Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: 9OcO9/5K44xf9Df2Vq9OGKA6CDv8/7HHtwudKpamqjI=
Subject key identifier: F3:52:EA:80:85:A7:C7:B3:6B:90:E1:3C:58:D4:66:42:F2:06:0B:75
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 019D382E92F466E3DE878FD00C7A6A66349A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0DCB
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: efh4js39DAepdcGf-XgcFtA9I2A.roa (hash: Wr//dqxMLdlf0wzZxtHqzTDoNgxS29rM1ry+hkHHkYc=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: Mp0c+1E0JyHq8UQ6eVaCwAUnw1/Ljd1qnWHH8EMni3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:92:f4:66:e3:de:87:8f:d0:0c:7a:6a:66:34:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=f352ea8085a7c7b36b90e13c58d46642f2060b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:c1:e8:c3:01:da:75:93:b9:13:65:2f:a7:
29:c9:67:e6:31:e5:e9:4f:41:41:65:4f:fa:73:0f:
f2:f6:8e:8a:2c:cd:fb:cb:a0:c0:ac:4a:3d:24:f7:
5e:6c:52:44:fb:5a:87:d9:40:59:1d:b3:02:29:62:
0c:99:ae:69:5a:6d:3e:fd:91:c8:30:e7:66:00:54:
ad:74:4c:c4:70:17:00:05:f9:64:15:46:03:a7:00:
52:6b:39:76:43:18:b5:9d:cf:40:a4:54:74:a8:51:
3b:79:51:f5:37:cc:4d:3d:bf:15:80:60:6f:c0:ce:
87:f2:ab:28:6d:ca:a6:65:7f:39:fe:6d:5d:59:24:
6f:2e:31:0c:8a:e1:20:b2:b5:bc:2c:f6:b3:dc:18:
36:83:97:95:79:2f:2b:0d:72:14:1d:09:f9:9c:13:
1c:af:2b:11:c5:f3:8e:08:0f:08:53:34:42:39:c6:
31:cf:3c:74:c1:98:72:bf:f3:be:06:e0:74:80:3c:
78:9e:f1:14:94:3b:95:4b:ed:42:cb:45:2b:55:96:
51:a3:89:ce:a0:ec:80:1d:01:39:38:d8:1b:ba:5b:
63:1e:f9:ad:92:9d:bb:55:8c:e2:d2:08:dd:01:a5:
c3:2b:04:38:eb:ba:6b:40:d1:9d:b7:f7:cb:d7:af:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:52:EA:80:85:A7:C7:B3:6B:90:E1:3C:58:D4:66:42:F2:06:0B:75
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:43:34:a6:fc:d4:4c:5c:75:9a:52:84:96:47:9f:5d:6d:
c2:21:59:82:df:e4:a1:cd:23:cf:c5:b0:41:21:59:ce:f7:d2:
25:10:48:6e:9e:3e:c4:7c:64:07:74:78:4a:ad:2b:64:9e:f3:
44:c9:4a:cc:d2:63:2d:dd:00:df:13:dd:89:54:7e:cd:f8:4e:
a5:fb:5d:c4:bb:b0:d9:3e:75:ff:af:6a:cd:0a:52:8c:92:ce:
cf:ee:0d:00:3d:12:93:fe:cd:2f:ca:4f:81:ce:69:86:ff:3b:
d3:ce:e6:ef:c4:c8:9f:3d:f9:0e:f7:d9:c3:22:b1:af:7a:77:
db:6e:29:17:1b:9a:5c:5c:45:d7:13:56:25:a2:33:1a:23:13:
eb:06:78:64:5e:6a:14:c4:97:fb:15:f0:d3:de:c4:3c:a2:6e:
7b:12:52:65:35:84:6e:61:57:ba:40:89:03:dd:e7:f4:1e:d1:
8a:9c:78:79:5e:2e:cf:21:26:49:df:56:7c:43:64:39:fe:45:
df:cb:74:42:4a:43:af:6f:e4:02:7a:5b:4c:a6:a0:a4:64:54:
45:92:19:12:98:55:45:77:50:c1:f1:a9:a2:d6:02:01:2f:ac:
65:19:39:1c:45:60:3e:91:2e:3a:a7:0e:ce:49:53:ca:97:99:
63:75:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:48 2026 by rpki-client