Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: Hq0mElXls49ErVvFArArbfRh4qwGSMk55m2oBiKCIDg=
Subject key identifier: D6:A4:58:50:90:AE:F5:07:F9:A6:6B:8C:7F:8B:B1:78:E2:78:DB:93
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019D2AE030F931CF178E73C03B0857F3A36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 16F8
Signing time: Thu 26 Mar 2026 16:00:28 +0000
Manifest this update: Thu 26 Mar 2026 16:00:28 +0000
Manifest next update: Fri 27 Mar 2026 16:00:28 +0000
Files and hashes: 1: 6mzt5k7ma1OIfxfsqjpi1sLKArk.roa (hash: j+z9itv5QPm1Cm5ssdHMQN0axYPfGR0shYkhzYtPPJc=)
2: CTOyFd7xxedt8gHWnQIE-RQ60pc.roa (hash: 6/Kpi6k8YzlzyuFB/7a9S47pkbxW1wbI017oLoOv9+w=)
3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: wGkJwFTtW9rV2z1L0m2tFjycx8r374jtA3Dlz0h6n/M=)
4: expyzDal9dyEO6AFHdQGKdXEBsY.roa (hash: iLVxq0kIQdGLyoYwWNpmclsxteFDJV8ZKEEfelvR8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:30:f9:31:cf:17:8e:73:c0:3b:08:57:f3:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Mar 26 16:00:28 2026 GMT
Not After : Mar 27 16:00:28 2026 GMT
Subject: CN=d6a4585090aef507f9a66b8c7f8bb178e278db93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:51:fa:ab:e3:2b:df:c7:64:00:62:fa:22:
95:b1:5f:70:0e:ad:a4:33:2b:bc:9e:d0:a4:94:d9:
43:f4:02:53:53:3f:f4:8e:73:a9:f1:82:6e:54:c9:
2e:c2:b7:61:35:7a:48:22:71:6e:4b:58:77:ff:37:
04:6b:4d:6b:82:c1:8f:ff:bb:10:0f:98:70:bf:50:
50:3c:88:8d:10:e1:2d:19:b5:d3:7e:b7:84:e1:bd:
bf:bf:1d:7a:f7:96:ca:dd:8c:9a:fa:8d:c4:77:17:
20:a0:87:73:68:c7:fa:ad:70:37:38:5c:69:de:1f:
db:ac:06:cf:b5:1c:1c:8b:cb:69:c3:7f:dd:f2:79:
a3:aa:86:6c:b4:82:9a:08:6f:d7:a0:10:d0:3b:73:
3e:33:a4:7b:91:e3:8c:4d:90:d4:f8:31:96:75:59:
fc:25:c3:e9:5b:fa:c1:10:32:05:d5:3b:d1:98:92:
8f:36:c3:ee:50:3f:76:4c:82:79:e1:32:23:21:5b:
dd:69:4b:08:6a:ca:8e:25:8b:7b:3b:56:5c:b3:fd:
64:62:8f:98:c9:03:3e:1e:2b:18:cb:42:ec:8f:7f:
11:38:46:ff:4b:0c:af:08:cc:a7:81:a2:ad:4a:d9:
da:d7:f7:be:03:21:8e:94:46:b9:7a:d8:2e:c4:7e:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:58:50:90:AE:F5:07:F9:A6:6B:8C:7F:8B:B1:78:E2:78:DB:93
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bd:37:b7:7f:03:bb:47:19:cf:a5:81:ca:05:f3:0a:00:8e:
b3:cc:5a:26:40:4e:61:17:61:6a:6f:b3:9f:5e:1d:af:c9:3c:
d9:e7:f8:41:0d:d7:ea:d4:ff:e1:96:d6:7b:41:9f:ea:cb:5f:
75:e2:fd:91:a7:94:cc:93:f1:08:8b:5e:49:65:5d:26:ed:72:
de:a2:d0:83:a4:aa:b0:d9:56:53:09:bc:e2:b9:99:3f:a3:8f:
f8:db:5e:af:4f:73:19:c9:b5:d7:ac:1d:a9:91:bc:16:2f:1a:
2d:a8:cc:e9:23:d2:a4:a4:91:e8:d4:04:c4:dc:26:56:e3:01:
f4:cf:5f:13:fc:35:1c:bb:da:b2:1e:e0:34:2d:ee:9f:45:4d:
d7:dd:8e:f4:1f:df:4b:05:0e:a5:20:99:16:3a:a6:6a:98:61:
85:6b:8a:10:3c:fa:db:63:d8:04:d4:a4:64:c4:fc:47:bf:a1:
71:e9:c6:8c:72:97:38:66:b7:91:40:98:ef:8c:91:d6:a8:36:
ce:69:cf:21:8d:e3:51:90:3d:61:f4:0f:58:01:8e:9b:dc:e1:
35:34:8e:8a:fc:af:ce:cb:58:46:9a:12:1e:52:79:52:cf:01:
22:c9:7a:12:24:11:01:f6:99:94:19:d9:f0:10:43:d6:7f:20:
e7:18:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:51 2026 by rpki-client