Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: fRsuPf4zxc2WA0CINmqD56xsSrOc1n5m6/PRseJ6QKw=
Subject key identifier: B5:97:4A:C0:DC:94:59:0E:1B:9D:5B:62:36:EA:33:CB:B7:F1:9F:65
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 019D3752DF4D949F604B21020D2CFFB92CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 0816
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: jUPPGHY17ICt+fd0RLbPYaboCAcehJtkh78blSjeAYo=)
2: ZyCMXfbtNuXumIzCS12JtYABWa8.roa (hash: FCS7VDdR2sOQaENYtuEq5+AVcoh+zteoO7fT7vMr+Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:df:4d:94:9f:60:4b:21:02:0d:2c:ff:b9:2c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=b5974ac0dc94590e1b9d5b6236ea33cbb7f19f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:30:83:a6:a1:2c:f0:69:dd:30:ca:5e:b4:
b7:d8:4e:76:25:2f:50:00:c1:71:f7:91:7a:60:e7:
3c:5c:0e:a9:ed:83:d9:c7:f1:35:22:a8:91:fd:59:
1f:aa:9f:a8:58:ee:cf:a3:fd:58:f5:f9:25:5c:db:
2c:1d:f8:29:49:dc:48:d7:50:59:95:48:43:1d:35:
d9:04:34:0a:ba:de:ae:4b:10:07:5f:2f:24:87:96:
d7:39:26:60:d9:e8:97:6f:b8:b6:ed:a6:34:67:fc:
c6:57:b5:9e:0b:c6:8f:3b:75:48:b8:34:ac:67:36:
b1:2e:4f:ba:4f:55:15:a4:0b:20:55:0f:9b:5c:63:
0c:4b:a1:95:c3:ed:b3:fb:b4:9a:f6:a5:06:b9:5a:
b9:d7:33:ad:e6:79:f5:fc:5f:3e:25:8f:05:19:9e:
3d:be:5d:8e:6c:e2:88:c0:d7:5d:14:6b:cd:5f:05:
86:f1:aa:c6:9b:50:2a:96:0d:e7:69:9c:f5:22:19:
6b:74:46:d4:a0:e6:22:c1:4a:8d:3b:30:5b:b2:83:
66:73:f5:59:63:58:3e:48:7f:51:d8:a2:7a:2a:35:
93:2d:24:f9:63:32:8e:ce:8d:34:9d:4a:02:4e:ec:
c1:75:5f:36:a2:db:4d:41:d9:47:96:53:05:45:7c:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:4A:C0:DC:94:59:0E:1B:9D:5B:62:36:EA:33:CB:B7:F1:9F:65
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fb:19:4d:96:0c:55:37:1a:df:e7:4a:ba:f5:48:65:a5:07:
68:c9:d8:0d:4c:5b:23:a6:59:6f:e8:2f:e6:c2:84:e9:62:a4:
86:28:57:5b:5b:af:af:28:a6:ad:d1:48:65:e8:ba:83:72:a0:
56:a6:d7:20:09:93:9a:85:d7:b1:39:9a:42:46:21:81:a3:83:
66:0f:39:8d:95:39:b9:98:ed:8e:38:61:39:c7:21:c5:a2:45:
75:c5:8c:43:b6:83:3e:8d:9c:db:1b:87:86:7d:2d:ac:79:a3:
03:14:25:c8:a5:7b:8d:05:f1:81:38:9a:5a:b2:47:29:96:38:
77:9b:16:d0:16:98:f0:ed:d9:ea:cc:fc:ad:23:56:d7:3d:1c:
48:8e:b1:24:d4:34:65:9e:1a:2c:77:c4:1c:fd:6b:0a:b2:5c:
30:32:6d:1f:b4:18:f5:aa:48:5f:fa:cb:6a:83:72:cc:32:69:
6c:86:73:a0:0f:e9:68:10:68:e4:7d:e2:9c:20:07:a7:9e:3a:
a9:c9:57:40:cf:d9:3d:49:da:3e:ba:fb:cc:50:6b:c8:2f:72:
8d:57:8f:41:82:22:c2:20:cd:c2:92:88:df:b3:03:b3:28:5e:
b5:b8:3d:d8:d5:cf:7e:2d:c7:12:ab:1f:5d:15:1e:d2:f8:bb:
b4:76:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:56 2026 by rpki-client