Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File: Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier: nwO65GEjCUU7sj6MBTcyuSJWiJnB/+Mjppb3b74FRqA=
Subject key identifier: 64:AD:89:75:D4:AD:B8:FA:A3:6F:62:7F:2A:54:98:75:DD:E9:98:C2
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial: 019D265F2C512FF9EEFC307249DF2297BFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number: 010E
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (hash: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc=)
2: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: 215YxyKNnIlaCK7LzKTmROKeuOjhY2RsdjMlEdpKhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2c:51:2f:f9:ee:fc:30:72:49:df:22:97:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=64ad8975d4adb8faa36f627f2a549875dde998c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:b2:09:32:dc:77:ef:cd:81:e0:a2:97:57:
c7:56:42:2b:da:84:f8:50:0f:98:05:1d:90:37:7f:
25:7e:17:d7:f1:91:4c:cc:95:85:b6:90:af:67:dc:
d5:54:9e:b0:2d:39:76:09:c9:af:c1:2d:e4:42:c6:
96:83:69:62:4c:b4:3b:90:0e:a8:8a:42:a9:68:dc:
bd:81:a4:18:54:d3:60:36:e7:96:5a:83:b5:78:87:
f5:25:cc:82:6e:d1:a2:d8:4c:f3:46:bd:43:22:1c:
e0:23:9d:24:01:49:37:d8:aa:b9:9d:14:18:32:4d:
4b:53:11:1b:85:2b:24:cd:c9:34:83:8d:90:6f:24:
9d:b9:6b:f3:d4:af:4d:07:6d:fe:e2:32:b7:62:d3:
95:c8:46:31:a6:b1:7d:54:58:90:e7:a2:d3:cf:c5:
40:f4:e7:69:91:80:ec:b9:d4:e7:83:77:01:d9:aa:
71:ea:28:95:32:29:40:24:ab:96:a6:b0:7a:04:d0:
de:62:b6:e6:8c:7b:73:d2:f2:60:63:f1:24:df:18:
b8:6b:24:b2:c7:0f:99:eb:18:f2:fa:de:b1:f0:3a:
74:c3:5e:e0:1e:b6:ab:73:ff:b3:2d:3a:b0:3d:df:
8e:3a:fd:a2:c7:aa:89:55:9f:37:31:3e:07:8a:5a:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:89:75:D4:AD:B8:FA:A3:6F:62:7F:2A:54:98:75:DD:E9:98:C2
X509v3 Authority Key Identifier:
keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:eb:cf:da:5d:02:1e:75:aa:be:07:98:bd:cb:54:24:23:8c:
00:11:0a:d3:19:f7:2e:78:d0:f3:14:a5:c8:92:59:d6:d2:8b:
ea:2f:bc:4a:50:7b:0c:2f:ad:3c:30:af:2c:6f:f2:fd:99:85:
66:4d:0b:58:74:90:5d:f1:28:8e:6f:ac:15:8e:b8:24:84:c5:
46:1c:c2:b9:35:78:74:42:91:85:0a:52:38:94:20:aa:2c:6b:
d3:f7:93:9d:31:c2:26:61:65:ec:b2:0c:4a:59:5b:58:bb:2b:
da:e6:ab:27:6f:70:28:91:41:ee:42:65:8b:fd:09:c4:0b:6b:
0e:40:12:b8:5a:c3:ff:dc:1a:c5:33:3f:1b:bd:2a:4b:4b:f3:
1e:0f:4d:d3:b6:89:65:53:9f:df:b7:5b:ff:1c:f0:23:9f:bb:
e1:82:f6:0e:21:74:81:7f:5d:7d:26:f6:d9:e2:5c:eb:61:31:
4b:7a:cc:51:58:a5:c4:89:3b:2d:b1:3a:da:cb:57:78:f1:9a:
c0:e4:3d:6d:13:e1:35:fe:42:56:89:08:ec:14:29:ec:26:79:
de:9f:45:1e:09:b3:a3:43:ac:6a:77:84:4d:4c:93:55:5f:44:
23:b5:8f:7a:ad:73:d9:f5:50:cc:db:f3:24:d1:9e:69:53:7d:
0f:27:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:55 2026 by rpki-client