Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: MzlIHsEU2P02HJPXlW7hAj0QAhoAc4DBXZh0Cc2VJOo=
Subject key identifier: 63:1A:D6:D1:BC:A0:C0:3E:15:73:EC:CA:3D:58:B3:B5:94:B7:59:D9
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 019D3941A5B7D3AB09315FAEA806E0DAF5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 076E
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: EShqyLnli4Ayd2IC07/mA3sDVFSbUYSDRgpimZAx978=)
2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a5:b7:d3:ab:09:31:5f:ae:a8:06:e0:da:f5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=631ad6d1bca0c03e1573ecca3d58b3b594b759d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:b9:95:a1:4c:1a:af:85:e0:c9:ff:09:8e:
55:5d:60:bd:f3:51:51:c0:cb:05:2f:4d:0d:c0:0b:
ee:78:42:86:7a:07:8b:59:01:74:94:68:67:33:20:
28:b8:8a:6e:7f:32:48:2a:e7:96:2e:94:32:7c:60:
13:c2:43:a8:2f:10:ce:e5:5b:73:ce:1d:82:40:81:
a2:83:09:96:5b:e3:7e:a4:87:e3:22:22:db:3e:1b:
52:e9:a9:52:08:12:b2:1a:34:8b:8f:a5:44:5f:3e:
fb:dd:cb:90:cb:db:cd:26:3e:ec:01:40:07:48:0c:
cf:10:76:70:e9:e4:12:63:ed:9f:ee:63:7f:d0:71:
63:c6:02:42:50:df:41:84:8b:f6:50:9e:84:8d:1f:
c3:9b:87:80:c3:aa:89:f1:58:e7:8e:a7:72:6f:4d:
97:9c:ca:ec:53:1d:5c:b1:f0:0c:c5:13:4c:a9:79:
cf:a3:e8:8d:b8:fa:44:2f:a1:87:54:3f:f0:c6:47:
50:f6:51:0e:67:7d:2d:fb:3a:3b:57:d6:22:bd:54:
7b:6a:2e:d6:8f:33:f2:3f:67:22:a4:0c:34:e3:d2:
1b:21:4a:c7:c4:32:1a:73:96:fa:45:68:f6:3e:e1:
a3:d1:3b:fd:c6:b3:bb:8f:3b:e7:10:26:06:9c:81:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:D6:D1:BC:A0:C0:3E:15:73:EC:CA:3D:58:B3:B5:94:B7:59:D9
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:80:22:fe:1d:4c:21:0a:b9:de:1a:8f:95:5e:5e:05:43:
67:79:50:b7:5c:65:7e:33:9c:07:bc:95:b8:18:6a:fa:43:eb:
92:84:96:b7:93:fd:5c:2d:93:1d:50:01:50:b4:26:2a:2e:a1:
94:d8:be:9d:04:93:f5:72:c1:5d:19:9e:bc:0d:92:9a:73:58:
0d:77:b8:50:d0:4d:ba:85:ba:eb:4a:2e:ea:b5:e1:5b:5c:e0:
87:aa:ae:92:75:12:ca:e8:63:56:7b:b6:a3:63:e9:22:30:b2:
9c:37:c5:18:a1:d8:dd:cc:ab:20:d9:73:f0:33:f9:32:42:79:
e8:91:0d:26:b9:c3:98:e3:b6:9e:db:00:ea:1a:02:01:f0:a8:
c8:7c:ba:ba:25:b9:51:0e:04:2f:ed:d4:1a:bf:3b:07:bd:4e:
04:6b:45:f2:a6:3b:fb:6f:cb:18:08:b5:12:20:f7:46:18:90:
ea:5b:b9:8d:b2:37:14:90:e2:b7:7b:ed:84:09:83:f2:46:6e:
8c:77:49:1b:99:89:71:b6:1d:96:72:59:2e:66:31:91:ea:ef:
f2:17:8c:a4:22:71:73:81:96:b7:0a:05:3c:1e:9f:83:12:88:
7a:a3:53:53:e8:6d:44:78:5c:0c:8b:99:d8:01:fc:a2:d7:bc:
c3:89:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:44 2026 by rpki-client