Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
File: lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft (raw, json)
Hash identifier: 1rFkii4AkodNxAG3mRZ+MJ9F3OtOPkO0H5jWVDvRF5k=
Subject key identifier: 5B:39:07:4C:E9:D0:90:0B:97:60:8B:AC:70:82:0E:4A:4D:3A:63:79
Authority key identifier: 94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
Certificate issuer: /CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Certificate serial: 01A1DE032E099CA1BEA3DC39FDC0F0506E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
Manifest number: 0129
Signing time: Sun 15 Nov 2026 07:01:52 +0000
Manifest this update: Sun 15 Nov 2026 07:01:52 +0000
Manifest next update: Mon 16 Nov 2026 07:01:52 +0000
Files and hashes: 1: e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa (hash: V3dxX8nRKOg3+e1hOcKrnPrRXrDt/Vgdwrv2Gxb63Tk=)
2: lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl (hash: HlLz+Tvct4hQn+FcYsLkGPWUTBqy3cD9D0f17SLE+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:2e:09:9c:a1:be:a3:dc:39:fd:c0:f0:50:6e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Validity
Not Before: Nov 15 07:01:52 2026 GMT
Not After : Nov 16 07:01:52 2026 GMT
Subject: CN=5b39074ce9d0900b97608bac70820e4a4d3a6379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:77:1f:34:07:e7:0e:ff:a3:2e:b8:72:af:
04:af:e8:c9:a3:2f:31:c4:11:7f:92:f8:2b:0d:83:
d3:09:b8:23:2e:9d:51:ca:8d:1c:17:6b:7f:f3:13:
aa:7d:be:6d:af:71:05:d6:c2:9b:b5:3b:81:cb:e4:
c1:69:86:26:fe:a1:ec:9d:5e:68:19:4b:50:ec:cd:
65:94:e7:ad:de:b3:fd:4b:bd:80:a5:c8:c5:b8:6b:
f9:3d:4e:9d:c6:07:c2:a1:2c:54:92:8f:bf:74:98:
b9:dc:61:00:e4:21:9e:9e:3e:63:68:80:32:a6:4e:
e6:44:49:a9:7d:6c:bd:7a:2e:a5:15:82:a7:61:88:
c6:e7:a5:5a:d5:d6:7c:f1:b5:12:fe:6e:ae:49:17:
fa:43:61:11:09:cb:c5:a1:41:4d:24:96:2c:71:cc:
0f:cf:82:3d:19:82:04:e1:31:27:ee:00:f6:ef:f4:
e9:db:d4:ba:24:48:cc:c3:eb:c3:83:66:11:23:90:
22:51:7a:8c:f7:74:0a:7c:5e:e2:aa:bc:da:7d:60:
f1:9a:a7:95:48:83:4b:77:b0:a5:35:9f:a9:6b:2d:
63:ef:97:14:d7:fa:6c:d0:2e:fb:72:b6:ba:73:36:
83:e5:2f:9c:da:44:d5:e9:0b:3c:8d:8e:92:f5:fd:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:39:07:4C:E9:D0:90:0B:97:60:8B:AC:70:82:0E:4A:4D:3A:63:79
X509v3 Authority Key Identifier:
keyid:94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c5:32:8f:97:0d:bf:87:22:00:be:59:2d:ad:37:88:0b:ea:
37:e4:82:14:54:5b:f6:9e:76:23:6a:aa:09:90:58:57:95:3d:
23:f1:6f:32:76:4d:c9:60:0e:af:8c:b2:a9:24:e0:62:4a:09:
bf:b2:95:da:72:f7:08:dd:16:3a:65:a0:4e:ca:2f:b4:3b:65:
d3:4b:c0:cd:7d:c7:14:ee:20:66:66:1a:60:7a:7c:11:c4:1b:
2f:1e:47:03:f1:9e:88:1e:da:b7:e2:b3:4b:f6:eb:b0:ba:cb:
21:99:31:80:81:ac:27:18:01:cc:1b:37:5d:7f:eb:29:f2:f0:
14:e2:3b:29:1a:8a:8c:42:4a:61:9e:b1:89:73:7f:01:e8:83:
54:cb:ac:ce:e7:cf:15:02:e0:ce:a8:dd:62:c7:a7:83:4e:af:
92:a3:f3:6a:c7:ab:82:a7:d1:df:2c:c2:67:4b:b8:14:ae:72:
37:34:23:2b:03:90:dc:9e:8a:72:5a:3c:58:2d:57:4b:6d:ff:
ea:5c:15:66:ab:97:92:08:8a:35:18:37:8b:90:9c:ec:8f:8c:
98:29:e0:70:78:8d:f2:db:4c:31:b2:9a:bf:66:91:a6:55:b3:
be:bf:8d:40:32:85:9d:be:bd:d5:2d:56:17:a4:fb:8d:d2:88:
2b:84:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:05 2026 by rpki-client