Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier: KOZhvc5rwOTuGtq+fWhGgI4ReKje6vpbbh0yoGv4380=
Subject key identifier: 43:0D:99:05:2B:12:21:DE:E7:46:24:66:9F:D7:77:A7:F3:E3:69:6C
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial: 019D37532CCBB8104B66747A1DDAE6FBC03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number: 0E8C
Signing time: Sun 29 Mar 2026 02:01:30 +0000
Manifest this update: Sun 29 Mar 2026 02:01:30 +0000
Manifest next update: Mon 30 Mar 2026 02:01:30 +0000
Files and hashes: 1: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: e+kM+H7G4jqVwqLk6aBe7gOwYsgIC3bzSnjfYdZu7CI=)
2: ydS6eMGV2E_nCAzSb4zL1J2j01U.roa (hash: xl5/X7Y7NgHagIWTgbLsF4i9BhVtT/CXbFeV5zrVX/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2c:cb:b8:10:4b:66:74:7a:1d:da:e6:fb:c0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Validity
Not Before: Mar 29 02:01:30 2026 GMT
Not After : Mar 30 02:01:30 2026 GMT
Subject: CN=430d99052b1221dee74624669fd777a7f3e3696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:df:82:d1:c5:0e:d4:e2:1b:ec:f8:0c:d2:
64:5f:a2:77:95:80:57:ce:b3:03:f8:85:f2:e5:cb:
04:db:ba:3b:a7:f9:83:4d:df:5c:4e:f4:f7:82:3b:
bd:0e:12:7e:6a:e8:b2:d8:2e:58:32:52:98:c8:47:
18:95:a1:a3:e4:63:23:0f:66:24:f6:c4:f6:b0:34:
4e:5c:be:ef:66:f2:8f:16:95:5b:34:0a:86:f5:97:
4a:53:c7:b8:76:2d:be:6f:12:ba:01:2e:91:99:13:
df:1e:64:c6:93:57:52:95:98:84:33:ac:39:7d:b0:
41:f3:82:2d:ab:75:a4:6d:f3:48:62:0b:8d:5c:b7:
45:91:cd:be:84:fd:a8:b4:a9:d3:c6:53:f9:a7:e7:
24:4b:05:a3:3e:72:b2:ba:e5:f1:f2:8e:39:b1:71:
27:2d:35:86:28:07:02:0a:3f:e7:b8:38:f3:73:c3:
e3:5a:00:04:18:fb:70:59:79:25:bf:41:a2:0c:47:
33:4b:5a:e5:c1:ea:e2:55:f3:d8:2f:85:30:50:b2:
fe:68:a2:d2:c2:96:cc:dd:c1:2c:84:a5:92:23:43:
6d:29:26:92:58:8c:bc:32:2d:4d:e3:db:33:10:f1:
c2:ce:3f:db:d8:2f:9e:65:8c:35:7c:9f:c8:4f:dd:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:99:05:2B:12:21:DE:E7:46:24:66:9F:D7:77:A7:F3:E3:69:6C
X509v3 Authority Key Identifier:
keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:4a:ad:35:ab:de:9e:7e:02:51:1a:85:fc:3c:a3:f8:59:
24:0d:b1:39:12:81:37:09:59:5c:2d:f2:53:ad:b8:f7:a0:63:
8b:09:17:e0:4f:ba:55:7c:21:7e:b2:51:e6:08:d6:4f:a5:fc:
19:c5:70:3b:78:7f:4c:e8:36:36:eb:60:03:eb:cc:42:b9:d9:
26:bd:b1:be:fe:44:9c:09:6d:0d:f1:0d:9d:aa:56:8d:9d:ca:
11:71:af:3d:fe:dd:23:c6:76:46:d0:14:55:8b:4c:c0:e5:48:
95:06:e6:9c:be:5e:2f:fb:af:9a:b0:85:d4:a8:c1:7a:04:19:
04:e9:9c:e5:2c:00:52:8c:00:5a:b3:37:63:fa:9b:d5:70:1f:
da:a6:d3:56:bf:9a:2f:ea:94:72:09:9a:76:71:dc:e7:8a:db:
25:5d:99:12:f9:5a:55:63:b1:7a:54:bd:81:0e:5d:00:c9:06:
62:d5:17:b5:29:ff:63:30:9a:f5:30:3a:04:49:7f:e1:ff:51:
b5:a7:dc:93:00:c0:79:3b:95:a9:23:e9:8c:a4:64:3c:17:f6:
70:a6:1c:e8:ae:6f:79:c1:8a:99:f6:10:4c:5e:62:db:c0:2c:
01:9f:11:ce:d9:c8:15:d0:23:cc:04:b3:85:4a:e2:10:8b:ea:
a9:e5:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:47 2026 by rpki-client