Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: 1PrjslVHWEzMJm/yih1j83wukgHyyKhOyzHtyGPnekQ=
Subject key identifier: F5:72:D4:26:75:5A:75:C4:9A:89:71:D9:11:75:B9:E0:54:50:DA:24
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019D37F798D499622561868D0062EC921BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1634
Signing time: Sun 29 Mar 2026 05:01:06 +0000
Manifest this update: Sun 29 Mar 2026 05:01:06 +0000
Manifest next update: Mon 30 Mar 2026 05:01:06 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: pQz6D32HLDPKHFqR4X5XkrLADedDmA1BkpSnUjk94NU=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:98:d4:99:62:25:61:86:8d:00:62:ec:92:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Mar 29 05:01:06 2026 GMT
Not After : Mar 30 05:01:06 2026 GMT
Subject: CN=f572d426755a75c49a8971d91175b9e05450da24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:89:94:53:6a:c2:9f:73:56:0c:32:a5:9e:
12:d1:58:34:e0:35:b9:f2:db:05:56:aa:69:0d:b0:
77:02:80:0b:27:8d:6c:08:c1:0e:b9:6e:64:5c:7a:
44:40:b7:3a:e6:f2:48:09:ce:21:c4:e8:1b:03:fe:
2c:fe:b3:78:ae:fc:5e:37:3c:ff:e6:81:7e:5b:91:
79:e5:7c:40:aa:38:a8:ad:92:e6:a4:ca:71:82:f9:
3d:07:a1:f0:0e:46:f1:a9:e9:16:57:75:4c:d6:a1:
ae:fb:2e:3b:66:3f:3f:8b:32:ba:1e:aa:da:51:54:
c0:83:32:fd:9c:45:cf:63:ec:34:da:43:f0:03:ac:
09:a7:c9:59:6d:69:7c:ca:f0:bd:fe:ee:cd:43:35:
3e:99:ed:10:d8:15:21:b1:fd:1c:51:12:cd:1e:64:
d0:ea:5c:b9:9f:15:7c:1a:17:c6:1d:db:64:f6:5c:
23:c0:09:1a:49:c0:3a:6e:5d:bc:85:43:86:58:d7:
f7:22:38:ea:7b:60:cb:86:0c:fa:6e:e4:65:49:c1:
a9:1f:72:f5:4b:23:f5:cc:39:b4:e6:c6:92:62:17:
7a:59:32:42:c7:78:07:3a:95:9d:c3:4e:ae:0e:18:
8d:30:33:7d:3b:11:0e:a8:ad:22:cd:da:b3:f5:d3:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:D4:26:75:5A:75:C4:9A:89:71:D9:11:75:B9:E0:54:50:DA:24
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fe:93:da:dd:17:6e:ac:3d:3c:1f:ed:3b:e7:aa:ce:e4:55:
6e:fa:ca:3b:12:19:e6:85:9e:60:a7:1e:1c:fa:b2:1e:0b:4d:
13:a5:e9:74:ad:48:cc:9c:3d:f4:5b:3d:c8:38:82:4f:1b:2e:
dc:97:e5:03:b0:05:1e:d8:9d:ca:7f:cf:be:87:37:7e:e3:43:
67:7f:94:7f:fa:be:3b:fd:b1:56:e5:f8:6a:f6:5e:28:6c:d2:
9a:62:97:05:b9:d4:92:9d:c7:23:4e:f0:f8:84:55:a2:a1:5b:
28:bc:13:79:03:ed:0f:b2:be:84:9c:86:36:68:4e:80:d6:d6:
ad:56:c8:37:a1:65:e1:63:e0:c9:2e:d7:82:f8:fe:b2:cd:1b:
9b:95:1e:bb:0d:fe:d3:d7:2b:6c:c1:37:ef:15:c8:ec:5e:a7:
44:f7:40:38:6a:a0:50:2f:b4:5e:a8:9e:29:73:49:d7:b0:1f:
d2:9e:55:42:1b:81:82:30:65:7d:8a:ff:ba:d4:09:8b:31:06:
03:df:1d:70:97:78:e6:ab:e2:68:62:9b:6b:d7:b3:f4:69:97:
1c:e6:04:3e:1d:b3:b0:32:86:1f:9b:02:ed:d7:17:e4:b4:0d:
1e:88:c1:d1:f6:2b:e5:46:8e:6b:e6:5e:53:15:48:7a:01:4e:
d8:f8:d0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0395jUmWIlYYaNAGLskhugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjYwMzI5MDUwMTA2WhcNMjYwMzMwMDUwMTA2WjAzMTEwLwYDVQQD
EyhmNTcyZDQyNjc1NWE3NWM0OWE4OTcxZDkxMTc1YjllMDU0NTBkYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZCJlFNqwp9zVgwypZ4S0Vg04DW5
8tsFVqppDbB3AoALJ41sCMEOuW5kXHpEQLc65vJICc4hxOgbA/4s/rN4rvxeNzz/
5oF+W5F55XxAqjiorZLmpMpxgvk9B6HwDkbxqekWV3VM1qGu+y47Zj8/izK6Hqra
UVTAgzL9nEXPY+w02kPwA6wJp8lZbWl8yvC9/u7NQzU+me0Q2BUhsf0cURLNHmTQ
6ly5nxV8GhfGHdtk9lwjwAkaScA6bl28hUOGWNf3Ijjqe2DLhgz6buRlScGpH3L1
SyP1zDm05saSYhd6WTJCx3gHOpWdw06uDhiNMDN9OxEOqK0izdqz9dPDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVy1CZ1WnXEmolx2RF1ueBUUNokMB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/6T2t0X
bqw9PB/tO+eqzuRVbvrKOxIZ5oWeYKceHPqyHgtNE6XpdK1IzJw99Fs9yDiCTxsu
3JflA7AFHtidyn/Pvoc3fuNDZ3+Uf/q+O/2xVuX4avZeKGzSmmKXBbnUkp3HI07w
+IRVoqFbKLwTeQPtD7K+hJyGNmhOgNbWrVbIN6Fl4WPgyS7Xgvj+ss0bm5Ueuw3+
09crbME37xXI7F6nRPdAOGqgUC+0XqieKXNJ17Af0p5VQhuBgjBlfYr/utQJizEG
A98dcJd45qviaGKba9ez9GmXHOYEPh2zsDKGH5sC7dcX5LQNHojB0fYr5UaOa+Ze
UxVIegFO2PjQNw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:59 2026 by rpki-client