Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: TVR6mlVW2JNVHmZG62vaZKloUIFinFNXh41XtGv7OIA=
Subject key identifier: 91:82:1C:C2:D1:C1:69:46:DA:93:3A:1D:2E:AF:A8:BE:56:13:DD:B9
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019D3909FDEE7C98C89FFDA06C0E61962CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
2: Iy-fgALALz7shq-7VeACuB3oDEw.roa (hash: /ZLR7Dr5uoDlsEeoz+iCL0uuXTI/ziU5PN5IasP3K4Y=)
3: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: NV5ph+R3jy36FSYSt1g+N7j06wGn5FyFZyADGkoyND4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fd:ee:7c:98:c8:9f:fd:a0:6c:0e:61:96:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=91821cc2d1c16946da933a1d2eafa8be5613ddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:81:91:d7:28:0a:4a:86:67:6b:53:e1:79:
53:1e:92:d3:f8:be:3b:3f:1c:f8:e7:eb:8b:4f:1e:
4f:4f:46:27:d2:a8:a6:e8:af:cf:07:78:e0:c3:d9:
aa:76:7b:27:3e:15:5a:7d:d1:79:83:e2:d8:0b:54:
bc:18:5b:02:98:fb:93:c9:76:1e:d2:c5:75:4b:c8:
25:bd:b4:d5:5d:92:f4:3f:be:ad:71:e2:11:b3:e8:
2d:18:71:ea:2d:6f:b9:19:a6:ca:d9:ee:88:a5:34:
a8:bb:65:4d:30:0f:03:3e:bc:1b:76:72:d8:0d:b9:
dc:4c:dc:c0:cd:24:74:e5:c5:f1:e4:a7:58:5c:87:
1e:8c:e6:19:4c:11:46:42:b5:b6:bd:45:00:76:ee:
10:c8:a6:73:10:0d:db:e8:73:21:86:72:a8:b2:20:
d2:bb:94:ee:3a:06:67:66:92:95:ce:9e:27:6e:76:
47:0b:41:96:e6:85:fd:0e:2b:d5:03:cb:1f:39:fb:
53:fb:44:45:bb:a5:7b:5e:75:5c:6f:7c:7d:74:a3:
db:3b:5a:33:a6:86:52:87:c4:17:3c:6e:28:e0:37:
09:03:55:a4:18:45:3a:77:87:b9:73:a7:c0:f3:2c:
57:34:80:a3:a4:0e:fc:11:3d:87:42:f5:3c:ce:35:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:1C:C2:D1:C1:69:46:DA:93:3A:1D:2E:AF:A8:BE:56:13:DD:B9
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:22:f2:c5:75:f2:02:60:7c:a5:4a:76:63:0f:c4:a2:ec:bc:
2a:38:d2:00:31:3b:e8:76:6a:2f:9a:6e:fb:a4:22:2f:c6:eb:
8d:ab:2f:f4:37:e2:bc:1a:e3:4f:69:8d:16:90:4d:44:19:25:
01:2c:65:5a:4a:ad:83:ca:14:bd:19:a9:35:dd:a7:93:fd:e6:
14:14:c3:a8:9c:5a:31:3f:29:07:bc:aa:7e:ec:e5:37:ca:22:
6e:14:e0:67:cd:81:6b:22:e4:b6:3d:f9:d7:15:e1:ec:c7:66:
71:2d:18:28:e6:7a:65:21:8f:fd:47:78:dd:95:3b:6f:5c:34:
0b:b4:74:24:a7:4f:a5:29:dc:c1:42:f7:62:d6:61:07:4f:dd:
4b:7e:5b:c1:2e:97:ac:86:a1:ca:13:ea:58:52:7c:c3:0a:2a:
b7:e2:76:58:6c:4b:e3:e9:68:b3:c0:7c:5c:48:62:44:77:b9:
fe:3d:2b:db:fb:31:cf:6d:f1:1a:89:20:a2:da:6d:d5:57:b7:
66:49:a3:48:e0:00:62:87:3d:d2:6a:da:a9:41:36:03:b9:73:
aa:f6:a9:f8:fa:f4:e7:d6:f7:61:d5:6e:02:73:91:75:a4:16:
2c:44:73:7a:25:e7:9f:f0:47:b2:c1:f3:72:09:1d:0d:17:3b:
52:bd:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:13 2026 by rpki-client