Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: nawdObWz76YpqPzXvn6+dYL6oxSWLEtiY8eYsF3fvvg=
Subject key identifier: C0:72:72:2B:2A:C3:02:FE:77:F2:BE:13:4B:EA:2E:84:4D:04:8E:8E
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019D269627D89F79DF67A9DE5EFC3264BEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 162B
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: biYpVxYdZtre6Sttr5zSzODarRDplMjIHV/u8DaUAcE=)
2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:27:d8:9f:79:df:67:a9:de:5e:fc:32:64:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=c072722b2ac302fe77f2be134bea2e844d048e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:2a:09:53:be:70:51:c9:3c:99:2d:ba:41:
84:23:0b:59:fd:45:f9:00:e8:22:49:c1:d7:a8:cf:
f8:24:4f:5c:54:97:22:e0:50:c5:e2:f9:65:60:e8:
5c:54:cb:59:92:48:89:b7:09:5f:94:4a:c2:46:ee:
55:ad:84:aa:ba:d3:31:c8:39:cd:7f:df:3f:a2:f6:
ed:e7:02:73:be:35:29:8a:83:e8:a9:19:63:58:a6:
1a:6a:77:07:93:ea:45:8a:f2:67:e1:af:3f:fe:fb:
8e:ad:8f:2c:26:65:53:7e:2a:9f:7b:11:fb:8b:83:
d9:57:2e:37:23:47:b4:18:02:61:f7:05:f3:6b:a2:
29:99:5b:8d:94:55:d6:c1:89:d5:e2:fa:d2:d8:1f:
76:c9:14:d6:42:cb:ff:f2:df:05:eb:c8:db:6e:fa:
73:45:6c:df:6e:f6:1d:99:fd:51:f5:f0:95:eb:8f:
44:3d:c8:e5:8c:48:55:70:bc:f0:d3:5c:3f:8e:ed:
d2:99:eb:59:9d:b1:b8:eb:77:11:07:70:9c:95:ce:
73:f4:15:13:40:cb:f9:cf:7b:8e:9f:c7:8a:a0:cd:
04:e2:e0:e9:de:df:9a:0e:76:ae:2f:4f:84:e4:b8:
fd:a3:39:a9:d4:0f:2c:5e:7d:ab:a8:38:7b:3f:4a:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:72:2B:2A:C3:02:FE:77:F2:BE:13:4B:EA:2E:84:4D:04:8E:8E
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:90:89:1d:05:85:20:39:de:85:2f:70:03:7c:1f:a2:2c:
eb:32:39:f9:50:89:a1:d9:14:b2:07:52:35:01:05:c0:85:66:
40:85:36:fc:e3:25:b2:dd:76:44:37:f1:c4:65:d4:78:6f:20:
f0:81:23:8c:e5:90:e6:2c:0f:9e:56:15:77:84:25:fe:2d:fc:
ca:94:52:c8:3b:bb:ce:0a:a1:4f:2f:e7:58:7b:ca:e9:6c:4e:
f5:84:54:cf:cc:12:bd:0f:20:c6:72:28:7b:ba:90:56:d7:cb:
46:69:52:05:04:bd:1e:7f:f0:59:37:a3:47:73:f1:48:a2:8b:
87:05:fe:42:4d:3d:78:b3:b2:10:75:a0:e2:39:97:77:be:c5:
fd:33:80:8d:83:25:e3:bd:6a:2d:af:61:c8:bf:4d:10:6e:1a:
12:09:bc:e2:b1:a6:97:e0:a5:d1:78:fc:f3:91:71:2a:c2:da:
21:58:30:55:c0:18:5c:5e:ca:fb:2f:ad:3d:5e:bd:bf:50:4a:
a1:cb:8e:73:90:38:0b:59:7e:da:fe:76:5c:52:a5:2a:80:14:
cc:de:53:a6:4b:9f:9f:55:29:9f:eb:91:29:5c:98:d4:d9:bb:
46:e0:63:5f:eb:72:9b:2e:e7:7a:95:ba:0e:2c:16:98:b2:19:
b2:ae:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:39 2026 by rpki-client