Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: 5c2i4tLzEnj3xMPE6ESBdSa86jNGVGvAY9uKlQSV8dI=
Subject key identifier: F1:EC:70:26:83:49:F5:6F:EF:8A:5D:D7:AD:DB:F9:03:AD:B3:1C:03
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 019D265ECB87EB1ACC32D3B5B3FDC49AA182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 0B0E
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: QvV+WgmuEr6QRqQ0lQQOk1MPlvE1UXa0XqJ62ukMazE=)
2: Zg9CXZORRCkEDfIdrbdV2Z1djOE.roa (hash: ijvg+VbGDbhkZ0TpavVaie8pzYXStI3SVZx3OuXIsaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cb:87:eb:1a:cc:32:d3:b5:b3:fd:c4:9a:a1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=f1ec70268349f56fef8a5dd7addbf903adb31c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:a8:07:aa:ca:61:a3:c4:29:78:09:9a:35:
76:8e:39:2c:a7:70:23:d6:07:b8:12:e4:cb:a1:6e:
c3:40:1e:54:e9:94:15:b9:55:65:e0:91:e9:b9:79:
7f:22:84:c7:b0:3a:53:6b:e9:bf:e2:ee:08:48:b1:
c5:b6:2b:3f:0e:13:08:b3:8b:37:b6:08:71:29:22:
45:1f:fa:b9:37:dd:d4:b9:2c:58:b4:ef:40:4e:01:
12:a3:b6:f2:43:d2:38:4e:6c:16:a0:ea:72:aa:e3:
4a:26:e7:74:1a:94:4e:46:1c:ec:94:8b:b1:cc:22:
0e:0e:19:60:75:24:4a:d3:33:03:a8:e6:fd:73:fc:
20:1e:68:39:de:34:49:7d:02:7d:c0:a1:25:1b:2c:
f0:ff:00:ca:90:51:f1:7d:7f:22:1d:55:89:d0:9b:
1c:96:7b:bd:7a:70:a3:97:96:89:50:ec:68:c7:56:
69:83:3f:01:a9:eb:d2:c3:a9:80:59:06:4f:ca:51:
81:b7:b7:d8:d6:73:09:87:5e:97:1b:ed:49:95:af:
4e:ed:dd:35:e0:d6:e0:12:50:c0:90:ae:91:b5:22:
c5:31:ec:76:62:ab:b5:04:d1:39:89:e2:e3:9e:b4:
f1:fa:9f:ed:b6:a7:8f:c6:34:e1:05:dd:9d:b3:53:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:70:26:83:49:F5:6F:EF:8A:5D:D7:AD:DB:F9:03:AD:B3:1C:03
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:ba:ed:30:33:f1:7e:8b:a6:40:c4:39:11:61:8a:dd:2b:
62:1e:2f:cc:9c:1e:38:df:95:05:51:93:5c:0a:99:f2:73:87:
e0:9e:e1:ca:9b:06:56:e9:9a:a3:e2:ed:27:db:ae:87:07:b2:
54:b0:2b:9e:ed:56:69:3a:9f:48:aa:00:5c:ac:8b:0d:b5:23:
a2:ab:dc:66:fe:c5:e6:53:85:f8:52:46:1a:6d:10:38:98:19:
a0:fb:77:73:6e:5e:ad:99:c3:e9:f5:39:f1:dd:5e:47:90:3f:
e8:75:56:14:3b:a5:0a:3e:c8:dd:5a:13:14:d1:fe:e8:91:b9:
27:b7:c4:34:73:3c:c6:34:b8:a1:0e:74:3c:62:28:1a:47:9d:
61:91:06:ce:56:8c:4b:2b:b0:3b:ad:a0:80:3b:11:b0:ff:b0:
4d:e7:07:75:a3:61:2b:7f:33:1b:90:ca:5f:ff:8c:f7:1f:84:
d8:c2:38:e6:55:98:6b:4e:8e:54:12:49:33:2d:5b:9f:ab:48:
a1:c6:98:0d:51:46:12:3a:a4:08:60:94:fd:91:9b:fb:87:53:
4b:57:20:ec:cb:c1:f9:fe:41:18:d2:cb:c5:38:fb:de:38:13:
6b:2c:6d:34:81:83:ac:e4:a2:7e:90:39:27:9d:19:26:6f:73:
24:63:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:43 2026 by rpki-client