Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier: l2HSxY0sI+Nm9NfzQQPeu1JAYtp4+WksLTQsHLWv6Jc=
Subject key identifier: 92:EB:81:30:51:D1:D4:A9:19:5C:03:3D:BF:D5:28:52:47:30:1D:FA
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 019D389C5CFECBC95CD4E813295790102C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number: 15DA
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: ItHxX2A//cD4w+obL8M8UL16/RqNvABVyFbTPL7JgVQ=)
2: prXJxfNGOfhBAafrZxzXejtK89Q.roa (hash: ODutQ0k0mib3bpTTiK76gkwrQKBzBwaL/WseoM5mqrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5c:fe:cb:c9:5c:d4:e8:13:29:57:90:10:2c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=92eb813051d1d4a9195c033dbfd5285247301dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:03:b8:a5:76:66:b4:63:00:7d:75:c8:a8:
96:ae:f9:27:eb:91:82:4e:88:e8:af:4e:95:c0:a7:
7c:4e:f4:7b:8a:fe:da:bc:87:3e:70:f7:e9:6f:e7:
c7:84:6b:c6:d3:cc:ab:49:47:9a:93:5b:60:42:01:
23:5e:16:71:8a:96:49:60:f1:72:fa:8c:e5:69:47:
96:65:06:08:d9:78:24:ab:a7:a8:6c:50:f8:7d:ae:
c9:fb:e5:b2:2c:81:f5:35:d9:77:31:7f:f8:32:fd:
a7:7e:e8:57:b8:21:0a:62:c2:e6:3f:71:c6:cc:c2:
b2:7b:f3:30:0c:05:86:e6:e5:2b:5b:31:3e:29:41:
77:60:39:08:87:f3:43:4d:d5:d1:5d:0e:94:67:16:
ab:1a:6c:0b:f8:e3:d3:7e:a7:7a:33:7e:46:df:ee:
96:d4:09:76:0c:46:47:ac:53:16:35:e6:a6:80:b9:
51:3e:aa:d4:7c:d4:fc:54:f8:e9:eb:12:8c:49:b8:
3b:ea:26:51:94:54:4c:b7:da:3c:be:27:a7:bd:1e:
13:48:c8:d8:0b:0b:c9:f1:6c:c9:13:06:f0:68:3d:
21:da:d9:29:f6:1f:d9:3e:99:88:00:44:b4:4d:5a:
4b:10:7f:9d:07:c3:23:32:71:39:fb:9f:22:b6:e9:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:81:30:51:D1:D4:A9:19:5C:03:3D:BF:D5:28:52:47:30:1D:FA
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:44:db:cf:5c:de:54:28:d7:74:12:51:cd:1a:20:14:79:5a:
42:5c:c6:70:91:b9:57:2a:67:c9:cd:bb:f4:91:69:c9:5f:97:
4a:ea:46:5c:76:34:79:4a:99:17:35:8b:26:ba:0f:64:37:ba:
73:64:2b:86:5e:7b:bf:66:e7:6e:ba:56:21:b5:b9:bd:6d:1d:
20:42:d6:d8:60:8e:c4:fe:b6:f0:c9:f2:ea:7a:9b:d3:cb:e3:
c4:f1:9c:a9:75:5e:f3:b9:ce:97:e0:00:e0:e1:4b:65:b5:7e:
d7:c2:d1:21:2e:66:bb:62:f9:f6:bd:9c:54:75:6c:b9:38:be:
08:f1:f6:75:e7:90:cf:c6:2c:0d:15:3d:d4:77:87:64:20:b6:
41:7f:d9:5a:33:7c:6f:91:8e:c9:8a:91:54:a2:63:9c:f6:39:
89:bb:19:7f:d4:43:7e:04:28:b2:5f:23:b5:66:88:af:6d:33:
f5:20:23:2a:8d:5c:4d:23:4a:8e:e9:de:f9:0c:e7:7d:1e:bd:
30:8c:ed:5f:73:ad:81:18:6a:8f:29:c5:d9:9d:5e:58:55:bc:
27:a7:0e:cd:ad:a5:81:68:55:84:bc:67:d2:3f:28:94:88:9d:
1d:ff:29:72:12:fa:24:87:9f:4b:f9:66:c4:e9:7d:9b:6f:e8:
5d:70:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:01 2026 by rpki-client