Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
File: lajACQMBmVVkqiE4tDA4nviM13s.mft (raw, json)
Hash identifier: lpr/eDF+0KpJVAYUd1ECc5qvbytZmt+sxu81yDPay7k=
Subject key identifier: DF:6B:9E:AC:53:B8:CF:DD:87:7C:9C:1F:F2:5B:DC:30:5E:54:A8:25
Authority key identifier: 95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B
Certificate issuer: /CN=95a8c0090301995564aa2138b430389ef88cd77b
Certificate serial: 019D382E4AEDADFA36204AB09CFF402FECEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
Manifest number: 015F
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: lajACQMBmVVkqiE4tDA4nviM13s.crl (hash: isJxrQaZVbSfulG8Bw5Y29f1uWlcmxy8JJHW6IjwHgo=)
2: t8a-QnR86-kpB7NDXscxwrUfubA.roa (hash: urj77O5mIDu7OcW/OyhkE0pGwVVEOXwa/ya3893rN/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4a:ed:ad:fa:36:20:4a:b0:9c:ff:40:2f:ec:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a8c0090301995564aa2138b430389ef88cd77b
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=df6b9eac53b8cfdd877c9c1ff25bdc305e54a825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:02:21:5b:19:2e:e3:b9:ba:25:06:0f:90:
92:9d:01:75:1f:a8:bd:9b:bf:93:e4:fd:e4:87:b1:
4c:69:55:5b:72:21:65:8b:ae:f5:e4:a5:32:78:ec:
5b:37:fc:3b:f3:de:51:a1:64:0b:55:23:93:28:fd:
c9:6c:80:a0:33:f7:c9:f8:b4:b9:d1:24:cf:37:56:
73:e8:78:02:9d:51:36:62:5b:fb:b3:a2:59:de:b1:
fa:76:49:1c:3a:a2:00:86:05:0b:43:3e:be:05:3d:
d5:00:ee:3f:f7:63:97:ff:30:90:e8:01:0f:00:1e:
4b:db:b9:05:1e:fd:46:09:16:9c:01:87:84:83:42:
b1:bb:b1:3c:ec:ec:e9:01:f1:81:8e:b0:7f:f7:71:
f7:01:39:ed:56:51:c3:0e:3a:cc:a1:79:78:a7:22:
92:39:e7:a9:23:39:f1:1e:24:e6:6f:90:74:bb:64:
18:5f:52:fb:87:79:9d:98:23:a2:95:f4:52:5d:03:
ae:84:a7:58:b2:8c:4c:6a:44:49:5e:ef:c2:f4:cf:
b0:a5:23:3f:d1:91:0f:eb:40:4f:63:0e:08:a5:e7:
74:e0:b9:d3:89:15:55:95:e6:a0:7d:ad:7a:28:16:
28:e3:a1:ac:28:52:f0:b9:ff:e2:02:b1:85:e5:3b:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:9E:AC:53:B8:CF:DD:87:7C:9C:1F:F2:5B:DC:30:5E:54:A8:25
X509v3 Authority Key Identifier:
keyid:95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:41:4a:3a:83:d4:f7:c0:68:bc:9a:95:c2:80:97:e3:02:e7:
24:4d:1e:9d:4f:17:a1:bb:5e:68:90:de:18:69:9e:0e:dc:d2:
f1:08:a2:5a:b9:9f:46:5c:b9:5d:d5:b0:56:4c:37:87:12:4e:
b9:c0:e1:47:bc:a5:95:d8:2a:e4:c8:17:2c:31:48:24:67:38:
a2:36:8c:d0:c1:2a:99:54:18:ff:6f:29:84:2c:08:93:6d:92:
e0:bd:56:d0:14:b4:89:82:07:8e:0a:c1:12:04:60:1b:fe:b9:
62:22:ea:14:13:70:16:69:6d:6e:4d:03:d8:f4:f7:ed:2a:c0:
5c:81:08:dd:98:93:39:0f:7e:e4:c3:a5:b4:aa:ca:38:34:ad:
d9:5e:19:48:cb:67:c1:19:bc:da:64:c1:59:7d:a0:18:7d:2b:
f9:3c:f3:53:51:b6:40:ea:44:ca:c9:d6:35:b4:0f:48:1f:be:
9e:6e:1c:eb:9c:3a:b6:17:75:16:d4:92:bc:dc:4f:66:3d:d1:
b1:92:46:64:79:6e:84:e6:da:7c:01:c5:e9:69:b7:d4:3a:6d:
e8:ed:7b:c5:7d:f9:c8:c5:43:ae:73:33:bb:13:f6:b8:e2:24:
99:ca:7f:0e:3f:db:01:a8:4f:93:91:a1:4d:99:d8:a8:f7:20:
29:b6:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:41 2026 by rpki-client