Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: tNi6xNDN1oX6CeqHeOFS7XH6fwW8cafz4DjuwJ6AjlU=
Subject key identifier: BE:D2:52:87:F3:45:0B:93:21:27:C8:71:32:56:CF:00:DC:49:38:AA
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019D26CD1722324865AAEC5CFEE993D6B20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 0712
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: WSJ6H2Zcej22QkgyYiDst9DcfPXjnMpc6YGyQbMqX5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:17:22:32:48:65:aa:ec:5c:fe:e9:93:d6:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=bed25287f3450b932127c8713256cf00dc4938aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:2a:0c:9f:dd:cd:52:b5:78:b7:ee:fe:87:
69:ea:61:bf:6d:a9:37:bb:61:9d:1c:c0:b7:f7:1f:
b5:2e:f5:fd:87:38:a8:d2:e0:9a:82:57:61:3b:45:
d3:fa:b3:c6:fc:42:2c:67:4f:9f:cc:7d:1d:b1:d5:
0e:5c:26:e3:3c:7e:28:0c:10:8f:67:91:b9:41:1e:
0e:a9:db:e9:49:34:b2:a7:06:28:03:bd:14:dc:80:
83:20:87:cd:0f:93:b8:9d:fe:84:c0:26:a6:5f:e3:
3c:82:d4:bd:94:47:2c:f5:90:37:f1:25:22:c5:d4:
ea:4b:a5:c3:d6:3c:e0:86:3d:7c:73:07:9c:d4:cf:
4f:5f:e3:8c:d0:e9:19:fe:01:37:c8:e4:a8:32:e9:
88:76:2f:93:81:a5:14:00:e6:36:3d:02:3c:9e:68:
2a:90:b4:ed:f8:a7:c7:66:e5:34:b7:24:bd:34:56:
fe:d2:b5:9e:f8:db:eb:bd:da:ef:ec:0e:14:ae:5c:
aa:39:02:16:a4:9e:cf:44:81:5b:a2:26:d5:23:26:
bd:86:e3:79:f9:93:df:2a:2a:54:c0:60:fb:7c:09:
b4:93:ab:0d:5b:85:52:c7:3d:1a:60:c0:de:e3:a7:
36:08:2f:03:cf:a5:d6:c2:03:71:47:5d:89:bd:77:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:52:87:F3:45:0B:93:21:27:C8:71:32:56:CF:00:DC:49:38:AA
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:dc:28:2a:22:05:ba:e3:55:78:e3:52:f9:19:b2:97:17:
6c:70:ec:d6:e8:ac:ac:aa:fb:00:cd:fa:4a:7b:ae:e4:e3:e6:
f2:a5:2a:bb:df:1a:2a:2a:67:bb:b9:38:78:2b:0c:8d:1e:24:
0c:60:46:57:bb:51:c3:f5:43:f4:05:c4:0b:7e:b5:95:b7:5b:
c7:50:31:75:ad:02:1f:8a:8a:dc:b9:da:4b:88:2c:7e:ed:51:
e5:d0:70:4a:1a:56:47:5e:11:97:d3:fe:da:20:c4:d0:86:0e:
39:00:2a:a5:3e:bf:66:ae:00:f3:b6:8b:8c:5b:8a:55:f5:03:
3c:85:30:41:a1:de:cf:77:38:77:45:df:5f:53:8f:9c:26:c5:
d9:f9:b6:b1:ba:b0:eb:14:a2:20:7f:24:01:0f:f6:78:7c:1f:
4d:01:54:c1:0c:8a:73:9d:b2:9b:43:43:04:48:76:88:89:57:
12:c0:56:eb:c3:1a:ed:1c:ed:18:6c:1d:ba:40:37:10:64:79:
36:de:b1:52:eb:a3:cd:05:c4:64:dc:1f:ef:37:1c:41:66:d1:
e4:ac:cb:3b:b0:80:da:73:c7:2d:74:f6:4c:24:0f:dc:5c:29:
c2:21:85:1c:be:4f:53:1b:25:33:9f:94:03:10:62:07:e5:cf:
e1:e1:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:27 2026 by rpki-client