3:a9:44:1a:7e:76:52:d3:4e:79:
f4:08:22:c7:c9:83:1a:b9:9e:12:bd:5d:13:d1:7b:ac:fe:7e:
7f:42:8d:4c:2d:dd:dd:94:1b:33:c2:56:8a:0f:ed:0b:b4:57:
e9:d7:ff:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eCVdbYk9q6H4mIFThOesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1
ODhlOGMwHhcNMjYwMzI5MTIwMTA4WhcNMjYwMzMwMTIwMTA4WjAzMTEwLwYDVQQD
EygwZTM2OWNmY2YyZTczNGRjYWZhZThkMmUzMWI5YTM4ZDYyNTcyOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYS7to2tanfevWHFzU7jZhWOj8S1
PtqefSkfn8fqFzsEP/56tWtQCxClmBtb0UIS4NaxJUHSN4lOjcFdC7cn+W4MMtQG
b+xypogXGpYtB+ol5C7px6qa9GN/4vBIUkWfJUUx5pMRMzLnmwBDGlwJDBjL+fLH
B8/NKNV9wRpPzytUyluRttglaDCnORXonxeh6xYM9o8GX5F/hCncHiAk6p17TOdH
4fhWbLpfQCZRmE7+pst3dQeQmnVEuKXQcPnDDqVPMtaqAx/RBjf9NyUzY3spV0Rh
6RD0tWmycXGTJKaJn5c1gpVYllQBeSP5cYAOmRbfDML9sv+M8ZGGaBZemwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA42nPzy5zTcr66NLjG5o41iVyk3MB8GA1UdIwQY
MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt
MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl
LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6CCFHz6
3YVehsfYeVOnB0AfUIKRmTY7YJqMSi9mjOLh0vi6pDaKB0i63LqIGOso41zny9My
b8V3lynjkTCjHeM7iXN9Hz1Xy6D2mLvvvJlzMF8bNy44+mnFFnuf/o4WRGWuAyFn
GtP3oI8B1hOor9BAOQvhwZFIN01RWjeojAte+ZKzyj3W9Zd16/vr4yC0i59aZ3Vl
Vhhrg1dv+0BZKgKNsnvWmLdobzL8lx88K14Lho2/LOX9JgMszqFdxq4WoIlcn7Sf
XYbY8ky+2CazqUQafnZS00559Agix8mDGrmeEr1dE9F7rP5+f0KNTC3d3ZQbM8JW
ig/tC7RX6df/Rw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:35 2026 by rpki-client