Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: t7Z+npEraw4hhOoQRePaE3NkdSMLXdBA9t3jdNwePyU=
Subject key identifier: C2:E4:55:C6:B9:66:7C:66:49:FB:6A:21:BB:1B:7D:FD:25:60:9C:3B
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 019CC9AC2E9C246F0EA3A979DB91373FE906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: DE
Signing time: Sat 07 Mar 2026 19:00:30 +0000
Manifest this update: Sat 07 Mar 2026 19:00:30 +0000
Manifest next update: Sun 08 Mar 2026 19:00:30 +0000
Files and hashes: 1: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (hash: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc=)
2: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: v6fNY+IJ3/bUQ5X7zSx49wMn5ffor7qT5EaJMNPhFio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:2e:9c:24:6f:0e:a3:a9:79:db:91:37:3f:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Mar 7 19:00:30 2026 GMT
Not After : Mar 8 19:00:30 2026 GMT
Subject: CN=c2e455c6b9667c6649fb6a21bb1b7dfd25609c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:fe:b7:be:41:5e:6d:b8:20:7c:09:4d:1c:
b8:5f:ba:2b:77:df:7d:98:4f:b1:aa:8c:58:a1:b7:
5e:05:b2:d7:4b:88:2f:a4:32:9d:72:89:d0:44:d4:
fd:6c:04:30:45:3c:22:70:f9:c7:b4:4b:ef:cd:f0:
2d:fc:70:14:31:cd:e0:d2:c0:a8:25:07:f0:14:25:
ae:ba:08:a4:7c:f5:5c:f9:7f:cd:ff:56:b5:48:1c:
69:3f:79:0b:7d:8a:e3:c9:37:87:fe:15:57:f0:e9:
07:32:3c:07:41:2d:ee:1f:a7:bc:b6:e0:f0:b6:04:
62:95:5e:91:ec:80:51:70:d9:1d:7f:54:97:a7:9b:
7d:3b:97:0e:99:2c:98:ce:9f:a9:cc:ce:f5:24:35:
3a:45:cd:e7:2c:47:5b:8c:ab:19:87:d0:80:17:b3:
92:f5:8c:ee:58:d3:b3:99:99:b7:31:4f:2c:2c:68:
82:3c:9a:9e:6c:01:77:63:ba:e5:e1:c6:bc:39:39:
b7:08:48:29:8c:13:cb:fd:f8:3f:d8:cb:22:94:fc:
27:4e:86:4f:01:d6:39:e4:97:5f:79:eb:ae:22:8e:
fb:8c:ed:ed:30:25:8e:a2:0b:b7:c8:c4:a7:c2:d1:
02:ac:ca:ff:95:3d:ca:d1:06:36:1f:3d:9e:fa:07:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:55:C6:B9:66:7C:66:49:FB:6A:21:BB:1B:7D:FD:25:60:9C:3B
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:d6:7d:af:52:ad:9f:85:d9:af:d6:05:cd:4f:3c:e7:00:
64:ae:76:bf:fc:95:07:83:7a:df:58:06:4b:88:22:e2:d7:f7:
f0:0f:ec:e3:5e:ba:9a:39:0c:2a:4e:4a:c2:7f:59:70:42:14:
fa:b4:a0:85:58:eb:06:8c:a5:62:77:02:11:17:3a:97:e4:73:
bd:93:c5:83:9b:0d:bd:c3:8b:26:65:c0:56:6b:c6:b9:75:71:
89:36:a2:9a:6b:fd:3b:84:14:81:94:79:a3:06:15:6c:71:f1:
b4:da:65:75:ba:a8:59:be:6d:e3:d5:53:ab:89:d6:8f:0b:51:
51:15:56:ba:c8:9f:08:61:4e:ad:2b:11:77:b2:74:c7:f2:c9:
38:29:65:7b:91:5f:3a:a0:04:76:a2:e0:09:bb:e6:37:64:b4:
d1:a1:37:36:a8:b8:ce:a0:d7:29:8c:59:72:f3:0a:f6:73:2c:
36:20:33:20:89:eb:5a:c3:39:38:6c:db:a7:20:33:45:27:d4:
45:cc:8e:a0:c7:85:4f:6b:c9:a6:2a:9d:c3:d0:40:dc:e5:27:
70:c8:43:34:a8:d4:2c:86:2c:52:39:e0:09:d3:5f:53:51:be:
6c:4b:24:43:1c:36:9b:b6:14:07:26:2e:dd:91:e2:88:76:a9:
69:16:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:38:59 2026 by rpki-client