Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: +LQDyASUcSjzdPCxisd9uigFkXx9zM2gChK/gke4rc8=
Subject key identifier: 54:2C:28:63:28:BD:B7:19:D5:D4:7B:91:52:01:5F:12:EF:63:13:1C
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 019D39E599A1689B6189B073C311D2FC87BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 0541
Signing time: Sun 29 Mar 2026 14:00:41 +0000
Manifest this update: Sun 29 Mar 2026 14:00:41 +0000
Manifest next update: Mon 30 Mar 2026 14:00:41 +0000
Files and hashes: 1: Pq9ZuZBzVIXXjgHCRmaDImbQg2Y.roa (hash: 11bzHyr21wFIMkaSiukQigkPWPjefTdm2bknAq+/9g4=)
2: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: OgCUhKfFWIR1SCjBybfuVbRBpLm5VGEy0y/roEP4ICU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:99:a1:68:9b:61:89:b0:73:c3:11:d2:fc:87:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Mar 29 14:00:41 2026 GMT
Not After : Mar 30 14:00:41 2026 GMT
Subject: CN=542c286328bdb719d5d47b9152015f12ef63131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:49:f7:ad:89:9d:f4:51:8b:b2:6b:7f:33:
b8:d3:10:0f:46:ea:f2:d6:55:c8:05:1a:c4:fa:c9:
45:36:3c:02:c6:d5:ad:c4:0f:c5:b4:7f:b7:32:fe:
dc:f1:93:f3:aa:db:4e:78:dc:7d:d2:a2:fc:c7:11:
72:a1:4b:ab:bc:93:06:a1:28:1e:e1:e1:0a:6d:5d:
e0:cd:3c:52:90:98:34:25:de:52:f7:f6:03:9c:b8:
c7:fe:e8:a6:4c:76:d6:da:e4:95:af:0e:88:7e:90:
5c:0c:f0:08:b9:0b:83:08:b2:eb:7e:fc:8d:e9:4b:
a3:e5:39:3f:50:4c:a3:c0:0c:4c:07:bb:96:e0:96:
4c:6e:80:71:eb:17:25:a3:cd:f4:cf:93:e6:2f:91:
41:3f:a2:58:3b:e7:ef:e1:50:a3:8b:b5:45:56:96:
27:09:46:31:dd:07:06:6f:f5:8d:e8:c7:0f:6a:59:
d1:9e:4a:f4:45:d5:d1:57:f1:91:ba:63:f2:1b:f8:
4c:18:cf:b6:5a:67:82:be:bb:8e:4e:3d:d8:0b:3f:
be:21:e9:1a:f1:1a:35:ab:75:12:c6:72:89:b5:ac:
0c:a2:ea:a6:42:f4:60:bd:ec:7d:61:65:f0:3d:9a:
81:d3:44:f2:00:98:04:97:6e:4d:84:63:c6:47:de:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:28:63:28:BD:B7:19:D5:D4:7B:91:52:01:5F:12:EF:63:13:1C
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:b1:73:c8:1b:31:56:86:6c:c4:f7:d1:c9:f8:9b:37:2f:
b2:af:0e:1d:55:10:d9:d3:63:e7:7b:2d:ba:80:d2:47:f2:4a:
53:6c:a2:e2:f0:54:6b:ec:6f:56:9b:cb:9a:dd:d6:64:ad:14:
11:e4:cd:71:d5:97:6e:ad:3d:e1:f0:5e:74:da:12:2d:f8:a9:
5e:72:ca:71:db:08:f0:1e:7b:b2:e0:6e:48:47:6d:c1:26:48:
92:07:c8:0c:85:50:53:48:53:bb:22:40:8d:eb:72:2f:09:05:
5d:d3:25:c0:b0:d6:76:df:9b:c5:bb:dd:6a:be:3f:b3:32:ca:
13:6d:62:e2:03:8e:21:d7:5f:ae:ea:7a:40:8a:63:4c:25:c1:
f7:7f:fd:a3:d1:5e:99:14:80:f0:8c:ba:b7:7e:9d:ec:85:d7:
75:36:e6:00:bb:4b:4a:f5:5c:b3:71:bd:75:cd:90:18:f5:50:
15:c6:58:96:a2:4a:aa:78:ba:45:66:67:47:74:66:5f:1e:2a:
40:5d:1b:5b:1e:24:16:27:ac:70:d7:f7:18:30:e2:7c:a1:d2:
8d:c6:09:d7:3f:c5:b3:c5:e2:6f:a9:98:c1:62:c7:7b:dd:8b:
a6:0d:76:b4:5e:35:14:5d:c0:c5:c0:a9:05:10:64:92:76:17:
e7:d6:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:32 2026 by rpki-client