Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
File: lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft (raw, json)
Hash identifier: LKJs3DlGmswKBD9xrNhjDqF9eEpvj8HHGsWcZtJeiCY=
Subject key identifier: D0:59:97:45:2D:4B:B6:D9:EE:FB:19:DB:77:D5:20:BF:44:CA:56:10
Authority key identifier: 96:B8:CA:94:90:BA:66:7D:EF:56:BA:C1:79:15:36:5B:4E:86:FB:91
Certificate issuer: /CN=96b8ca9490ba667def56bac17915365b4e86fb91
Certificate serial: 019D322C14241EDD41B3A13C534B68F62EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
Manifest number: 2F
Signing time: Sat 28 Mar 2026 02:00:42 +0000
Manifest this update: Sat 28 Mar 2026 02:00:42 +0000
Manifest next update: Sun 29 Mar 2026 02:00:42 +0000
Files and hashes: 1: FF4TfaXEfQnUn4NVjK5tcE5No1I.roa (hash: Xkl+Zf8Igvlgx9OzHID1XncnraaTP8CjQg0pZdxD9JU=)
2: lrjKlJC6Zn3vVrrBeRU2W06G-5E.crl (hash: z/TsleFwI6YnLByvWFgDY5Z/6N24Ih/qdOcyANZjPXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:14:24:1e:dd:41:b3:a1:3c:53:4b:68:f6:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8ca9490ba667def56bac17915365b4e86fb91
Validity
Not Before: Mar 28 02:00:42 2026 GMT
Not After : Mar 29 02:00:42 2026 GMT
Subject: CN=d05997452d4bb6d9eefb19db77d520bf44ca5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:5a:ef:53:08:26:d7:7b:52:ab:b7:5d:22:
fa:4c:71:13:cf:ca:47:04:bb:a5:31:2f:82:bd:76:
32:8d:53:13:bd:23:7e:0b:f4:5b:ac:cc:3d:ef:e6:
fd:ea:5e:30:29:89:9a:74:a2:fe:79:a3:16:df:67:
ee:61:80:ea:5f:8b:a5:fe:a3:f1:1d:33:a9:87:ac:
7e:35:c4:e2:64:66:53:77:46:65:0b:6e:7f:3d:e5:
cc:7d:a5:88:f6:ee:ef:89:58:4b:0f:fc:9d:f6:b2:
d0:9d:29:33:39:2d:c6:db:eb:5a:0f:27:4d:f7:98:
36:66:9c:22:d3:28:0f:4f:ff:a9:e1:cf:c1:1b:ad:
4f:f1:44:97:7c:c5:59:eb:61:2f:1f:2c:78:81:1b:
5d:bc:c6:37:b9:45:d6:93:fa:7e:d5:bd:df:51:37:
67:41:1b:04:65:1c:87:dc:04:0c:ee:49:b3:4b:08:
f1:de:22:7a:c2:66:9b:82:c7:7c:12:0c:3b:61:ad:
1b:0c:46:68:f4:c0:a5:8c:10:e1:ed:8b:9c:6c:53:
b0:47:ba:76:e6:d4:16:79:b4:14:21:7b:ca:9f:66:
8b:7e:f3:0e:b8:45:b8:27:08:e6:5e:9a:59:c6:6c:
0c:32:ff:c8:0d:fd:5d:fc:a9:66:0b:13:36:97:68:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:97:45:2D:4B:B6:D9:EE:FB:19:DB:77:D5:20:BF:44:CA:56:10
X509v3 Authority Key Identifier:
keyid:96:B8:CA:94:90:BA:66:7D:EF:56:BA:C1:79:15:36:5B:4E:86:FB:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrjKlJC6Zn3vVrrBeRU2W06G-5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/331333-9e8c-49e8-97da-5efb498da391/1/lrjKlJC6Zn3vVrrBeRU2W06G-5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:48:7f:9b:f4:b4:e3:0d:ac:c0:6a:01:17:0d:c1:89:0e:48:
fd:c1:1f:9f:f2:98:c1:20:ad:5f:0b:4a:b1:99:48:a2:b3:14:
eb:6d:09:ec:1a:39:52:07:27:bf:e8:39:d8:79:5b:54:5d:92:
29:9d:34:27:a8:25:f6:da:14:c2:a7:26:a0:7a:0b:77:1a:02:
a9:bc:a7:ce:74:3e:92:5c:85:5b:aa:b8:e1:ed:2b:35:9d:f0:
80:f0:24:8b:a9:13:9b:c8:ba:26:45:90:05:8a:50:5a:ea:dd:
dd:de:6a:99:aa:7a:7f:5c:36:21:90:39:2c:20:5b:42:53:22:
05:31:e5:44:e5:ce:97:ff:3b:e0:3b:d3:be:5e:5a:ff:95:9a:
1e:92:cf:d4:f4:2c:41:5c:e7:ff:b9:f1:65:e2:63:5a:8a:b3:
db:c8:76:95:af:b7:42:61:ff:b8:2b:87:95:df:a4:f9:61:09:
65:48:14:c4:e9:31:90:f3:fc:01:95:d8:94:0d:20:53:b8:f2:
72:69:ac:98:0f:af:9e:8b:f7:89:b1:1c:80:ee:0f:59:80:98:
c1:d6:6e:83:72:2a:18:d9:72:33:2f:c8:3e:d2:b2:a1:61:a9:
9f:95:f2:c5:33:6d:35:6c:45:42:0b:bb:12:8a:70:bc:d9:bb:
46:96:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:37 2026 by rpki-client