Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: UPQQGA59oZcZIiXD8HZnKuyOJlbn3Boo4GgIPrqzMDA=
Subject key identifier: 46:A7:3A:34:B2:DC:E8:FA:97:71:35:28:B8:F6:3D:29:EE:1F:1C:96
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019D39AF2496B382AB3700D6CBC972588689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 13:01:12 +0000
Manifest this update: Sun 29 Mar 2026 13:01:12 +0000
Manifest next update: Mon 30 Mar 2026 13:01:12 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: gTuEWwdkxBc4NK1Q/IiSfCfUJ/6wGZffEdRKqnRDNAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:24:96:b3:82:ab:37:00:d6:cb:c9:72:58:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Mar 29 13:01:12 2026 GMT
Not After : Mar 30 13:01:12 2026 GMT
Subject: CN=46a73a34b2dce8fa97713528b8f63d29ee1f1c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:33:3d:2c:31:6b:53:05:59:46:8f:7c:e2:
e9:96:53:ca:d4:9a:3c:0f:ef:ca:06:09:88:08:15:
0a:e3:40:8a:99:42:13:da:51:aa:41:f9:43:77:1a:
7d:ff:6f:e3:9c:fb:29:fb:6a:a7:b7:ec:24:e9:5b:
67:5d:63:7b:ba:b9:a4:82:51:4f:b6:22:c3:92:d7:
28:d5:8a:55:da:17:ff:41:b1:ce:e9:9a:a3:b2:8e:
3b:05:42:78:f6:53:f7:74:e9:ab:91:b1:3b:1f:80:
cc:ea:33:c5:bb:2a:7c:58:a7:77:1d:c3:8c:09:7e:
05:20:f5:53:5c:39:51:c5:37:a6:17:b6:ee:28:b7:
62:5d:77:88:ae:55:e9:f4:e1:ae:e8:f3:c3:bd:e1:
e4:0d:4e:ad:a3:10:38:cd:c0:1b:54:06:ad:57:61:
91:54:77:58:c3:43:bd:48:4d:1d:e0:7a:8f:50:50:
35:1c:ad:22:14:eb:c7:82:43:96:60:63:78:1a:d8:
31:b4:b1:cf:87:47:b7:30:bc:4b:5a:ac:cf:f4:fe:
85:39:75:67:ff:7c:b6:ab:41:e5:e9:cf:29:d8:a0:
58:2b:db:60:62:ce:3b:7f:63:11:da:b6:03:1e:3a:
02:56:b1:91:2d:43:d9:17:31:21:03:6f:8e:11:bc:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:3A:34:B2:DC:E8:FA:97:71:35:28:B8:F6:3D:29:EE:1F:1C:96
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3c:40:11:ba:f5:f9:a0:6f:c4:70:f6:dc:2c:07:e7:14:30:
90:c9:b6:ad:e1:ad:c6:56:cf:39:ad:80:89:bf:15:8a:fe:6e:
67:4c:27:b8:68:db:10:71:ea:15:94:2d:06:da:cd:29:ae:db:
64:a5:ff:47:59:62:e7:83:31:31:6b:e5:8e:39:f1:67:0c:52:
bb:f4:90:0c:6d:8d:65:61:bc:fd:62:d1:fe:00:a9:03:90:c7:
e4:7e:c2:b3:2c:58:52:ea:fe:1d:c3:62:3c:bb:d5:0c:de:b7:
37:df:c4:99:ea:51:c7:89:c8:5e:bd:0c:b6:ac:6c:e9:8e:54:
13:98:6d:ff:1b:8f:8d:b3:33:7a:d3:65:da:35:ab:05:29:7b:
bf:92:ee:ae:48:4d:8e:16:75:63:ed:b8:49:c8:15:42:47:9e:
48:54:af:ac:f9:79:97:87:1f:3a:8e:de:ff:a1:3d:2f:6e:77:
48:e8:22:28:f0:1b:72:42:08:28:ca:8d:0f:eb:22:17:40:4f:
21:35:ff:93:41:5a:bb:0c:32:ca:a4:7f:a6:fc:83:b7:ee:ef:
61:78:8d:2f:0f:3f:a5:d0:1f:8d:9c:0a:88:fe:87:da:72:78:
8d:3c:21:03:85:5e:2d:62:45:dc:9c:46:c3:cd:b4:a4:12:8b:
60:34:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:45 2026 by rpki-client