Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: Ia1bXxh5v+/8SdrugZptgdOWaUIJareD5LgFEEAwi50=
Subject key identifier: 92:45:3E:1B:51:0A:BF:17:08:97:D5:57:CF:63:7A:24:2C:85:A4:06
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019D28F33AE03C4621F77275D3981CBBEB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 16F7
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: 6mzt5k7ma1OIfxfsqjpi1sLKArk.roa (hash: j+z9itv5QPm1Cm5ssdHMQN0axYPfGR0shYkhzYtPPJc=)
2: CTOyFd7xxedt8gHWnQIE-RQ60pc.roa (hash: 6/Kpi6k8YzlzyuFB/7a9S47pkbxW1wbI017oLoOv9+w=)
3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: xGzB+ykfpx2a6XmVky7OyDtIA7+JzBj/vqDgdcWKYeo=)
4: expyzDal9dyEO6AFHdQGKdXEBsY.roa (hash: iLVxq0kIQdGLyoYwWNpmclsxteFDJV8ZKEEfelvR8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3a:e0:3c:46:21:f7:72:75:d3:98:1c:bb:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=92453e1b510abf170897d557cf637a242c85a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:0a:a5:c6:dd:f9:5f:c3:95:b4:0f:89:b6:
a6:77:d7:32:c5:5f:98:af:33:6d:c3:27:94:66:27:
42:a1:08:bb:99:63:cd:4b:04:94:27:8c:8e:69:9e:
7e:c3:35:01:8d:de:ab:79:8e:cd:ad:f4:d4:64:85:
2c:22:35:60:66:54:f2:7f:d7:60:e8:bc:15:66:e4:
cd:04:15:64:fe:a1:4e:f2:dc:d1:2f:54:08:0e:66:
80:17:79:69:28:76:81:29:9e:1a:9e:89:e0:66:25:
d9:5c:bf:91:8d:7c:fd:d9:48:d4:88:72:28:e2:b6:
4f:ab:f3:09:75:6f:88:fb:25:5c:6b:d8:87:39:ba:
86:93:28:50:ad:38:d7:a3:07:9e:cc:cb:0a:9c:69:
28:0b:2a:9e:fa:bd:db:1f:26:8c:b4:f6:a1:a9:bf:
51:d3:43:c2:40:d6:69:32:1d:1c:57:83:ba:b1:29:
bf:2d:e8:93:f5:8a:60:ac:9d:6b:16:b8:f2:3e:49:
6d:78:b7:0c:ef:be:6a:b0:88:4f:8f:98:2c:97:1d:
fe:77:31:c2:32:d9:31:fc:d9:2d:db:24:41:96:33:
42:77:92:e1:24:5e:cf:50:5f:17:cd:2f:85:1c:53:
74:d8:f4:8d:84:30:b7:f5:ca:de:d6:6a:d5:b5:56:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:3E:1B:51:0A:BF:17:08:97:D5:57:CF:63:7A:24:2C:85:A4:06
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b3:71:8d:85:49:30:24:61:b1:fe:27:c3:05:96:a1:18:38:
dd:7a:14:99:3b:35:90:bb:ed:75:92:00:89:6c:89:a9:bb:2f:
b2:ab:0e:5e:44:6f:76:d9:5c:f5:d8:fb:04:99:6b:1f:e0:e8:
63:1f:c0:7b:1b:9a:f1:47:bc:d6:0e:42:64:ee:b2:51:99:54:
7e:3a:1b:09:30:0e:52:3c:22:4c:9e:81:d5:93:a5:75:61:fa:
78:ce:00:3b:ce:62:f0:16:a3:f1:b7:d3:7f:be:b1:36:a6:11:
b5:74:cf:0b:f4:37:0d:f8:e8:56:b7:e6:46:78:cd:8e:dc:12:
74:87:77:0c:59:87:34:6a:33:ea:57:b9:65:e2:a8:ae:34:7d:
19:5a:09:74:04:77:8b:d3:83:a1:c4:b2:10:ee:c1:4e:96:36:
5f:10:33:d0:f3:fd:26:e0:19:04:e9:17:92:ee:44:23:f6:13:
c6:f7:ff:63:94:73:c1:f1:0a:f0:f0:3c:03:ea:09:ff:4d:40:
f5:62:de:fc:9c:6a:90:e9:72:bf:fb:0c:0d:cd:52:89:cf:04:
65:4f:7e:2e:75:90:44:25:17:3c:2d:35:91:40:1f:d1:e8:d7:
1d:80:48:5d:6a:57:e5:0f:c5:3b:33:f7:9d:db:28:da:96:3d:
5e:55:90:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8zrgPEYh93J105gcu+s+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTRkNzBjZmI3ZTY5MDE5YTJlMDFjODdkMGE1ZDU0NWE1
OTliNTIwHhcNMjYwMzI2MDcwMjAyWhcNMjYwMzI3MDcwMjAyWjAzMTEwLwYDVQQD
Eyg5MjQ1M2UxYjUxMGFiZjE3MDg5N2Q1NTdjZjYzN2EyNDJjODVhNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAMKpcbd+V/DlbQPibamd9cyxV+Y
rzNtwyeUZidCoQi7mWPNSwSUJ4yOaZ5+wzUBjd6reY7NrfTUZIUsIjVgZlTyf9dg
6LwVZuTNBBVk/qFO8tzRL1QIDmaAF3lpKHaBKZ4anongZiXZXL+RjXz92UjUiHIo
4rZPq/MJdW+I+yVca9iHObqGkyhQrTjXoweezMsKnGkoCyqe+r3bHyaMtPahqb9R
00PCQNZpMh0cV4O6sSm/LeiT9YpgrJ1rFrjyPklteLcM775qsIhPj5gslx3+dzHC
Mtkx/Nkt2yRBljNCd5LhJF7PUF8XzS+FHFN02PSNhDC39cre1mrVtVZ0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJFPhtRCr8XCJfVV89jeiQshaQGMB8GA1UdIwQY
MBaAFCyU1wz7fmkBmi4ByH0KXVRaWZtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTkt
NjlmYzA1NmIyNjI1LzEvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTktNjlmYzA1NmIyNjI1
LzEvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7NxjYVJ
MCRhsf4nwwWWoRg43XoUmTs1kLvtdZIAiWyJqbsvsqsOXkRvdtlc9dj7BJlrH+Do
Yx/Aexua8Ue81g5CZO6yUZlUfjobCTAOUjwiTJ6B1ZOldWH6eM4AO85i8Baj8bfT
f76xNqYRtXTPC/Q3DfjoVrfmRnjNjtwSdId3DFmHNGoz6le5ZeKorjR9GVoJdAR3
i9ODocSyEO7BTpY2XxAz0PP9JuAZBOkXku5EI/YTxvf/Y5RzwfEK8PA8A+oJ/01A
9WLe/JxqkOlyv/sMDc1Sic8EZU9+LnWQRCUXPC01kUAf0ejXHYBIXWpX5Q/FOzP3
ndso2pY9XlWQQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:20 2026 by rpki-client