Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: VxEONsSS7zmZZ6UCHOF6PiE5hZghflC84DmSEmm774Y=
Subject key identifier: 92:E0:13:87:6B:BC:5F:53:E8:C6:02:A1:FB:34:A1:C0:E1:C8:39:1C
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 019D26CCBF9BDFDA9CAE24B105F5253025BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0DC2
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: efh4js39DAepdcGf-XgcFtA9I2A.roa (hash: Wr//dqxMLdlf0wzZxtHqzTDoNgxS29rM1ry+hkHHkYc=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: gG1pKSRj3HsR2thYPbz00SQZ/8l0AJn4K728FIIkoEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bf:9b:df:da:9c:ae:24:b1:05:f5:25:30:25:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=92e013876bbc5f53e8c602a1fb34a1c0e1c8391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:ec:1a:07:27:6b:3f:af:4c:e9:12:9c:ef:
77:73:98:65:42:bc:b5:b3:c8:9b:0f:47:ff:30:b5:
58:ca:aa:e4:83:7f:9a:ea:d7:36:72:1a:fb:2a:b2:
20:49:66:90:33:32:56:32:7c:bf:b4:62:f6:9c:81:
2e:95:09:1d:b0:17:a6:2a:67:0d:f6:95:12:a9:a9:
44:01:66:09:17:f9:d8:11:fa:55:79:d7:26:e9:bc:
8a:1d:04:e2:11:c3:9e:3e:b9:6e:58:42:b9:b3:4d:
1f:b0:9d:f3:ba:78:29:2d:3a:29:6c:de:c9:6c:79:
aa:07:b4:e0:1a:59:5f:87:84:3a:01:7e:db:b9:e9:
c7:d5:da:48:81:cc:5c:3c:74:31:2b:e7:5b:91:7a:
c6:c5:91:61:9b:60:78:f6:13:a1:31:93:9b:a9:91:
0c:0e:2f:c5:59:05:5f:49:15:c1:b6:e8:5a:44:df:
a7:0a:36:43:39:f8:0e:cd:9b:a8:94:45:4d:e7:38:
44:71:8c:07:2e:dc:cf:7d:42:7d:80:2b:62:31:8c:
7a:8f:8b:23:3b:a4:0b:f0:32:71:3d:a0:d7:91:4b:
9c:6c:8b:6a:c9:88:3a:b5:45:28:90:6f:26:38:5d:
aa:62:d8:2d:60:f7:a0:63:3c:79:22:c5:e2:58:f6:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:13:87:6B:BC:5F:53:E8:C6:02:A1:FB:34:A1:C0:E1:C8:39:1C
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:06:ad:3f:67:20:3f:f3:34:9a:53:ff:3b:50:c0:57:fc:
b8:d5:87:47:49:10:f9:cc:f7:45:e3:c7:8d:60:23:3e:44:81:
61:be:b9:b2:cd:fc:84:c9:dd:53:d1:f2:0c:03:e8:66:03:35:
78:15:08:db:51:86:a8:8a:c6:5d:80:43:ff:f8:dd:68:be:e3:
86:f5:1e:dd:91:a0:1e:9f:f5:30:27:f5:3d:27:bb:74:c0:99:
a6:7f:f3:4d:28:46:df:38:2a:ed:44:7f:a5:ce:d3:2d:74:d9:
4e:05:77:da:9e:35:a5:84:1f:54:39:7e:58:be:b8:af:49:62:
cd:f3:3b:fd:7d:1a:1f:c4:0f:71:01:3f:86:42:64:05:46:8c:
63:21:7a:ee:eb:86:48:d4:82:2a:34:6b:c6:30:a0:bb:08:ba:
1c:7d:ff:79:6d:3a:24:80:79:52:f5:be:9b:11:6f:b0:db:72:
86:35:94:8b:5a:84:10:07:d7:cb:20:d4:43:5a:13:35:9b:7c:
9d:3f:ac:29:e1:a6:52:db:29:3b:48:83:71:2a:18:f2:a9:16:
9a:ae:13:71:62:c3:ac:d0:35:ee:7c:0b:83:6d:3f:5d:ce:75:
5e:f7:36:ab:85:68:23:63:f0:92:38:f9:0b:d3:9a:03:cb:3c:
03:ba:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:44 2026 by rpki-client