Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
File: lajACQMBmVVkqiE4tDA4nviM13s.mft (raw, json)
Hash identifier: BioGyPXJ2lWG1JmAJ2TOMZqkxFumbBe8GaRPH/GlXzM=
Subject key identifier: F1:8C:B9:F7:E3:5B:18:BA:0D:C6:08:DB:93:06:20:B3:85:4E:E1:3F
Authority key identifier: 95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B
Certificate issuer: /CN=95a8c0090301995564aa2138b430389ef88cd77b
Certificate serial: 019D28BB716195DB3048C6AC521217E06A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
Manifest number: 0157
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: lajACQMBmVVkqiE4tDA4nviM13s.crl (hash: Y4tTczzRlXV/A0apVFrGzSCQmH4EhDSAOb49PUOhPpM=)
2: t8a-QnR86-kpB7NDXscxwrUfubA.roa (hash: urj77O5mIDu7OcW/OyhkE0pGwVVEOXwa/ya3893rN/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:71:61:95:db:30:48:c6:ac:52:12:17:e0:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a8c0090301995564aa2138b430389ef88cd77b
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=f18cb9f7e35b18ba0dc608db930620b3854ee13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:1f:99:1b:bf:7c:29:11:1c:be:8e:5c:6f:
f5:91:7a:8c:f2:9d:80:05:3d:35:2b:9a:ca:7c:5e:
b1:41:64:7c:7c:c7:90:c3:ca:d8:85:23:5b:45:d8:
16:43:af:a3:77:b5:33:90:0d:83:43:d6:09:54:bc:
2c:7f:46:da:44:5c:c2:47:de:3d:c3:9e:90:91:da:
46:da:d4:1e:b4:80:39:eb:ac:96:7d:8e:ae:1b:95:
b8:a5:d4:55:33:44:5b:34:e5:0d:e0:37:73:68:c8:
db:66:65:53:bf:2b:d2:89:01:3a:c2:bd:9e:8c:d0:
51:c4:39:9d:b8:45:db:eb:51:a7:b7:59:c3:a2:35:
a3:fe:5a:da:e4:ac:ba:a8:2a:a0:a3:67:64:b1:fd:
40:c4:7d:6b:fe:bd:52:3d:61:95:39:21:5c:8d:78:
15:bf:d6:cf:59:cf:d6:b1:dd:cf:3c:a3:0f:60:78:
04:5d:1c:45:50:05:74:32:38:f9:49:95:4e:66:14:
db:06:6f:ef:c0:ce:58:11:a5:ff:3a:af:6c:31:07:
c7:c6:fc:e7:4e:79:d2:54:6f:87:78:6d:f9:13:30:
bf:d1:a5:ac:0c:a7:ed:18:80:46:18:f8:4d:ec:0e:
56:df:67:49:e3:57:93:87:78:ed:05:83:56:a9:44:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:B9:F7:E3:5B:18:BA:0D:C6:08:DB:93:06:20:B3:85:4E:E1:3F
X509v3 Authority Key Identifier:
keyid:95:A8:C0:09:03:01:99:55:64:AA:21:38:B4:30:38:9E:F8:8C:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lajACQMBmVVkqiE4tDA4nviM13s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9cae10-1613-4b9e-bba4-24d42a151c0a/1/lajACQMBmVVkqiE4tDA4nviM13s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e6:a5:b7:d8:76:36:aa:53:6b:10:58:99:62:3a:c7:8f:b1:
25:6c:6e:41:34:da:95:27:49:05:a0:4c:9c:61:d5:27:5e:92:
46:42:9f:32:41:8f:f9:c1:7e:38:ba:6b:cd:3a:19:e4:ae:97:
2c:0e:5d:e3:fa:eb:e9:0a:bd:2f:a3:44:ae:8e:ed:8c:7e:73:
63:87:ad:49:3a:91:b1:3c:6d:86:b0:22:4b:0a:ee:e6:86:ab:
7f:5c:b3:90:e6:6c:fc:b3:c4:7d:56:c3:4c:34:9f:13:1b:b9:
b6:a0:b5:0a:c2:ca:fa:b1:f3:84:7a:92:c3:dc:64:d3:75:00:
00:ab:2e:d9:c5:5b:8e:5f:ed:30:03:68:2f:aa:83:d3:7c:09:
2c:5f:39:e9:7c:8b:f5:96:59:71:66:5c:28:4f:64:8e:dc:d1:
de:06:dc:52:12:b0:c2:91:3d:d8:81:9c:f2:41:98:60:30:a9:
7c:02:a3:e6:56:cd:4a:6f:ea:cd:50:50:fb:09:43:90:ad:93:
20:3b:c9:d2:77:34:3e:b6:9e:20:c5:67:63:de:71:6b:07:31:
c4:e7:80:42:b2:6e:1d:5f:a1:34:ba:31:fc:46:d1:ba:07:8b:
76:e5:6d:fe:10:e9:54:65:fc:c3:76:02:91:84:ba:8b:45:6b:
c5:e6:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:37 2026 by rpki-client