Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: 8aSzuUdV1RG/WQ0HkysGmIuJWisq/8itKkVHgRnzy4g=
Subject key identifier: A7:00:4C:A0:84:60:54:53:EB:25:EE:AF:B7:C9:A4:E1:71:BB:2F:5E
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 019D284E01514F1B206DBAC04467C942EC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 04:01:33 +0000
Manifest this update: Thu 26 Mar 2026 04:01:33 +0000
Manifest next update: Fri 27 Mar 2026 04:01:33 +0000
Files and hashes: 1: 5zXq-FtbfKVjtSSz3geS2vHCvmY.roa (hash: wO+/2FCBNgWvsvAqT9cT/K3eUtj2DJtruhQHyhf5M3Y=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: LchPT9UJhjnMkYWhgKqacbu+VsOrbPPnmVU/nJAwlbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:01:51:4f:1b:20:6d:ba:c0:44:67:c9:42:ec:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Mar 26 04:01:33 2026 GMT
Not After : Mar 27 04:01:33 2026 GMT
Subject: CN=a7004ca084605453eb25eeafb7c9a4e171bb2f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:a2:11:21:99:ef:59:2c:69:e6:dc:da:3f:
ab:99:da:92:35:47:a6:db:16:92:fc:be:4c:58:41:
7e:6d:5a:0b:d7:09:49:bc:4e:26:b4:f5:f7:f2:ad:
5d:00:28:23:a3:49:79:2c:0e:4c:f9:8d:c5:59:fe:
81:83:59:a8:54:f3:8d:45:a0:91:19:39:77:ef:f0:
4a:9f:44:0e:f8:5b:87:f6:8f:26:4c:2d:e2:c5:c5:
f1:52:a7:3b:72:35:cb:b4:71:f5:03:d4:f8:1e:54:
bc:b1:a2:ea:ba:23:74:06:27:83:0b:bc:c2:1e:08:
ec:4e:7c:6e:48:4e:36:8a:3e:5d:28:43:e8:15:7c:
47:5f:79:c2:d2:db:b2:af:44:17:ee:25:4c:79:ea:
75:4a:26:d4:85:e7:9d:ad:e1:50:b1:1f:b8:81:45:
71:60:9e:bb:b7:8a:06:99:59:d9:66:c9:0e:ce:a1:
5a:2f:de:67:84:a3:0e:27:52:3e:1c:62:a2:05:19:
7e:b6:a9:c6:eb:c0:ca:12:39:26:57:2c:c6:51:84:
ff:f1:40:58:51:eb:c1:95:f8:af:e3:88:c5:fd:cf:
ba:51:f9:71:ab:d4:d7:4e:02:5d:67:da:79:87:47:
4a:4d:6b:9a:fd:fa:7e:52:0f:28:70:f1:8b:36:60:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:4C:A0:84:60:54:53:EB:25:EE:AF:B7:C9:A4:E1:71:BB:2F:5E
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:95:73:23:b9:82:38:2e:6d:f6:51:90:86:88:14:89:38:2c:
05:92:1e:5a:a6:e2:c8:5c:09:46:07:57:42:f2:a4:86:9f:3c:
64:56:50:f1:e4:1f:92:de:4f:19:39:ba:dc:27:09:15:ee:f4:
8c:37:0f:2a:aa:ca:38:f8:6b:0f:c4:69:98:d0:fa:7c:1c:fa:
e6:15:54:2b:70:55:82:b9:a3:da:ae:a3:61:57:e5:e9:63:97:
c9:52:fc:47:4b:a0:29:52:f4:16:1c:89:f5:6e:8a:cb:03:a2:
09:6e:2e:c7:a8:d2:f2:50:41:54:af:ad:34:6c:f5:dc:90:d8:
fe:cb:9c:be:8d:35:03:e1:7e:f4:93:38:4d:71:04:9a:42:dc:
85:23:17:a8:92:85:a3:cf:86:82:45:ac:d1:63:5c:6b:f0:9f:
25:8a:f5:5d:b0:5a:3d:7f:c3:14:f5:d7:2d:6f:e4:74:58:d3:
78:1c:a9:1e:4b:d8:72:ef:52:1f:6f:b0:b3:ff:89:bb:cf:87:
b8:32:07:f0:ca:d9:2f:bb:ea:6c:5e:5c:32:c6:82:3c:39:4f:
a2:e3:fe:6f:65:ee:60:de:b3:88:10:80:6e:dc:86:8b:8c:d4:
78:0e:8c:b7:93:71:29:0b:47:0b:0c:64:ce:e4:0c:08:8b:7d:
74:a7:da:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTgFRTxsgbbrARGfJQuw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx
NWE0ZWIwHhcNMjYwMzI2MDQwMTMzWhcNMjYwMzI3MDQwMTMzWjAzMTEwLwYDVQQD
EyhhNzAwNGNhMDg0NjA1NDUzZWIyNWVlYWZiN2M5YTRlMTcxYmIyZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArviiESGZ71ksaebc2j+rmdqSNUem
2xaS/L5MWEF+bVoL1wlJvE4mtPX38q1dACgjo0l5LA5M+Y3FWf6Bg1moVPONRaCR
GTl37/BKn0QO+FuH9o8mTC3ixcXxUqc7cjXLtHH1A9T4HlS8saLquiN0BieDC7zC
HgjsTnxuSE42ij5dKEPoFXxHX3nC0tuyr0QX7iVMeep1SibUheedreFQsR+4gUVx
YJ67t4oGmVnZZskOzqFaL95nhKMOJ1I+HGKiBRl+tqnG68DKEjkmVyzGUYT/8UBY
UevBlfiv44jF/c+6Uflxq9TXTgJdZ9p5h0dKTWua/fp+Ug8ocPGLNmABrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcATKCEYFRT6yXur7fJpOFxuy9eMB8GA1UdIwQY
MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt
OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx
LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpVzI7mC
OC5t9lGQhogUiTgsBZIeWqbiyFwJRgdXQvKkhp88ZFZQ8eQfkt5PGTm63CcJFe70
jDcPKqrKOPhrD8RpmND6fBz65hVUK3BVgrmj2q6jYVfl6WOXyVL8R0ugKVL0FhyJ
9W6KywOiCW4ux6jS8lBBVK+tNGz13JDY/sucvo01A+F+9JM4TXEEmkLchSMXqJKF
o8+GgkWs0WNca/CfJYr1XbBaPX/DFPXXLW/kdFjTeBypHkvYcu9SH2+ws/+Ju8+H
uDIH8MrZL7vqbF5cMsaCPDlPouP+b2XuYN6ziBCAbtyGi4zUeA6Mt5NxKQtHCwxk
zuQMCIt9dKfajQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:14 2026 by rpki-client