Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
File: lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft (raw, json)
Hash identifier: LPY3TI0HNjw9SJbHZVTknIf6jEaQ4ZMEy21qe856Ho4=
Subject key identifier: 4D:B4:ED:DE:4C:5B:04:DF:46:98:1D:54:9B:BB:0D:EE:47:FD:C0:C8
Authority key identifier: 96:B8:CA:94:90:BA:66:7D:EF:56:BA:C1:79:15:36:5B:4E:86:FB:91
Certificate issuer: /CN=96b8ca9490ba667def56bac17915365b4e86fb91
Certificate serial: 019D37F70119AC74FA8F3C065E3A00C9BDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
Manifest number: 32
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: FF4TfaXEfQnUn4NVjK5tcE5No1I.roa (hash: Xkl+Zf8Igvlgx9OzHID1XncnraaTP8CjQg0pZdxD9JU=)
2: lrjKlJC6Zn3vVrrBeRU2W06G-5E.crl (hash: m0uNbQzR7Jeyg8At7iFxr+gBCU1aq5XKuQGyPGIKiTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:01:19:ac:74:fa:8f:3c:06:5e:3a:00:c9:bd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8ca9490ba667def56bac17915365b4e86fb91
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=4db4edde4c5b04df46981d549bbb0dee47fdc0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2d:b5:8f:27:83:9e:71:56:42:31:16:9e:7a:
d4:13:3b:6e:b7:3a:02:3b:4c:fe:15:55:68:b1:7d:
ba:80:d7:bd:b6:ad:b1:75:16:ae:32:41:12:75:cb:
1b:73:a9:a8:a8:3b:ad:24:73:e6:97:66:70:b9:08:
99:e3:a0:1e:18:5e:bf:5a:01:c8:72:64:98:b4:1b:
b6:77:46:f0:fd:28:50:3f:85:24:0c:7b:62:db:78:
dd:f1:d3:3f:43:f6:fc:77:02:2e:f9:68:59:14:08:
a8:00:31:32:71:d2:33:b9:0f:c6:11:41:e5:18:bc:
25:74:b8:f7:f0:28:41:93:9b:e0:f8:c3:a8:38:47:
37:75:4c:9e:43:00:6e:20:87:e2:2d:84:2b:40:63:
bb:a7:16:b6:70:55:b6:b8:b3:fb:d8:c8:8d:79:16:
7e:f3:63:eb:6a:e8:d9:94:31:42:e0:0e:b7:48:20:
a3:53:23:bb:47:72:f3:28:dd:3d:19:91:1d:1c:f2:
cb:68:0f:93:86:02:37:be:90:e6:3d:56:45:8c:1d:
e7:29:5d:ac:79:ff:15:b8:70:11:b4:6d:46:83:20:
aa:87:55:18:84:35:1e:18:be:03:ac:6e:87:78:ee:
08:95:28:f8:a9:9b:bb:11:40:1f:0f:0a:2a:84:9f:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:ED:DE:4C:5B:04:DF:46:98:1D:54:9B:BB:0D:EE:47:FD:C0:C8
X509v3 Authority Key Identifier:
keyid:96:B8:CA:94:90:BA:66:7D:EF:56:BA:C1:79:15:36:5B:4E:86:FB:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:98:5d:cf:77:53:d1:d4:1d:e4:6a:d4:87:1e:59:69:38:
53:df:cc:3d:57:14:ac:9e:89:bf:80:9f:58:78:f9:2d:26:32:
42:31:fc:15:c1:1d:eb:aa:f7:f9:2b:ec:b8:49:ed:b0:6d:52:
e8:24:41:f0:52:2a:40:5d:a3:30:ae:04:6f:33:90:ff:13:e6:
78:f3:bd:eb:22:00:a8:c0:c4:09:c7:15:94:be:8e:6f:56:a2:
5d:86:3c:7c:83:75:bb:8b:4e:89:1e:cf:5d:9e:b4:af:a6:64:
ce:cf:c4:4c:b7:11:28:48:2b:b0:16:a4:e5:00:23:b5:6a:2f:
76:56:22:3f:d1:9d:bd:60:18:61:10:aa:9a:df:7f:f4:19:e1:
9b:b7:dd:70:56:82:6a:a4:52:8f:68:f8:37:d9:7c:b7:c5:3a:
e9:67:83:5c:40:9b:6f:d5:92:c8:ee:35:ea:86:b4:c1:a6:21:
af:51:8b:ca:4e:05:07:11:c5:10:08:72:38:8c:55:96:11:61:
58:af:55:ee:9f:49:9b:48:12:73:a2:4e:4c:29:0a:97:d9:ce:
e4:ac:cc:ab:cf:02:3f:80:ec:96:b5:ae:72:c7:e3:a6:be:9c:
9e:92:be:c2:6d:07:31:4d:2e:1f:65:76:7f:ec:34:de:4e:51:
01:6e:90:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:58 2026 by rpki-client