Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: zMQavTPmkyHgPvr9Wa4HnD5xLTu4qWABSuyu56DxUK8=
Subject key identifier: F3:76:77:06:85:79:D8:E8:9A:3F:E1:EB:14:35:27:8F:98:F0:E5:3A
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019CE523BC06B324C1AD3965E3166E7C4C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 0237
Signing time: Fri 13 Mar 2026 03:00:50 +0000
Manifest this update: Fri 13 Mar 2026 03:00:50 +0000
Manifest next update: Sat 14 Mar 2026 03:00:50 +0000
Files and hashes: 1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: 9+JVCzTFp5zz6XSWop2jHgbWrl3RLxlCIPGvzfw15Tg=)
4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:bc:06:b3:24:c1:ad:39:65:e3:16:6e:7c:4c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Mar 13 03:00:50 2026 GMT
Not After : Mar 14 03:00:50 2026 GMT
Subject: CN=f37677068579d8e89a3fe1eb1435278f98f0e53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:58:9a:d9:67:ad:01:64:3a:4f:58:24:de:
63:75:1a:c5:57:98:de:4c:83:61:b1:51:47:f0:3e:
f5:a9:75:0b:de:9d:63:66:e4:f1:7f:61:4e:3f:34:
dd:b3:eb:35:20:ff:61:cb:c3:a5:68:34:cc:aa:41:
94:50:87:4d:ea:d7:fe:11:82:77:68:7f:d0:a7:2c:
df:70:cc:02:ce:62:af:2f:e0:b0:01:9a:42:3b:b3:
0d:e6:7c:c5:cc:08:d6:f1:ef:de:53:90:ec:c3:53:
c6:47:60:b3:91:81:65:6e:2c:a3:03:67:f4:73:fa:
78:36:e6:7f:24:e6:ba:82:35:63:a9:97:60:fa:26:
04:c9:37:be:63:0f:43:03:46:ab:d8:4f:74:8d:b3:
69:a6:d6:90:32:76:f6:9a:11:06:16:e2:26:95:2d:
b9:ad:7f:bd:f8:00:87:18:88:80:d1:d8:e6:49:89:
b5:ff:c7:74:b1:8b:e7:1c:a2:f4:01:98:26:07:69:
d0:04:a4:a0:ef:e9:71:35:5b:e0:0c:ce:88:16:bb:
54:44:d8:dd:fa:db:80:6b:87:50:7f:13:62:83:f1:
67:d8:e0:36:e4:e1:d0:62:7b:88:6c:6b:2f:a0:2c:
29:a3:72:23:51:ff:0f:e7:88:e7:18:89:78:ee:bc:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:77:06:85:79:D8:E8:9A:3F:E1:EB:14:35:27:8F:98:F0:E5:3A
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c6:a2:fb:ab:45:b7:ca:32:7c:18:46:c5:d0:be:64:66:74:
a9:3c:8c:00:91:0d:77:36:37:b0:be:fe:a5:07:3c:c2:f4:bf:
01:0b:c0:b1:bf:8f:f0:fd:6c:d5:38:da:aa:6a:6a:d2:16:9c:
91:33:54:44:11:50:41:54:f8:d8:cd:63:4f:92:c0:33:4f:13:
0b:8f:db:90:d2:91:1c:c5:ad:2b:95:ad:ef:b1:0a:ee:37:4d:
96:22:ed:f6:3c:49:b0:2f:7c:ee:df:48:15:04:8b:5f:1c:13:
a4:42:94:83:97:9c:b7:46:13:89:54:f5:82:59:60:39:93:a0:
c1:35:b0:fc:66:39:e2:1f:e0:0c:b9:49:17:b1:75:df:21:f6:
9d:43:41:21:7b:a4:80:b8:ea:cb:9a:12:4e:48:59:e8:d0:a9:
ad:18:a9:fb:93:df:88:42:49:5f:cd:8b:15:73:28:a6:13:8a:
ff:2b:6d:f9:82:fa:8b:df:bd:39:dd:a6:e3:bf:4c:03:3f:e7:
0c:19:41:1a:df:5b:d5:55:d9:43:42:10:83:c3:0b:1b:dd:af:
ed:3f:8d:77:0a:b8:54:c0:5a:43:c9:28:d1:16:29:1a:30:bc:
bb:39:bc:c8:dc:20:77:b0:4d:3b:ef:25:aa:9f:82:66:33:33:
39:3e:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:29:46 2026 by rpki-client