Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: 8kQu18I3Gpx9OjL3CGICbKxQaSuYmj3LMnZsCUdOlD4=
Subject key identifier: 6C:30:36:89:18:CA:04:10:42:F3:82:E4:55:18:2A:67:84:42:5F:B3
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 019D039CD16140028A25A865C0F399CF63DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: FC
Signing time: Thu 19 Mar 2026 01:01:41 +0000
Manifest this update: Thu 19 Mar 2026 01:01:41 +0000
Manifest next update: Fri 20 Mar 2026 01:01:41 +0000
Files and hashes: 1: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (hash: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc=)
2: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: EKij+EIdOQhS2FL7y1INXKwI5uJRHC5wPF0+/YfigDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:9c:d1:61:40:02:8a:25:a8:65:c0:f3:99:cf:63:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Mar 19 01:01:41 2026 GMT
Not After : Mar 20 01:01:41 2026 GMT
Subject: CN=6c30368918ca041042f382e455182a6784425fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:e7:fd:34:61:7c:35:4a:38:25:92:d4:91:
28:b9:dc:dd:c8:4c:eb:39:a8:72:f8:1e:3a:5e:d6:
c6:17:45:7a:65:dc:9b:42:40:ff:51:b0:03:61:4e:
14:ca:10:4c:65:75:bb:f9:9f:81:7a:bf:d9:70:7b:
04:82:fd:eb:aa:52:6c:6f:fb:2a:5c:d5:62:b3:04:
3e:db:f1:1a:cb:2b:9b:b3:2c:73:02:f6:77:da:36:
4e:df:b2:7c:62:f6:ec:1b:73:a2:ba:9e:07:df:f1:
d4:f2:38:ab:14:68:84:3e:0b:5d:20:8c:90:7e:59:
d3:5d:0c:7e:9b:0c:1a:8e:fc:b4:d0:ec:10:ce:b9:
82:1c:7e:17:a3:7a:0d:08:b0:f8:70:04:53:e3:7b:
d3:77:e5:73:6f:e0:69:53:94:77:7c:fa:a2:c7:2e:
16:13:d7:ab:31:33:3c:76:47:94:08:6c:9f:c9:bc:
01:1e:8b:88:9e:48:1c:cf:1b:48:ed:48:cd:fd:0f:
21:eb:3f:3b:a8:88:e1:64:52:26:97:d5:69:71:70:
3c:69:79:18:c2:dc:b8:2c:dd:7b:8b:65:f8:f5:2b:
47:52:19:ae:00:31:88:03:a9:c5:9b:28:59:52:c8:
11:ad:65:e3:1e:20:12:e3:b6:9f:5d:a5:28:02:cd:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:36:89:18:CA:04:10:42:F3:82:E4:55:18:2A:67:84:42:5F:B3
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:18:db:18:86:36:77:7a:0f:8d:4d:95:7a:35:38:b7:1d:
35:92:b7:69:4f:cf:ee:65:78:a8:0e:23:3b:9d:c2:a8:e2:b4:
83:0b:0b:ab:fd:4f:d4:3d:75:bd:b9:77:62:ba:55:5d:c2:fe:
61:e3:21:53:67:5e:7f:a9:e8:59:44:14:49:75:4a:e0:62:72:
40:07:61:89:82:5b:29:32:b6:5c:37:f2:e1:65:f4:70:ac:54:
fb:75:6c:03:28:61:6e:a5:cc:a8:2a:cb:8f:61:a5:f6:ed:1b:
df:93:86:9f:44:47:d4:3f:50:bc:3f:c7:ce:83:fc:4c:4a:f5:
ee:3e:7f:c8:30:a8:47:19:f4:68:d9:7f:01:f5:03:4a:1d:dc:
7d:de:ab:b5:d8:4d:3b:8a:c5:e9:22:e9:a7:b9:9f:4b:a7:0a:
cb:07:d3:09:da:b4:1e:04:02:40:2e:6f:41:39:44:ef:23:0b:
fc:4b:5a:c4:d6:56:3c:73:9e:82:60:dd:63:f2:12:52:67:47:
44:f2:b8:71:8b:2d:3e:94:a8:33:45:3a:c3:cb:90:27:25:b1:
87:9a:a4:11:6b:25:97:3d:2d:d1:36:e9:94:3c:98:83:db:ca:
1e:53:74:8e:a2:2d:91:61:f7:e2:08:92:9b:e9:3b:a0:e1:5b:
1a:f8:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:41:51 2026 by rpki-client