Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier: sFVSw7Hh45CpnDmPMT4b6Q4QanMkDSKATmH9Mietlnk=
Subject key identifier: 0C:5A:26:9E:A1:6C:87:FC:FE:E6:E6:D7:4C:27:F3:58:86:2A:4C:D6
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 019D273B164C3210F4F3874EE3326C815A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number: 15D1
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: doy0SIHDXddu2B6C7nL5LjWLg11SvAwql6/xWZO0SF8=)
2: prXJxfNGOfhBAafrZxzXejtK89Q.roa (hash: ODutQ0k0mib3bpTTiK76gkwrQKBzBwaL/WseoM5mqrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:16:4c:32:10:f4:f3:87:4e:e3:32:6c:81:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=0c5a269ea16c87fcfee6e6d74c27f358862a4cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:1a:22:a1:66:dc:dd:a5:f6:17:0a:9d:0b:
8b:7f:84:ea:51:6b:a1:be:b2:a9:bd:31:26:54:b5:
49:27:e8:ce:c8:46:b3:14:c9:f0:7e:0f:ed:c0:2a:
2f:52:1e:9b:f2:6d:42:ab:9e:93:13:f4:46:98:ff:
3b:aa:1b:99:ba:4f:dc:49:d6:61:87:2e:cf:54:20:
c1:62:23:1a:67:e9:da:f9:ba:8e:54:bd:28:c8:67:
a1:7c:38:9d:89:ab:77:c3:33:67:33:3f:1b:e0:66:
34:ca:c0:6d:66:06:de:e4:3c:ec:02:f6:45:e1:4f:
6f:9b:79:1e:f5:3c:62:5a:6d:8c:69:31:fa:21:75:
b8:f0:fd:7c:98:ef:d5:ec:77:07:c3:e9:9f:b3:92:
ec:3d:38:d7:a4:f2:00:4d:6b:09:5b:7f:ee:6b:b7:
e8:f8:91:df:c7:c7:17:d1:ad:9a:02:3d:95:8f:b8:
23:01:24:82:88:f7:d2:76:cb:05:33:2b:55:b0:09:
91:d0:09:d4:73:d1:43:26:75:ce:f7:e4:17:7c:2e:
dd:f9:42:24:ec:27:f0:21:dd:25:47:e3:12:8b:29:
d1:7e:cd:aa:fa:c9:94:ed:aa:e4:e1:dc:58:42:0a:
0b:40:35:6b:f7:fd:42:b9:12:db:5d:64:7d:54:7d:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:26:9E:A1:6C:87:FC:FE:E6:E6:D7:4C:27:F3:58:86:2A:4C:D6
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:dd:af:33:e9:6f:cc:7c:60:de:f4:ac:fc:ad:8a:67:f7:
ee:71:a2:d5:7d:4a:7a:cb:ec:f7:0f:40:30:7a:0f:58:c4:fc:
b1:d2:1f:cf:b5:51:eb:8b:41:79:79:82:a5:08:dd:dd:30:80:
39:66:c3:c5:4b:a4:e4:52:3e:56:29:56:a7:31:b3:16:bf:af:
cc:39:5b:da:7e:d6:b8:f4:5a:0a:fc:cf:d6:48:1b:6b:c8:11:
6f:d0:0e:f0:72:d2:dc:2f:13:7b:c6:9b:3b:b4:14:7a:68:93:
6e:66:53:aa:bb:38:b8:24:6d:54:15:87:f3:45:bd:b6:27:60:
78:df:3e:57:e6:01:57:d3:70:c7:df:8b:52:4e:30:48:b2:f7:
27:24:9a:d7:88:72:76:95:05:db:ba:ff:3d:4a:12:43:d6:df:
25:88:10:c2:67:d3:bd:ed:40:d3:3a:5a:b1:e4:62:f8:42:a2:
9a:4f:d9:ff:f2:04:f5:f0:17:51:15:0e:a5:61:82:e2:84:cc:
3d:36:8c:32:0b:92:68:c0:b6:8a:85:13:d1:e0:72:1e:c9:9e:
68:3d:31:74:78:9d:a6:0f:e7:45:70:f2:dc:40:4c:af:0d:ee:
fe:0e:09:69:e3:b1:e9:75:e9:32:d8:d3:6e:a7:60:af:8b:4d:
ac:cd:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:21 2026 by rpki-client