Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: hVYn68EXXtNR4jAakEbPN1CoXAItR9VkXrBnF09P0MY=
Subject key identifier: 84:4F:EF:38:31:D2:E9:9A:9D:50:5F:65:3C:13:72:7D:1B:A3:B2:95
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 019D2A04A137A2989CB20857DA621F6EA629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 0702
Signing time: Thu 26 Mar 2026 12:00:39 +0000
Manifest this update: Thu 26 Mar 2026 12:00:39 +0000
Manifest next update: Fri 27 Mar 2026 12:00:39 +0000
Files and hashes: 1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: T2FffwSuIElGfqJvqY7RTIx8ynMfxZDoqqz2DmAlnEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a1:37:a2:98:9c:b2:08:57:da:62:1f:6e:a6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Mar 26 12:00:39 2026 GMT
Not After : Mar 27 12:00:39 2026 GMT
Subject: CN=844fef3831d2e99a9d505f653c13727d1ba3b295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5a:6e:d0:98:5f:c3:c4:ea:6c:0d:89:aa:a0:
24:e7:af:ce:44:37:45:0b:df:d2:2f:e7:e8:93:1e:
2e:57:47:f6:d8:09:ff:a5:66:d7:1c:d3:68:89:80:
dc:c5:f5:2c:ad:68:d0:cb:9b:31:4c:cd:55:66:cd:
d3:d6:e8:6a:40:cd:53:bb:58:53:e4:41:6f:d6:79:
e0:f2:17:bf:14:30:ef:85:49:01:f4:f3:33:3f:ef:
bd:5c:bb:a0:4f:7c:da:58:c0:88:70:47:84:4c:02:
4a:25:11:49:31:9b:b4:47:d4:4e:fe:15:51:73:9c:
e3:72:21:25:9c:7d:7c:7d:56:6f:8d:cc:44:7e:37:
1d:53:6f:4a:dd:73:69:c1:1c:0d:9b:40:29:02:5f:
c0:3a:d2:5e:73:ec:e6:0f:28:7f:be:c8:65:29:dd:
1a:fd:43:6e:03:b9:79:21:7c:94:09:55:cc:51:4b:
bc:ea:35:c1:d7:5a:bd:4b:49:56:b6:19:82:9c:11:
fc:43:e3:30:1b:47:39:8c:42:4e:7d:bd:32:9e:77:
dc:4b:cf:d8:6d:43:23:98:52:e0:94:a6:38:14:41:
b9:b4:7b:4d:9d:c4:01:e6:1b:70:06:99:04:6e:8f:
66:74:fb:8b:7f:ea:e9:08:98:a7:7b:9e:d2:85:89:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:EF:38:31:D2:E9:9A:9D:50:5F:65:3C:13:72:7D:1B:A3:B2:95
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2a:b2:9e:c4:0f:2c:b2:d4:81:82:6c:3e:6a:cd:dd:6c:d1:
a6:a2:47:ea:5f:6f:59:19:b4:7d:b5:01:5c:41:d1:16:1d:a8:
5c:1b:aa:2b:d2:2e:9d:ad:c0:fd:17:f2:42:e1:c7:90:65:23:
07:40:78:77:40:ba:b0:c1:41:16:ef:a8:eb:82:98:a8:ea:12:
71:11:ae:76:5c:2a:dc:4c:71:94:f4:20:80:78:39:de:7a:9b:
eb:8c:4c:4d:40:f6:90:89:6b:53:91:ac:ed:7d:81:ce:a2:3a:
04:97:ae:5a:91:dc:ac:c3:3d:85:df:ec:d4:02:54:5f:90:97:
cb:2e:a0:12:27:3e:34:6c:ee:d5:66:2f:56:5b:49:0f:3f:6f:
87:c6:83:ca:b3:57:6b:ce:75:c8:86:2a:e3:4b:c5:ca:c9:10:
0e:c6:b4:4a:e0:1a:37:dd:aa:f3:9e:c4:1d:dc:0e:51:ad:a3:
dc:6a:79:c8:6f:e1:b6:73:1d:92:9f:ac:ec:23:a8:77:3a:d9:
a3:dd:e1:85:c0:2f:e0:32:18:ff:dd:0f:f1:42:af:9a:99:f1:
3f:b2:90:92:f9:2b:63:46:ef:75:00:6c:74:ab:9e:02:5d:9e:
3c:b5:92:43:8f:bd:be:45:9e:4e:30:2d:44:68:69:af:66:52:
55:e5:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:02 2026 by rpki-client