Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: sb9/A10GoidpPFib427Zyfq1Ad5jAPR3Qbn5gAnAGvE=
Subject key identifier: 19:9D:71:3B:F5:FD:DE:EE:CD:67:63:CB:0C:07:93:73:2C:F7:62:E0
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019D3940A372E8BB5AEF1241B1BD033C6322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 166F
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: Sxpo3HNhpjXUx+BFuR1VrgNhFjyONSDLfrugQrIA6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a3:72:e8:bb:5a:ef:12:41:b1:bd:03:3c:63:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=199d713bf5fddeeecd6763cb0c0793732cf762e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:3f:34:68:2e:9e:af:15:90:89:2f:56:ae:
7d:6a:fc:8e:b5:27:f7:43:21:33:b8:74:d3:ee:58:
23:53:0d:0c:90:ca:f6:f7:6f:2c:1a:9a:d4:ba:dd:
ff:1b:7a:5b:14:e1:cf:19:bb:7a:75:a5:be:a9:b4:
92:5b:ed:f5:ad:e5:49:fe:47:49:37:96:7a:d0:a3:
85:82:3f:ab:82:b2:3a:39:9d:21:6f:bd:a7:1a:cc:
86:57:b5:b4:ec:2a:85:c5:33:31:25:0b:5e:8d:53:
3f:fc:d9:94:dc:d6:28:02:27:62:dd:cd:94:ff:97:
cf:9d:d1:24:d7:c5:26:3c:9b:aa:6f:b0:f9:ec:83:
f8:be:1d:09:0f:e5:3e:b8:e2:21:49:66:77:36:64:
13:e5:65:f9:75:c2:72:ec:40:58:ba:10:28:95:2b:
7c:b2:4b:2a:19:88:85:a5:d1:26:4e:ff:1b:7c:83:
db:ea:d2:dd:94:71:87:7b:a7:1b:3b:12:de:6a:fe:
25:99:f0:9a:39:c2:00:a7:9e:41:2b:bf:cb:81:99:
96:56:30:f7:d0:cb:10:0a:06:5e:c1:1c:c6:9a:61:
fd:88:67:c9:d9:1f:9c:e8:30:a0:1e:20:4b:97:04:
d5:22:b4:46:6d:47:2c:59:35:58:9a:14:9c:23:a2:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:71:3B:F5:FD:DE:EE:CD:67:63:CB:0C:07:93:73:2C:F7:62:E0
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:30:b3:c7:ba:90:b5:49:97:66:c6:7a:8d:21:03:89:c6:5a:
74:49:c4:29:80:c4:3f:bd:25:41:48:15:93:d8:ad:f4:42:43:
13:b4:41:11:8d:ff:4e:ea:24:31:fd:0b:2c:99:4b:20:a6:f7:
f5:76:7b:d2:0e:89:af:eb:06:fb:98:c7:9d:0b:dd:be:ac:77:
de:1e:59:96:3b:31:06:b5:fe:9d:9f:f7:72:44:ed:10:e6:bc:
06:7d:53:63:29:67:f4:be:30:e6:e4:f6:be:de:f3:79:dc:09:
a0:77:52:4a:f6:8f:1b:90:ae:c5:48:a5:fe:ce:e3:9a:0c:6c:
36:b5:16:bf:91:42:ab:bb:d8:11:d2:9e:ab:8b:44:c9:09:9d:
12:b4:06:99:b6:08:e1:44:b5:1f:9e:e8:24:a1:48:f9:65:46:
7f:26:5a:36:8d:b6:00:1c:0e:1b:56:30:03:7f:d6:03:68:60:
2c:9f:4b:b5:87:ba:62:d7:87:31:54:41:38:a0:72:8b:21:cf:
c4:69:36:43:dc:5f:8b:cd:e9:01:03:1d:8c:1b:96:42:8c:f4:
90:c1:fc:ce:cf:aa:b0:29:4b:77:da:41:8d:53:19:a5:bf:b7:
67:19:ad:de:74:7b:11:83:a0:33:16:59:4c:fe:a4:b2:8a:57:
8a:c8:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:51 2026 by rpki-client