Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: VA7oYbEojGZ4c7PHj2g1otLAoLM0+F4PqVHPRXvRvbE=
Subject key identifier: 99:44:B5:08:D9:24:53:CF:0C:91:CC:10:7D:59:7B:E8:80:70:E2:24
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 019D394117E52D5B196E563E99039639D951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: ixwC7xgaWOiHVw2tAVvhNH0PZS9u900X2evIXbHMu68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:17:e5:2d:5b:19:6e:56:3e:99:03:96:39:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=9944b508d92453cf0c91cc107d597be88070e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:da:1d:2d:10:9b:53:b8:ee:c7:3e:00:a5:
21:ad:cb:a1:e3:c4:6c:57:9c:08:2f:a4:1a:3a:33:
1b:5f:e3:97:8c:ff:e9:a3:78:8c:ed:34:4a:78:d3:
0b:dd:3f:97:a8:31:59:a9:f3:2f:cb:71:9a:0a:81:
48:cd:9d:bc:b2:f7:d7:cd:5c:ae:88:f6:d9:93:0f:
73:11:8a:bc:9d:bc:93:45:7a:b5:a4:71:c0:08:24:
15:23:2f:30:24:b8:7f:a8:59:3c:07:f6:5a:c6:ee:
f7:c2:de:24:6c:40:56:c1:9a:4d:a7:c1:c7:62:cf:
0c:74:8d:3d:34:55:e7:dd:85:e5:d4:a0:bf:c5:e2:
dd:c9:52:35:30:16:b1:f6:f1:32:96:3c:0b:78:4b:
de:ad:e2:d2:01:24:b3:2d:9c:8c:03:78:ac:40:45:
57:cf:ee:cd:1b:01:98:64:a8:ce:e9:85:50:5f:c4:
32:28:25:e2:8e:ce:78:d3:01:fa:b1:9a:bf:c3:dd:
fc:e2:aa:53:95:bf:91:5d:85:65:97:a2:ae:4a:2b:
9d:43:f5:81:67:be:ec:b7:c7:66:4c:d6:6b:ee:fe:
6a:2e:b3:bb:9b:87:fb:46:36:b3:7d:44:08:34:10:
d2:ea:d1:34:86:cd:91:63:ff:be:af:48:2e:57:f0:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:B5:08:D9:24:53:CF:0C:91:CC:10:7D:59:7B:E8:80:70:E2:24
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:09:a3:18:0a:4c:0f:29:00:ab:fd:cb:d0:6a:2c:6c:7f:71:
75:23:d7:6b:de:35:43:ca:e3:62:d3:4f:4b:2e:d1:12:68:99:
ae:d1:50:2e:e3:23:2e:1e:11:3c:ab:51:76:a1:de:e8:b9:3f:
f1:9b:bd:52:8c:58:d0:7d:a2:83:69:3b:b3:f8:48:16:df:7a:
54:21:d5:9c:80:bb:a2:7a:56:21:c6:a8:e9:68:5d:ec:37:86:
22:eb:b7:6b:fd:05:f1:2c:0f:3b:d8:d1:b1:81:b5:30:21:80:
60:3b:88:1b:49:5f:ac:fd:d1:e2:41:70:f9:3b:3c:f8:32:b5:
44:2f:98:26:94:40:7e:7b:0f:1f:62:60:f5:89:98:92:bd:97:
fb:d1:d9:9b:fa:c6:57:90:9c:01:40:b0:b4:ef:ac:41:6c:b8:
86:5f:51:d3:2e:3a:a0:4a:8b:23:8e:bc:a7:4b:c3:2c:a0:bc:
8c:dd:74:0e:60:90:a7:17:20:72:8a:0c:5d:29:5e:2f:ef:47:
1a:6a:ab:25:ba:5c:42:7c:6e:16:9d:27:07:7f:27:87:aa:fa:
4b:9c:aa:dc:90:d0:2a:f7:80:9c:2b:ff:a5:19:03:e0:73:38:
5f:aa:99:60:7c:10:03:de:40:0a:7a:ec:0a:45:ac:bc:87:dd:
e5:54:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:45 2026 by rpki-client