Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: 1OwzcM9/09a4gWsAhuGGivOVV2CwHX2e7s3+mT+pB68=
Subject key identifier: 5A:AF:88:73:96:DC:18:D4:1F:D8:0E:54:F9:20:DF:B2:98:24:C4:A7
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019D382E3D0AECEFBABF0BBDF34FD070DCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 071B
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: ZC1uG/2roZo44/K8ALIZpzJ7XRZ9T/26tKUUsj0JZ6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3d:0a:ec:ef:ba:bf:0b:bd:f3:4f:d0:70:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=5aaf887396dc18d41fd80e54f920dfb29824c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:2d:b5:14:6c:c5:b4:d6:f2:a1:39:2b:8c:
8d:36:2a:64:db:1a:b2:1c:b5:25:a6:d0:d3:04:51:
cb:55:15:9a:97:3f:73:42:c5:f2:a5:bb:36:d9:6c:
1c:6f:1e:56:7f:2a:47:53:d2:d5:43:f7:fb:d8:87:
09:46:7d:44:e6:5e:a3:20:f3:14:c3:d0:c6:a8:76:
c5:b8:a7:db:a0:3f:cd:43:a0:74:c5:63:49:24:2c:
5d:e6:1f:ae:06:d1:f0:b5:b4:f6:a7:67:2f:f0:f6:
f1:b9:ad:6b:5d:be:dc:01:32:d2:f6:cd:ee:b3:bd:
5f:cd:d3:d9:7b:29:c1:74:a7:95:e8:8d:66:f1:2e:
1d:59:e0:11:32:bd:f0:ff:dc:c8:97:32:47:4e:0d:
8d:65:4c:11:14:3d:e1:8c:d1:07:00:18:4d:25:f3:
5e:8c:6e:37:01:0f:f8:b9:bb:7f:74:75:bb:4d:03:
d3:ff:33:3f:9f:e9:36:12:94:59:61:a1:13:56:4a:
61:96:c6:d9:92:51:7a:ae:9e:f9:bd:47:48:d8:77:
0e:34:00:d6:2f:d0:79:54:31:2c:87:7e:c8:cc:eb:
5a:d2:f3:c0:49:a6:93:00:ba:b8:45:75:87:75:a6:
bc:7a:e1:3d:d1:79:75:c7:06:3e:ff:15:e0:10:43:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:88:73:96:DC:18:D4:1F:D8:0E:54:F9:20:DF:B2:98:24:C4:A7
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:45:d5:d2:b4:b4:b9:bb:51:3a:e0:dc:32:99:54:48:c4:29:
ba:62:be:7e:ba:8a:b8:1f:9e:55:f0:f8:29:4d:99:cd:47:7d:
60:ff:79:e4:40:9b:e2:57:28:e7:40:7a:7e:37:f0:c3:e5:b8:
b4:3c:d6:71:ad:a4:87:42:a8:9a:18:99:26:0b:02:29:0b:45:
c4:f7:06:fe:b9:37:79:0a:f2:fe:c3:45:6e:bf:0a:a2:f9:ca:
22:6f:f4:9a:6b:89:95:a3:ea:c6:d0:4e:c2:df:50:12:03:5f:
44:78:62:4c:2d:9a:68:dd:a0:9a:24:bc:a7:6f:aa:fd:9b:1e:
ff:65:4c:c4:45:8a:45:4b:71:99:34:c5:ca:4f:00:67:ca:59:
93:80:3b:e8:0d:2a:58:6f:0a:a6:c8:9f:6d:16:4f:83:8c:7b:
c1:69:07:4c:c6:1a:98:48:6a:58:7b:99:65:6f:a4:0c:4d:a5:
7f:ed:5d:54:6e:59:df:be:60:7f:96:c0:69:2d:49:5b:c5:36:
c0:7a:0c:a2:2c:1e:b9:1b:ee:27:3e:68:b4:35:bc:15:cc:ec:
ab:e2:00:00:dd:a1:88:dd:95:cd:47:0d:56:d1:f6:9f:25:01:
69:0f:68:79:7d:0e:cd:42:b3:cc:03:85:93:91:fa:99:1f:70:
ef:63:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:10 2026 by rpki-client