Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
File: lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json)
Hash identifier: 3iIk4seBNR9/yrGuMKUu6RkH2uN2bT5/opnrHr5xhgo=
Subject key identifier: B3:BB:4E:5A:DE:9D:16:D3:3E:7F:75:21:FA:94:97:DF:CA:21:5D:1F
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial: 019D37F755249BBB687D550102C5DD668543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
Manifest number: 17E6
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: kdz9i5UH/DWBZ6Vj+A1zP9tV4Fp1TUdVOTLs2uZnA3I=)
2: lRB94ldr7rgqeGjPRMI9ABoba14.roa (hash: SLe56IHD80WuKPH4ey2PGtoGoV+VHvwhtrqQxiN+bUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:55:24:9b:bb:68:7d:55:01:02:c5:dd:66:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=b3bb4e5ade9d16d33e7f7521fa9497dfca215d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:3b:df:55:ae:65:4f:6a:0f:d3:39:c8:dc:
85:52:93:25:de:fa:94:5f:f3:ce:3f:07:19:29:29:
4e:51:3d:67:37:49:25:0e:1f:97:ad:0b:3c:6f:1b:
af:8a:3b:54:ee:c8:59:da:db:54:82:73:41:48:26:
24:da:94:33:b6:bb:e5:20:ed:5e:20:f6:8f:ef:dd:
32:c1:cc:dd:f3:49:11:ca:e6:68:b8:9f:1e:aa:f0:
f1:7a:1e:e9:c1:80:2e:8f:01:17:87:59:39:12:80:
99:a5:62:45:76:57:2a:03:b9:e1:9d:5c:29:8e:a7:
7c:5a:ad:68:79:25:8b:28:c2:5a:36:6c:b3:c4:f0:
e2:00:17:8b:86:d8:4a:dc:29:08:a8:9a:aa:d8:95:
99:60:5d:7c:a8:a3:5f:13:08:25:32:81:fa:ef:e1:
aa:21:5c:42:2e:9e:41:e4:bf:ad:7d:e1:c1:57:99:
b3:0f:2e:77:b5:a6:a5:77:dc:fc:85:e6:38:ab:9e:
24:7f:38:c9:d3:ea:d0:b2:2d:f6:06:fd:f7:1e:49:
ab:8f:c1:2b:88:6a:b7:e4:82:31:29:fb:7f:b1:00:
b7:db:07:ee:c9:40:7d:34:e0:7d:f0:ff:c0:2e:66:
8b:9c:d7:aa:af:54:22:be:af:23:47:fd:4a:ae:cd:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:4E:5A:DE:9D:16:D3:3E:7F:75:21:FA:94:97:DF:CA:21:5D:1F
X509v3 Authority Key Identifier:
keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:69:c2:1e:31:bb:e6:a2:47:e6:ef:18:81:43:95:7c:8b:37:
fb:e3:83:0d:51:74:0c:f0:61:6f:d4:7c:72:46:ad:35:15:e5:
12:27:50:ce:f1:81:44:da:32:28:c1:47:71:5d:fc:4e:d6:36:
d6:1a:2e:c0:d9:dd:bb:bf:b1:3e:65:5c:06:35:19:78:69:7b:
74:d8:09:64:6b:ae:c3:70:66:8a:9d:65:c0:40:16:95:9e:ab:
9b:e6:82:c3:7a:53:9a:fe:91:d3:cc:ac:79:8c:78:a5:d2:d4:
74:be:5a:f2:e0:88:19:91:e5:22:ba:53:63:e8:58:03:e6:8f:
53:78:00:86:19:7a:c9:aa:4b:fd:c8:7d:25:ed:42:11:2a:80:
be:2c:4e:b9:70:62:38:16:5a:7d:8c:ce:cd:49:36:67:c3:c3:
e1:87:36:c5:44:57:76:2b:2b:f4:ee:40:88:ea:a4:3d:70:af:
6f:0a:8d:c0:87:89:a4:01:e4:56:c3:e5:7a:83:2c:d3:f1:da:
ab:b7:ff:0c:40:e8:5d:22:71:2b:2f:b7:2b:77:29:99:38:1d:
08:e2:79:64:a1:05:5b:10:0a:85:3f:7f:91:eb:b7:ea:15:cf:
b3:e0:27:85:05:4a:c4:cb:2e:6f:55:1f:25:8b:fd:48:36:a3:
dc:22:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:19 2026 by rpki-client